Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/NQ9GQni9bvTC-gX-84vJv91Hrps.roa
File: NQ9GQni9bvTC-gX-84vJv91Hrps.roa (raw, json)
Hash identifier: GwW4LHUS40DNlOngc1BgM9jyeQywod9XVQLcRX7vDHE=
Subject key identifier: 35:0F:46:42:78:BD:6E:F4:C2:FA:05:FE:F3:8B:C9:BF:DD:47:AE:9B
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019FEA8289F4C489C6050D2687E195866A21
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/NQ9GQni9bvTC-gX-84vJv91Hrps.roa
Signing time: Mon 10 Aug 2026 07:10:51 +0000
ROA not before: Mon 10 Aug 2026 07:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211344
IP address blocks: 150.251.58.0/24 maxlen: 24
150.251.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:82:89:f4:c4:89:c6:05:0d:26:87:e1:95:86:6a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Aug 10 07:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=350f464278bd6ef4c2fa05fef38bc9bfdd47ae9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:b5:7d:35:de:c7:4e:fa:bb:c5:ae:38:a9:
ba:1c:05:d9:33:93:c9:bc:7e:ab:f5:5d:0d:9a:d5:
a2:e0:b6:81:39:5f:e4:80:5a:42:be:03:ad:38:8e:
8d:16:be:dd:97:a6:1d:74:06:e8:9d:47:6c:e8:4a:
c8:41:18:64:45:9d:6d:2a:70:af:40:89:fd:33:b3:
74:df:1d:45:15:7a:7a:c5:97:60:bf:91:45:15:54:
f1:3d:19:b8:bb:c4:12:bb:b5:4d:2e:28:26:7b:85:
27:7b:99:e9:4e:28:86:7d:8a:2a:5d:28:2f:36:75:
62:a2:cb:d0:72:01:eb:50:87:d1:cf:e6:01:af:d2:
e7:54:f6:52:ec:06:2b:66:26:c3:70:92:d4:6b:8c:
bc:a1:6d:5a:bf:17:ef:4c:0d:19:6a:13:2e:2d:47:
8e:85:64:f1:74:d5:21:05:c3:94:af:d9:b6:2c:07:
a5:5a:b4:22:10:77:eb:06:c8:86:65:4f:67:6f:f7:
4b:3f:f7:b9:1d:94:64:08:ce:29:fb:64:36:5b:71:
c0:82:45:c2:93:80:81:d3:dd:90:8a:d0:52:37:2e:
ab:13:32:ea:a0:e5:b5:af:2f:a9:f5:b6:05:d0:4e:
16:15:80:34:af:4c:fa:4e:f3:9f:a7:4e:15:ab:ad:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0F:46:42:78:BD:6E:F4:C2:FA:05:FE:F3:8B:C9:BF:DD:47:AE:9B
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/NQ9GQni9bvTC-gX-84vJv91Hrps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.58.0/24
150.251.148.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6e:c8:50:a8:0c:48:96:9d:c5:f4:96:88:6c:73:27:93:92:
2b:cb:b0:b4:6c:3c:60:94:81:4b:58:5f:17:81:99:91:9a:a4:
1d:8c:fe:b6:e0:24:c4:d2:b3:5f:7d:a0:93:34:a1:60:e7:97:
12:06:29:4b:47:e8:03:80:1b:de:6c:4d:e7:40:d1:d7:9b:48:
b8:2b:bb:39:96:6a:e8:19:a3:5e:9f:72:46:29:6f:21:b4:d5:
bf:e6:4f:55:e9:d0:a1:ab:a3:94:c6:af:0b:b9:29:47:a9:c1:
1c:a0:3f:fb:60:31:5a:e6:cf:84:01:3b:58:11:39:34:d4:15:
ea:87:6a:c2:ba:59:3b:c8:2f:e0:88:01:14:c9:49:6c:39:41:
8f:46:d0:f1:d6:7c:96:97:b1:81:08:aa:d4:1e:89:3f:15:41:
f0:47:7f:31:af:20:9c:a1:7b:3f:e2:14:6e:5a:4b:f2:8c:53:
6a:bf:fe:f1:95:af:b3:f7:15:f7:6c:f1:1c:81:1f:a7:1f:d2:
65:b2:4b:8c:ae:27:e3:7e:49:0d:cc:b2:41:fa:6b:1e:32:65:
55:6b:c4:fa:d0:29:4c:b7:17:fa:5e:b9:66:70:d7:1e:6c:93:
ca:d5:3f:6e:23:54:c5:21:88:06:9c:c3:80:e2:3f:d2:0d:e9:
b0:6f:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:55:52 2026 by rpki-client