Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/IwzGU68By4r1-hEmxPFLiWRhs_U.roa
File: IwzGU68By4r1-hEmxPFLiWRhs_U.roa (raw, json)
Hash identifier: 0qZhQbZkiySyNsEvTdRLhPsgBUTUlGaKSTI3xbTcu8Q=
Subject key identifier: 23:0C:C6:53:AF:01:CB:8A:F5:FA:11:26:C4:F1:4B:89:64:61:B3:F5
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A110E6D6C1FD16356E8925C317AD4A1DF9
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/IwzGU68By4r1-hEmxPFLiWRhs_U.roa
Signing time: Tue 06 Oct 2026 11:08:45 +0000
ROA not before: Tue 06 Oct 2026 11:08:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 150.237.78.0/24 maxlen: 24
150.251.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e6:d6:c1:fd:16:35:6e:89:25:c3:17:ad:4a:1d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 6 11:08:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=230cc653af01cb8af5fa1126c4f14b896461b3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:04:42:ba:82:65:6a:25:3a:3d:01:b6:8f:
49:42:e3:c2:f6:b7:9d:f9:04:0c:84:b6:5f:b2:37:
97:09:ad:28:70:93:d0:cf:23:8b:37:52:77:a8:b3:
12:c9:0f:94:2f:5b:14:55:d1:4d:03:f6:0c:5b:d3:
c4:1a:a6:f9:34:d9:ab:88:a0:11:be:38:04:29:b2:
91:d0:16:8f:77:a7:ef:f0:30:3e:c6:05:a9:b4:02:
7e:f5:66:67:b6:be:db:be:f8:eb:6b:04:2f:d4:09:
13:76:88:d0:10:d2:1b:9d:88:f6:52:5a:34:ec:42:
5e:ee:d2:9d:76:91:88:ef:40:81:e8:d2:fc:ba:d6:
0f:5a:f4:46:07:f4:51:e6:23:d1:44:6e:74:df:01:
b6:94:ff:34:66:a2:4c:84:dd:0f:d4:4b:c0:54:1c:
19:dd:59:65:f7:f9:40:e2:51:ae:31:a1:9f:05:5f:
ca:f6:5f:ce:7c:29:b4:b6:10:75:e8:c6:b0:c5:11:
25:19:e4:b3:ec:09:fe:ac:c5:30:82:ae:6f:f7:4f:
5e:c1:3d:ee:a0:a9:ee:d5:1c:ba:69:a1:d8:1d:2d:
a1:80:d7:ea:d1:bc:29:bb:b2:a8:32:34:1e:e5:99:
5d:b9:9f:a6:7f:4e:cc:67:a4:87:84:c8:0d:aa:32:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0C:C6:53:AF:01:CB:8A:F5:FA:11:26:C4:F1:4B:89:64:61:B3:F5
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/IwzGU68By4r1-hEmxPFLiWRhs_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.78.0/24
150.251.155.0/24
Signature Algorithm: sha256WithRSAEncryption
18:cc:e1:19:c2:92:d0:28:5b:e7:6c:88:b1:aa:b6:65:91:22:
00:14:f3:a2:ce:a3:14:41:cf:c6:0b:f8:9e:2f:af:56:1c:b2:
39:77:12:d7:c7:a5:f2:1a:72:1f:1f:5a:a7:2b:79:b4:e2:2b:
d9:9c:94:9c:5a:17:5e:ed:db:af:e0:75:6c:39:a0:23:cf:93:
ec:ca:2f:15:a0:47:33:ca:b2:86:42:47:ab:45:da:47:87:e6:
a2:6b:70:23:d6:64:7b:75:f0:7c:78:f7:92:4d:ce:be:3c:61:
0d:36:11:98:d4:ba:72:19:e8:ea:07:93:3e:4d:0c:e9:d7:cd:
22:88:94:e0:c9:38:b0:ae:10:ef:3c:20:a0:14:ee:f3:24:ff:
1e:26:a4:57:59:db:f3:56:63:58:bb:c1:64:bc:32:9e:a7:a1:
6b:14:ad:b4:00:d0:29:d9:65:02:e4:bf:d2:41:e9:02:85:66:
68:c3:72:56:f4:4d:9a:47:43:11:ac:6e:3e:51:a7:bb:1a:8a:
74:1b:b4:18:b8:6d:36:8c:9b:90:f1:34:87:50:2d:08:a1:b1:
29:e6:a0:54:bd:68:6e:c4:e6:31:29:6d:bc:b6:f8:44:bd:db:
1e:74:8b:93:e3:82:17:c5:3d:29:c0:a2:4a:54:ba:33:27:3b:
7d:b1:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:32 2026 by rpki-client