Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/O5KMEo3nUMTHgIXl-MxoBnbXu9w.roa
File: O5KMEo3nUMTHgIXl-MxoBnbXu9w.roa (raw, json)
Hash identifier: 6+hCYBTgwUVcXE56vlOpY5FkAqNhpST7AvnBpskJhmM=
Subject key identifier: 3B:92:8C:12:8D:E7:50:C4:C7:80:85:E5:F8:CC:68:06:76:D7:BB:DC
Certificate issuer: /CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Certificate serial: 01A16FDB9C9712F49BA22033388A170B0FEE
Authority key identifier: B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/O5KMEo3nUMTHgIXl-MxoBnbXu9w.roa
Signing time: Sat 24 Oct 2026 21:40:25 +0000
ROA not before: Sat 24 Oct 2026 21:40:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219002
IP address blocks: 150.237.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:db:9c:97:12:f4:9b:a2:20:33:38:8a:17:0b:0f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Validity
Not Before: Oct 24 21:40:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b928c128de750c4c78085e5f8cc680676d7bbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:16:90:25:f3:ed:44:ec:4b:49:c0:2d:94:
3d:2f:b5:22:c1:d0:26:1d:06:80:c4:34:bf:af:fd:
88:b4:ef:e2:cb:da:43:e8:d9:d3:70:4e:a1:f8:be:
47:34:1b:5f:37:66:68:49:40:e8:db:f9:04:03:f4:
b8:bb:11:c5:fe:95:72:b7:45:f8:b6:bb:74:76:38:
3d:16:62:7b:e8:e4:e2:a8:fe:67:59:a5:8a:88:d7:
67:85:07:fe:b8:59:b9:69:bc:81:f6:aa:f0:d9:bb:
75:44:0b:39:78:e2:8e:d4:50:ca:db:6f:38:09:a1:
33:33:a6:7d:b1:90:0e:22:fb:c8:f4:3f:fd:83:b0:
c7:eb:42:ea:76:b9:17:97:e3:02:fe:a7:98:35:b3:
0c:c0:42:3b:53:ba:6d:0b:14:58:91:85:3c:57:6c:
4b:cd:19:09:fa:70:52:7a:9e:00:3f:77:38:80:3b:
b7:b8:d0:74:d0:d2:64:d7:e0:bf:19:c5:b0:a3:c5:
1e:f6:3b:f2:07:71:5c:40:a6:93:d2:7c:dc:f7:c1:
10:dc:21:dc:0b:ca:82:cf:bc:15:19:f0:61:a6:cc:
ca:4d:ef:1a:21:3c:35:65:3c:92:8e:f7:72:9b:a9:
76:ce:ad:56:4a:42:47:46:86:99:8d:53:5a:78:db:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:92:8C:12:8D:E7:50:C4:C7:80:85:E5:F8:CC:68:06:76:D7:BB:DC
X509v3 Authority Key Identifier:
keyid:B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/O5KMEo3nUMTHgIXl-MxoBnbXu9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.124.0/24
Signature Algorithm: sha256WithRSAEncryption
64:28:b1:cb:d4:76:bc:ae:cd:69:53:50:89:68:b7:3d:fd:f8:
7a:3c:48:36:89:fa:c8:b1:0e:88:b5:7f:c2:28:e4:39:a9:da:
1c:b4:88:d5:be:76:01:ef:5a:8e:cd:92:d6:52:d2:48:6e:56:
b2:f9:50:9f:c7:ea:f0:eb:68:8c:3f:61:dc:88:4d:0a:00:9d:
ef:ed:15:4c:6a:ab:2d:e0:e6:fe:7f:6f:fb:e5:6f:3e:89:7a:
a9:03:a5:25:8e:47:22:6a:4b:86:12:35:f2:fd:70:6b:c4:f6:
bf:1b:ee:f2:f1:9c:ce:79:fb:b8:03:99:a9:fe:3b:8b:25:78:
60:be:25:1b:44:7e:3e:31:91:17:7e:74:82:87:eb:dd:cf:f7:
c0:c5:ff:5b:3c:10:a1:2f:5e:54:4f:38:d6:42:65:cf:c2:eb:
41:1e:53:0a:7b:35:d2:73:4a:f8:9f:17:66:ac:f3:f5:17:ee:
c1:7e:96:90:27:03:5f:0e:73:2d:dc:30:27:b2:63:3b:f6:74:
54:f4:80:dc:0d:44:5d:b5:7e:96:6a:e1:02:88:27:0b:7d:e1:
76:64:d8:88:a8:b8:9e:ad:e8:27:6b:2c:ee:c2:4d:28:4b:92:
ed:13:2d:d3:72:84:6c:87:63:17:34:bb:a2:68:ff:3a:d0:83:
99:4a:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:12:11 2026 by rpki-client