Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1-IM2h-5EweK_BbRJz4rwWMpNp9c.roa
File: 1-IM2h-5EweK_BbRJz4rwWMpNp9c.roa (raw, json)
Hash identifier: uqN1Zb14/vWy25PAxvADW5gitbxcP4HpkO2BvinYSrc=
Subject key identifier: F8:83:36:87:EE:44:C1:E2:BF:05:B4:49:CF:8A:F0:58:CA:4D:A7:D7
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019FF60CF1DDDDEEA54EA01CB2CA3B104202
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1-IM2h-5EweK_BbRJz4rwWMpNp9c.roa
Signing time: Wed 12 Aug 2026 12:57:51 +0000
ROA not before: Wed 12 Aug 2026 12:57:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 150.251.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:0c:f1:dd:dd:ee:a5:4e:a0:1c:b2:ca:3b:10:42:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Aug 12 12:57:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8833687ee44c1e2bf05b449cf8af058ca4da7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:26:72:b0:09:0a:62:92:7a:39:69:7c:27:b6:
f5:53:02:68:41:45:e6:61:94:a9:2d:aa:a4:84:77:
8b:1a:3c:35:35:df:4b:cb:3f:0c:20:b9:1c:f3:a5:
f4:09:67:97:05:16:aa:38:3a:29:f5:02:41:b8:6a:
e3:22:38:c9:14:19:59:dd:ae:e5:b3:99:fe:96:03:
30:13:e5:ab:16:60:6c:38:e9:c3:48:90:67:87:2f:
71:77:83:95:ef:c0:7a:e5:60:91:36:76:39:ed:8d:
ce:74:b5:42:93:4e:56:63:70:81:c6:d4:2b:66:bf:
61:d5:3b:1e:40:f9:18:cf:3c:b2:39:6d:27:36:6e:
16:88:3c:f6:af:ca:8d:ec:06:8d:26:aa:12:13:f7:
50:c4:d6:b5:ed:0a:ea:3b:14:b3:cb:5f:1d:11:ab:
30:c5:52:22:cb:83:5f:74:1c:23:18:08:8f:31:00:
af:dc:3f:7b:c3:19:e5:00:27:65:39:9f:7b:2b:ae:
90:41:09:42:b2:8a:82:f9:db:8f:e4:8d:b8:5e:20:
11:2a:7a:ae:31:0f:fb:3f:b4:53:ca:4f:62:2a:14:
6f:08:da:6f:ef:52:ba:af:e6:99:a1:c6:eb:7d:27:
fd:7c:35:17:00:4a:14:86:08:fe:51:2c:99:8d:b2:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:83:36:87:EE:44:C1:E2:BF:05:B4:49:CF:8A:F0:58:CA:4D:A7:D7
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1-IM2h-5EweK_BbRJz4rwWMpNp9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.155.0/24
Signature Algorithm: sha256WithRSAEncryption
46:46:91:6a:cb:9e:6e:f9:a7:d6:29:50:d5:74:c4:7d:9e:f6:
c7:fc:43:40:7f:2f:e5:de:9e:2e:cf:de:79:77:99:34:df:57:
04:c6:39:6f:e4:7a:2e:cd:ac:48:7c:95:16:cc:2e:fc:2d:8f:
4c:30:d1:81:7f:71:35:52:25:06:f2:1d:51:b0:9b:07:da:31:
16:12:23:a2:2e:18:14:64:4c:10:7c:0d:99:1f:6c:8e:e0:20:
6d:31:23:52:22:fd:03:a2:ab:86:9d:28:d4:f2:f3:3d:2b:2e:
69:fc:93:28:01:c6:d0:93:45:7a:76:40:44:cc:db:78:d7:24:
58:1d:3c:9f:a5:d1:70:41:2f:e4:d1:d7:af:65:93:69:ac:7d:
83:b6:ec:c0:2b:ab:f8:c0:a2:53:c3:da:51:57:db:fc:04:d6:
10:24:bc:a1:4b:97:34:7e:b8:05:16:59:74:d2:3b:dc:b3:b3:
da:81:41:da:25:b7:f4:1c:d1:f9:36:ee:54:9b:86:9d:e7:6e:
16:5d:e8:48:fa:b8:0c:a0:41:2c:cd:8f:f6:28:bd:f3:c3:fa:
2b:23:25:8a:01:b9:c3:55:00:8a:f2:4f:d1:2b:29:81:d4:6f:
b5:a8:5d:01:8e:7e:cd:69:79:f3:11:31:dc:02:5f:12:c2:29:
b1:84:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:25:31 2026 by rpki-client