Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/0J3GTzpDKLmLlTuMJHIrP89fMcY.roa
File: 0J3GTzpDKLmLlTuMJHIrP89fMcY.roa (raw, json)
Hash identifier: b3YWLAwxBQkF6Gprs4OKWdRwlsM21n92wGkI8J5297I=
Subject key identifier: D0:9D:C6:4F:3A:43:28:B9:8B:95:3B:8C:24:72:2B:3F:CF:5F:31:C6
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A14975BA947491918C46E2F77CCCC2D52E
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/0J3GTzpDKLmLlTuMJHIrP89fMcY.roa
Signing time: Sat 17 Oct 2026 10:43:34 +0000
ROA not before: Sat 17 Oct 2026 10:43:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 150.237.72.0/24 maxlen: 24
150.237.73.0/24 maxlen: 24
150.237.74.0/24 maxlen: 24
150.237.75.0/24 maxlen: 24
150.237.77.0/24 maxlen: 24
150.237.79.0/24 maxlen: 24
150.237.80.0/24 maxlen: 24
150.237.88.0/24 maxlen: 24
150.237.89.0/24 maxlen: 24
150.237.90.0/24 maxlen: 24
150.237.91.0/24 maxlen: 24
150.251.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:75:ba:94:74:91:91:8c:46:e2:f7:7c:cc:c2:d5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 17 10:43:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d09dc64f3a4328b98b953b8c24722b3fcf5f31c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:ff:95:67:03:6d:d3:24:25:70:c1:38:b5:
db:07:cb:d0:15:af:c5:ec:aa:db:0b:68:8a:5b:37:
f8:0b:73:ce:3f:b1:d7:96:53:77:b4:ba:65:1a:78:
2f:34:a5:58:5d:26:03:59:27:f5:3c:6f:91:e5:f7:
b7:19:fe:01:3b:c0:95:1a:68:60:73:ad:ae:99:a0:
49:f4:4c:3b:df:02:03:a1:94:dc:b6:7f:f0:d9:1c:
20:bf:78:8a:80:a1:2c:ba:06:16:e0:87:9e:90:57:
d7:91:58:30:56:11:23:5a:74:b8:dc:e3:72:46:a1:
53:e0:00:96:f2:b5:c5:48:66:75:8d:4d:ce:8e:73:
06:18:9a:49:75:2b:32:49:4b:ec:4e:ca:9a:4e:19:
24:32:e3:fb:4e:e0:47:4d:38:78:04:82:76:b5:ac:
b6:78:eb:ea:ee:80:b7:80:58:ba:ff:9e:ab:b0:3c:
22:3a:e9:73:bb:b8:6e:2c:b6:9c:85:ff:d8:b8:a2:
da:b9:a7:16:35:55:a0:05:c7:6c:d9:5d:ea:5e:2d:
67:b7:ec:b0:55:ab:9c:0b:0a:c0:c4:a6:37:1b:7e:
9f:86:df:bc:f0:ec:90:6a:a1:49:65:61:b3:a9:bf:
58:60:e7:b2:ca:e6:2c:b4:e8:73:e3:11:d7:3e:8b:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9D:C6:4F:3A:43:28:B9:8B:95:3B:8C:24:72:2B:3F:CF:5F:31:C6
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/0J3GTzpDKLmLlTuMJHIrP89fMcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.72.0/22
150.237.77.0/24
150.237.79.0-150.237.80.255
150.237.88.0/22
150.251.144.0/24
Signature Algorithm: sha256WithRSAEncryption
58:6d:9b:12:44:dd:66:3c:2d:65:7a:3c:c0:c5:f6:cd:0f:0d:
1d:4e:d9:b7:cd:92:d4:fd:4d:1b:a3:66:45:c0:a2:56:22:14:
31:87:08:81:1b:dd:22:17:00:ae:8b:cb:17:b3:de:93:61:52:
cf:e3:47:78:3a:56:60:04:2d:18:da:30:ea:23:53:0c:69:a7:
04:1a:b3:2e:09:e3:ae:2b:87:df:f3:5d:d3:cf:74:fd:76:55:
d2:46:c4:2c:27:66:44:2c:73:75:a9:61:4f:87:b2:e1:af:a4:
88:53:28:b2:52:74:74:ce:42:a5:1b:0a:dc:8c:6c:ce:8c:8b:
75:fd:4c:56:32:17:4a:c1:d9:d5:be:3e:4e:94:c0:be:40:f2:
2f:3f:26:e3:41:23:f0:d0:d3:a7:43:ca:4a:2a:40:7f:44:e1:
59:fc:1d:06:42:7b:7f:4e:c7:96:e1:11:1b:c5:cf:e6:4b:37:
46:29:17:a4:a4:2b:05:45:a5:dd:e6:2a:f1:3e:97:e9:6f:42:
f8:d6:b4:b6:8a:e9:90:ef:a5:fc:23:94:84:2a:d3:76:8d:03:
b9:ff:74:86:7a:89:e3:eb:90:36:58:0f:a7:a0:29:7c:c0:e9:
cb:6c:6e:5d:32:d4:87:66:18:50:68:4d:e1:8d:9f:6c:d6:ad:
36:36:0e:b9
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaFJdbqUdJGRjEbi93zMwtUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYxMDE3MTA0MzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDlkYzY0ZjNhNDMyOGI5OGI5NTNiOGMyNDcyMmIzZmNmNWYzMWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mT/lWcDbdMkJXDBOLXbB8vQFa/F
7KrbC2iKWzf4C3POP7HXllN3tLplGngvNKVYXSYDWSf1PG+R5fe3Gf4BO8CVGmhg
c62umaBJ9Ew73wIDoZTctn/w2Rwgv3iKgKEsugYW4IeekFfXkVgwVhEjWnS43ONy
RqFT4ACW8rXFSGZ1jU3OjnMGGJpJdSsySUvsTsqaThkkMuP7TuBHTTh4BIJ2tay2
eOvq7oC3gFi6/56rsDwiOulzu7huLLachf/YuKLauacWNVWgBcds2V3qXi1nt+yw
VaucCwrAxKY3G36fht+88OyQaqFJZWGzqb9YYOeyyuYstOhz4xHXPotU/wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFNCdxk86Qyi5i5U7jCRyKz/PXzHGMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvMEozR1R6cERLTG1MbFR1TUpISXJQODlmTWNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQClu1IAwQA
lu1NMAwDBACW7U8DBACW7VADBAKW7VgDBACW+5AwDQYJKoZIhvcNAQELBQADggEB
AFhtmxJE3WY8LWV6PMDF9s0PDR1O2bfNktT9TRujZkXAolYiFDGHCIEb3SIXAK6L
yxez3pNhUs/jR3g6VmAELRjaMOojUwxppwQasy4J464rh9/zXdPPdP12VdJGxCwn
ZkQsc3WpYU+HsuGvpIhTKLJSdHTOQqUbCtyMbM6Mi3X9TFYyF0rB2dW+Pk6UwL5A
8i8/JuNBI/DQ06dDykoqQH9E4Vn8HQZCe39Ox5bhERvFz+ZLN0YpF6SkKwVFpd3m
KvE+l+lvQvjWtLaK6ZDvpfwjlIQq03aNA7n/dIZ6iePrkDZYD6egKXzA6ctsbl0y
1IdmGFBoTeGNn2zWrTY2Drk=
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:07 2026 by rpki-client