Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/74DfVQUXE4eSjaqUSqDNeIOFcoY.roa
File: 74DfVQUXE4eSjaqUSqDNeIOFcoY.roa (raw, json)
Hash identifier: ZxQJ5XkZ3X5Lp+YPinSo64JyoiZzHBNvhuWeWxnseU4=
Subject key identifier: EF:80:DF:55:05:17:13:87:92:8D:AA:94:4A:A0:CD:78:83:85:72:86
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A11621A733B7DBDEF7C061F646056C2F30
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/74DfVQUXE4eSjaqUSqDNeIOFcoY.roa
Signing time: Wed 07 Oct 2026 11:31:06 +0000
ROA not before: Wed 07 Oct 2026 11:31:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219059
IP address blocks: 150.251.35.0/24 maxlen: 24
193.29.180.0/24 maxlen: 24
2a11:1400:5090::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:21:a7:33:b7:db:de:f7:c0:61:f6:46:05:6c:2f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 7 11:31:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef80df5505171387928daa944aa0cd7883857286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:ce:5b:50:74:48:dd:55:05:e7:ce:01:af:
86:13:d0:4b:3f:d9:28:3e:a3:99:03:8f:4a:e2:57:
fd:ab:b4:fd:8a:3f:4f:ff:df:39:88:3d:c0:3b:07:
59:f3:04:4c:31:83:77:d1:36:44:13:cf:1d:18:63:
94:37:12:bd:3e:3c:84:9c:e5:75:f4:a5:c4:5d:d5:
4f:9e:c2:3b:f6:df:4f:9c:59:c4:5e:a9:0a:36:e7:
77:c9:f7:57:ee:7d:ce:32:21:3e:70:be:bb:c5:2e:
77:ac:e0:06:37:46:6b:ea:9f:76:d0:91:85:a5:27:
f9:1c:06:0f:67:f3:b1:85:54:b7:3d:56:69:da:97:
6b:df:c6:d2:0a:c2:3c:79:71:d1:03:a0:ce:81:48:
c3:f0:75:62:48:0d:74:80:29:15:64:0e:ac:f3:93:
f9:d6:39:36:31:3c:af:9d:ea:51:7c:aa:54:c7:73:
c9:2c:6a:91:50:de:b7:75:5e:73:69:54:df:16:e7:
2e:06:cc:8e:5b:71:7c:fe:13:5c:d6:39:b7:5d:6d:
9a:39:0b:6a:d5:db:3c:11:ff:07:de:41:09:f8:01:
bc:ea:b8:a7:41:f9:73:bb:59:22:9a:a7:63:f0:5c:
9c:d8:3a:04:8a:f1:dd:fb:25:a2:f8:1f:ad:59:51:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:80:DF:55:05:17:13:87:92:8D:AA:94:4A:A0:CD:78:83:85:72:86
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/74DfVQUXE4eSjaqUSqDNeIOFcoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.35.0/24
193.29.180.0/24
IPv6:
2a11:1400:5090::/48
Signature Algorithm: sha256WithRSAEncryption
0e:2f:99:07:e0:c8:45:69:52:d9:9c:ad:9c:7e:72:fc:74:a0:
a6:b2:a6:4c:96:08:82:7c:41:c1:fa:a1:66:ca:e8:42:ce:e1:
49:33:aa:58:15:68:47:c4:01:45:f5:cf:73:47:f9:2e:e3:9e:
62:40:21:a9:e6:ab:ff:09:f4:e9:a6:4d:16:c1:ab:1a:be:7c:
57:40:bd:e5:18:98:f0:cf:6e:07:b7:c3:60:e5:e8:4c:b6:9f:
b6:4c:03:52:41:5f:7b:42:46:64:9e:ae:42:90:40:88:0d:bc:
b3:b7:7f:e9:1f:0c:25:db:e0:66:3f:3c:08:ba:3f:77:54:68:
01:26:90:20:53:80:dd:91:91:fc:b2:42:be:d1:c5:0d:9f:f3:
4e:9e:36:ce:a4:92:3b:c3:2e:23:a7:dd:8c:f4:27:30:d7:9e:
bc:8a:47:5a:50:4b:e2:22:6b:17:2f:26:21:62:0c:12:00:bd:
e5:72:9a:6d:08:e9:3b:ea:e6:12:9c:2a:01:54:0c:53:0b:15:
f1:af:bd:d3:2b:ee:b9:9e:85:c3:38:2b:39:f6:dd:6f:1e:59:
1e:5b:5b:26:33:39:4f:aa:e3:73:07:fa:0e:fb:65:3b:00:0e:
ff:98:0a:03:4b:ac:e2:46:4d:d4:25:d2:f3:5e:a1:eb:47:9e:
ee:e4:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:38 2026 by rpki-client