Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/0g2pH6hkuw7OLv2d0VVmV3ycxJM.roa
File: 0g2pH6hkuw7OLv2d0VVmV3ycxJM.roa (raw, json)
Hash identifier: b4BRk0giVMPhi5TonYPdYXVtO6Ej3lHqnp9sLCqHxs0=
Subject key identifier: D2:0D:A9:1F:A8:64:BB:0E:CE:2E:FD:9D:D1:55:66:57:7C:9C:C4:93
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019F2976425E7EEB4261D4BF570D878B23B7
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/0g2pH6hkuw7OLv2d0VVmV3ycxJM.roa
Signing time: Fri 03 Jul 2026 19:30:43 +0000
ROA not before: Fri 03 Jul 2026 19:30:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 150.251.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:76:42:5e:7e:eb:42:61:d4:bf:57:0d:87:8b:23:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jul 3 19:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d20da91fa864bb0ece2efd9dd15566577c9cc493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:3a:5f:e0:58:b1:8e:e0:e6:04:c0:e3:60:
41:f5:82:80:cb:e2:13:db:39:19:ab:77:eb:9f:83:
83:1d:92:1e:14:41:ce:e7:87:4a:9d:15:16:4b:44:
8d:df:48:a7:23:09:4b:e8:81:25:28:63:d3:bc:5a:
40:91:36:cb:3c:b5:25:e9:41:0c:86:fd:84:01:7e:
1a:73:50:78:ae:f6:50:25:9d:25:d8:9e:b8:fb:dc:
6e:eb:b3:76:8e:17:50:81:4a:30:19:28:38:e4:96:
56:20:4e:c8:8e:ae:5f:27:04:42:a9:10:1f:6d:4c:
7c:d1:96:c5:60:af:e3:d2:6b:b0:49:4b:e3:69:df:
9d:7e:f9:23:0e:6f:47:08:c5:29:60:64:ab:97:24:
1d:05:23:23:74:35:13:35:9b:49:8d:bf:6f:12:40:
82:76:2c:e7:b9:98:d8:dc:02:ca:3c:4e:ce:23:20:
29:89:e3:9d:f8:65:de:ce:6d:30:cd:92:37:60:58:
a5:e9:92:c0:60:b5:90:61:fa:03:13:71:04:24:25:
0c:ab:50:e1:e8:98:70:85:a2:22:29:10:33:b9:1a:
a6:e3:a2:8f:dc:6b:aa:09:6c:b0:c6:71:f8:19:cf:
fb:f9:f8:84:a1:51:9f:c5:65:22:25:c3:5c:8b:96:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0D:A9:1F:A8:64:BB:0E:CE:2E:FD:9D:D1:55:66:57:7C:9C:C4:93
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/0g2pH6hkuw7OLv2d0VVmV3ycxJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.35.0/24
Signature Algorithm: sha256WithRSAEncryption
44:df:74:ee:28:ea:b5:94:42:6b:e0:06:47:a9:6e:f8:fe:28:
02:13:6a:bf:56:7d:ae:5f:4b:78:fa:2d:07:3c:c3:63:e9:aa:
50:da:f4:c3:66:44:9d:58:9e:0d:8e:79:1e:63:e0:7b:92:e8:
7d:87:2f:c1:15:ba:a1:34:0f:2c:5e:21:fb:95:75:d9:10:4f:
fd:6a:1f:f5:cf:2c:36:64:ae:fc:70:90:22:bd:34:64:75:3a:
27:f0:84:c3:21:88:20:4f:5c:83:2b:24:9c:05:d1:f4:d8:3e:
66:1c:a3:53:e8:0f:78:52:b6:18:57:14:7a:e7:07:f6:c2:86:
4b:4f:6d:5a:01:63:0c:c1:a1:bb:a6:f0:a0:9a:b8:29:cb:da:
2f:c4:12:54:39:79:62:7b:f3:9e:e1:c5:f5:4a:1c:bc:a3:2c:
d5:6f:79:ef:79:db:04:13:4a:42:6b:fd:3a:97:cd:40:09:88:
e6:d3:73:31:f8:e3:a1:ac:1e:36:f6:7c:0d:43:e6:81:4d:b5:
5f:70:aa:75:81:ff:00:c9:5d:6f:ee:16:26:96:48:2b:8d:ad:
4a:c0:24:b3:9a:4b:3d:5d:f3:5a:4e:78:5c:33:b8:f1:bc:fc:
e7:e2:38:d0:7e:79:aa:2a:8e:c4:f9:40:93:ee:7d:2a:4c:e4:
1c:c6:14:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8pdkJefutCYdS/Vw2HiyO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYwNzAzMTkzMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjBkYTkxZmE4NjRiYjBlY2UyZWZkOWRkMTU1NjY1NzdjOWNjNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpE6X+BYsY7g5gTA42BB9YKAy+IT
2zkZq3frn4ODHZIeFEHO54dKnRUWS0SN30inIwlL6IElKGPTvFpAkTbLPLUl6UEM
hv2EAX4ac1B4rvZQJZ0l2J64+9xu67N2jhdQgUowGSg45JZWIE7Ijq5fJwRCqRAf
bUx80ZbFYK/j0muwSUvjad+dfvkjDm9HCMUpYGSrlyQdBSMjdDUTNZtJjb9vEkCC
diznuZjY3ALKPE7OIyApieOd+GXezm0wzZI3YFil6ZLAYLWQYfoDE3EEJCUMq1Dh
6JhwhaIiKRAzuRqm46KP3GuqCWywxnH4Gc/7+fiEoVGfxWUiJcNci5bhQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNINqR+oZLsOzi79ndFVZld8nMSTMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvMGcycEg2aGt1dzdPTHYyZDBWVm1WM3ljeEpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvsjMA0G
CSqGSIb3DQEBCwUAA4IBAQBE33TuKOq1lEJr4AZHqW74/igCE2q/Vn2uX0t4+i0H
PMNj6apQ2vTDZkSdWJ4NjnkeY+B7kuh9hy/BFbqhNA8sXiH7lXXZEE/9ah/1zyw2
ZK78cJAivTRkdTon8ITDIYggT1yDKyScBdH02D5mHKNT6A94UrYYVxR65wf2woZL
T21aAWMMwaG7pvCgmrgpy9ovxBJUOXlie/Oe4cX1Shy8oyzVb3nvedsEE0pCa/06
l81ACYjm03Mx+OOhrB429nwNQ+aBTbVfcKp1gf8AyV1v7hYmlkgrja1KwCSzmks9
XfNaTnhcM7jxvPzn4jjQfnmqKo7E+UCT7n0qTOQcxhQQ
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:56 2026 by rpki-client