Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/1-CD9WZWsXAhb3j15mUQz0BlRmbc.roa
File: 1-CD9WZWsXAhb3j15mUQz0BlRmbc.roa (raw, json)
Hash identifier: qXfCIaOSDh8puv0+WYI5L8Y0QRjLc+Bn88WAF3QiDWU=
Subject key identifier: F8:20:FD:59:95:AC:5C:08:5B:DE:3D:79:99:44:33:D0:19:51:99:B7
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01A13FA8A49047DADCEF74E2054D1D68A15E
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/1-CD9WZWsXAhb3j15mUQz0BlRmbc.roa
Signing time: Thu 15 Oct 2026 13:02:59 +0000
ROA not before: Thu 15 Oct 2026 13:02:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43969
IP address blocks: 150.107.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a8:a4:90:47:da:dc:ef:74:e2:05:4d:1d:68:a1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Oct 15 13:02:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f820fd5995ac5c085bde3d79994433d0195199b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:d3:c1:82:38:9b:75:e3:a4:ce:02:53:04:
67:80:a2:50:15:84:da:c8:be:d9:a4:6c:58:79:07:
9f:fb:02:e9:e9:cb:bb:1e:69:bf:47:a8:a0:8d:22:
d3:2a:17:bc:77:9f:e6:2d:5f:ea:50:30:aa:ab:40:
2e:b1:78:a7:31:c1:11:7b:27:6c:6f:53:37:a7:b7:
c2:9a:85:65:5f:b3:2d:ee:22:45:95:64:3e:03:c1:
58:80:51:57:39:08:01:ec:37:4f:18:47:ad:f8:92:
b7:1b:1c:3b:12:2b:bb:e6:28:6d:d2:89:91:1d:8b:
4d:64:06:3f:57:d9:50:c5:be:f0:1f:7f:41:89:12:
a9:06:79:2f:3a:96:f6:bf:3e:56:2d:e5:ec:ed:07:
0a:ef:5e:dc:86:5a:c1:fb:fb:40:ae:22:71:51:3b:
43:ba:01:6d:2b:d6:88:a8:12:e9:86:6a:33:78:5f:
b6:40:6f:58:b1:03:eb:76:67:d1:d5:95:01:c7:b4:
78:29:3a:48:fb:d9:fc:75:99:2d:8e:3e:85:8f:af:
1a:ad:f1:e6:98:3c:a0:35:af:7e:21:57:df:82:78:
25:61:c1:24:66:26:eb:c8:02:fd:47:ab:f4:a1:7a:
5f:b3:1d:46:b3:de:05:8f:20:e9:26:87:dc:b1:93:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:20:FD:59:95:AC:5C:08:5B:DE:3D:79:99:44:33:D0:19:51:99:B7
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/1-CD9WZWsXAhb3j15mUQz0BlRmbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.200.0/24
Signature Algorithm: sha256WithRSAEncryption
32:dd:eb:38:72:a0:9f:fe:be:fa:d0:5a:03:61:95:1d:05:47:
2a:81:72:af:6a:2f:c8:c5:11:3a:86:a3:34:52:e1:55:72:29:
3f:65:14:a9:f4:83:63:ae:56:eb:91:1c:09:b5:92:1d:29:a2:
7c:a7:c3:37:09:ac:a0:55:d7:fb:5b:74:c9:86:bd:eb:1f:69:
3e:93:db:e6:de:09:e3:93:61:e9:5c:88:1a:9f:08:dd:13:af:
b8:31:bd:41:b2:41:06:27:c7:a0:7b:89:dd:ec:40:f5:fc:1f:
10:39:7b:90:f2:6a:08:c4:80:c6:54:0b:55:45:84:7e:b7:53:
a9:9e:af:77:30:73:6b:18:a5:a9:41:f9:ab:94:13:0a:76:b7:
d5:0a:13:ed:d5:0b:cf:e8:42:98:d2:a3:f5:cf:4f:22:15:4f:
06:62:2d:6d:9f:80:5a:cc:b4:23:d9:1f:68:a9:09:fa:54:b7:
8e:f5:37:2a:24:64:5b:e7:ce:25:40:22:61:d3:95:8d:74:da:
88:4f:5c:1a:33:2a:87:f6:d5:d6:f9:92:b4:9c:f6:76:53:c6:
01:94:aa:72:48:d1:20:0f:60:bf:3a:f9:0d:9b:b1:d1:93:99:
82:ba:2d:5d:1c:d9:56:f9:70:d1:42:76:36:f9:ce:02:4b:50:
73:b6:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:54:43 2026 by rpki-client