Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/J-AoTpIUsusEYIip5mUP4KOkdtg.roa
File: J-AoTpIUsusEYIip5mUP4KOkdtg.roa (raw, json)
Hash identifier: cYYVp+6ssYMWppkm0Y10ew2tCLD69zqYnpKPSx4CbWw=
Subject key identifier: 27:E0:28:4E:92:14:B2:EB:04:60:88:A9:E6:65:0F:E0:A3:A4:76:D8
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A12A75F29EEBA4E473C024FCC677917314
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/J-AoTpIUsusEYIip5mUP4KOkdtg.roa
Signing time: Sun 11 Oct 2026 10:15:35 +0000
ROA not before: Sun 11 Oct 2026 10:15:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211344
IP address blocks: 150.251.58.0/24 maxlen: 24
150.251.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:75:f2:9e:eb:a4:e4:73:c0:24:fc:c6:77:91:73:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 11 10:15:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27e0284e9214b2eb046088a9e6650fe0a3a476d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:55:67:c3:b4:16:80:8e:80:44:33:2c:b0:bb:
c7:ac:60:51:6f:67:68:46:ae:9a:bb:e2:b4:e1:b9:
50:e8:88:9e:be:d4:f4:5f:1c:fa:5f:2c:fb:b6:ae:
c6:f3:97:b8:82:8b:03:e0:24:fc:00:53:e7:ba:0c:
82:54:e9:81:af:09:56:fa:67:cf:60:85:86:06:02:
24:96:c9:f1:ab:82:9f:18:75:5f:2c:7e:bc:95:ad:
ad:b3:00:cf:53:42:1c:77:f9:80:b5:2b:6a:3d:ad:
93:af:24:f7:bf:68:ea:3b:6b:5b:cb:93:ea:95:aa:
53:73:c3:b3:38:93:a1:38:b1:fa:ab:76:c2:11:aa:
0d:fb:e6:8a:07:56:4f:d8:14:98:fc:c5:99:10:65:
a5:74:4f:6f:68:7e:ab:1f:c2:5a:d8:64:ee:05:a5:
3d:fe:82:a9:3c:11:66:c1:76:06:63:61:a3:74:87:
05:64:2f:3d:35:62:e8:f7:d2:cf:87:bf:ac:71:ca:
7d:2a:62:09:52:a6:b1:ca:67:ae:06:f6:f7:ea:27:
88:2e:d9:27:06:07:a6:1a:b7:4a:ba:e9:5a:55:34:
0a:10:51:74:5c:7e:49:40:45:80:7e:da:f8:db:83:
bd:b1:66:2e:b1:0f:5e:1a:1f:99:d2:7d:70:79:e9:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:28:4E:92:14:B2:EB:04:60:88:A9:E6:65:0F:E0:A3:A4:76:D8
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/J-AoTpIUsusEYIip5mUP4KOkdtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.58.0/24
150.251.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5e:1c:e2:42:cf:c8:3a:a4:0b:e2:50:ca:1e:1e:15:dd:89:
7c:15:03:46:fe:7a:74:93:b1:a4:08:34:15:9a:e5:f5:7b:aa:
7f:6a:50:4b:ed:7b:c7:1d:5b:1f:a7:86:77:fe:3d:de:69:74:
33:52:73:49:a5:1d:cf:6d:21:0b:e8:db:29:ec:42:04:50:f3:
a6:31:9c:97:d6:57:0b:9e:4c:6b:9f:e4:5d:e6:2d:1f:b4:23:
75:42:f2:d3:64:88:5f:d7:fd:56:0a:09:66:5c:d5:f5:6f:1d:
a3:85:8c:1b:96:56:8b:6d:96:3e:88:dd:1e:c7:fd:29:1c:d8:
31:d7:8a:1b:35:98:5a:f3:f0:33:5a:81:e5:33:6a:a2:ec:23:
a2:22:de:c2:ec:ff:22:6c:16:19:67:74:58:8b:b5:31:ed:64:
28:92:ff:b6:6f:3c:77:aa:8a:b0:ab:07:82:20:cd:09:38:55:
52:47:7b:9f:fa:a8:44:81:d7:9f:e0:e1:e9:4d:a0:3c:24:18:
5b:88:ea:c4:76:24:ec:a0:b8:c0:e2:5d:10:d4:56:41:81:3f:
8a:8b:6e:24:9c:36:cb:d1:91:27:f2:17:aa:d0:a1:d1:43:55:
bf:0a:9b:a7:05:e6:00:ac:ca:90:97:93:88:e9:ed:3f:67:69:
13:94:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:38 2026 by rpki-client