Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/AwilbaZJhcQTfTHToZcA5sk3_O8.roa
File: AwilbaZJhcQTfTHToZcA5sk3_O8.roa (raw, json)
Hash identifier: FWJLBFoXA6reHsIO6gOLPiZS+TVO1hQX4D3L3Jwo9Ng=
Subject key identifier: 03:08:A5:6D:A6:49:85:C4:13:7D:31:D3:A1:97:00:E6:C9:37:FC:EF
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A08120BA5DC3DD30C57E55EE4F82867C15
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/AwilbaZJhcQTfTHToZcA5sk3_O8.roa
Signing time: Tue 08 Sep 2026 13:06:40 +0000
ROA not before: Tue 08 Sep 2026 13:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 150.251.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:20:ba:5d:c3:dd:30:c5:7e:55:ee:4f:82:86:7c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Sep 8 13:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0308a56da64985c4137d31d3a19700e6c937fcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:4e:9a:e7:df:34:d5:1a:f1:77:4a:cf:25:
35:d4:22:65:20:e8:ca:05:b5:47:ec:a3:fe:4e:7f:
62:ca:57:6b:08:55:35:30:51:bd:b9:73:fc:11:e9:
74:75:11:86:b5:6b:de:4f:3c:bd:f5:b3:57:58:38:
8f:81:f0:83:b4:78:99:af:99:45:f4:fc:8f:7f:c7:
a4:48:b7:da:8a:12:67:90:1b:7f:e0:49:b5:2a:9e:
b0:10:ff:03:55:49:ed:e3:e5:51:c2:46:28:f3:83:
18:15:fe:55:16:41:88:92:2d:fb:7b:6b:f3:28:2d:
9b:4f:54:d9:0c:98:58:ef:78:63:33:ff:04:cf:b0:
0e:d0:86:38:1f:7f:42:9b:e5:94:2d:3c:86:f8:b9:
2e:8b:8d:cd:2d:95:e5:58:7b:ee:78:98:f0:80:da:
01:cf:35:14:69:79:aa:66:7d:d1:3b:d5:a0:e9:95:
24:db:8c:a6:cd:86:33:9a:ba:c3:64:b5:d5:9b:23:
97:0d:74:89:58:c0:71:cc:04:da:9b:ca:91:11:44:
d9:b0:3f:2b:4b:25:91:bb:4f:c3:3e:1b:57:71:f1:
5e:63:6d:80:f8:6e:ea:79:0d:ff:a3:c7:12:41:95:
4d:84:02:02:33:a8:f1:1f:4c:61:b0:17:56:b3:54:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:A5:6D:A6:49:85:C4:13:7D:31:D3:A1:97:00:E6:C9:37:FC:EF
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/AwilbaZJhcQTfTHToZcA5sk3_O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.144.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b4:65:99:a0:aa:25:e7:c8:61:5c:28:0a:1b:31:6d:43:08:
8a:d7:97:a1:fe:93:a8:7d:53:79:b4:88:10:13:22:4b:b4:13:
7a:a7:6f:db:b3:7c:8e:a1:3d:b4:fe:cc:1a:74:cc:b1:49:07:
4c:84:8c:8a:42:a8:3d:55:a3:89:a0:02:96:ac:50:b9:45:84:
97:16:f1:dd:b7:37:73:b3:ce:f3:fc:2a:0d:44:89:ae:33:27:
3a:f3:25:e7:b3:6c:04:9a:0f:a2:09:2a:a3:c1:7d:7a:c7:56:
90:e9:b9:5a:6b:96:fa:c3:13:10:d3:ce:2e:20:6a:ea:e1:a1:
cb:b6:c2:e7:46:15:0c:f0:ce:c5:05:c4:0d:5c:72:82:50:c8:
f8:1c:6b:e0:54:41:e0:1b:93:b9:41:f4:4f:e7:a0:14:d7:71:
bb:f3:22:c5:3a:f1:15:60:42:91:db:b2:de:c3:34:a6:6d:6c:
fe:ca:45:2b:5e:8d:7a:db:9d:a4:d6:84:12:6a:30:6f:a1:2a:
e7:c2:a3:a2:80:57:64:02:8f:32:eb:e0:7d:3b:11:e9:65:60:
9e:53:92:10:fc:0f:c0:cd:6e:b8:2b:86:44:8a:e4:f5:09:01:
d0:07:c0:30:9c:96:e9:62:b3:f1:64:10:44:c6:7c:13:18:71:
3a:3c:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:55:51 2026 by rpki-client