Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/RZGwDpNcd1DcLHxitCnSf-nL-XA.roa
File: RZGwDpNcd1DcLHxitCnSf-nL-XA.roa (raw, json)
Hash identifier: FSq2TNjmcVyZaDQ+e+a/IvZuW+h9A1VCRcUBTDpA8Ks=
Subject key identifier: 45:91:B0:0E:93:5C:77:50:DC:2C:7C:62:B4:29:D2:7F:E9:CB:F9:70
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A15E3DB0F440C71E729BD2340AF5F91C91
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/RZGwDpNcd1DcLHxitCnSf-nL-XA.roa
Signing time: Wed 21 Oct 2026 11:34:23 +0000
ROA not before: Wed 21 Oct 2026 11:34:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218334
IP address blocks: 150.237.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:3d:b0:f4:40:c7:1e:72:9b:d2:34:0a:f5:f9:1c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 21 11:34:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4591b00e935c7750dc2c7c62b429d27fe9cbf970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:e2:30:a3:ba:34:e9:f7:0e:d0:37:66:eb:
18:a2:67:c5:d7:cf:42:70:35:a0:e6:f8:53:53:56:
31:05:f2:1b:76:77:0a:d2:d4:67:6d:d5:fd:ec:82:
49:95:b6:8e:52:59:7a:ca:b3:70:6f:b4:e5:af:96:
14:b2:7a:f7:aa:61:5f:b3:27:14:cf:ee:29:62:8a:
60:3f:07:33:d8:60:1f:8a:76:6f:14:ae:83:ff:6d:
84:a5:c6:f2:78:eb:cb:57:21:95:cf:be:09:eb:2f:
84:46:01:6c:ab:4d:51:ad:d5:e3:c8:bc:87:d5:ac:
53:1a:43:29:73:4a:e7:4d:28:fb:63:aa:2d:bb:10:
92:fb:63:53:45:c5:b4:e0:34:31:a1:72:a4:fe:a3:
c6:79:74:88:fa:ca:e4:f0:63:f1:e0:e6:59:9f:14:
6b:4e:0e:a9:2a:6a:9a:49:00:31:55:1e:32:1d:a8:
95:83:cd:14:d4:3f:2a:a6:20:ce:41:28:da:46:18:
1a:31:1a:c0:0f:8e:19:bb:dc:13:cd:c8:bf:a5:48:
d8:cd:99:e2:c1:55:03:00:d1:b2:c7:86:c9:4c:05:
7c:89:7e:4d:65:65:88:82:2f:a5:73:48:dc:e5:81:
28:fe:e8:d9:7c:93:3d:83:4a:f8:c2:41:6b:65:63:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:91:B0:0E:93:5C:77:50:DC:2C:7C:62:B4:29:D2:7F:E9:CB:F9:70
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/RZGwDpNcd1DcLHxitCnSf-nL-XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2c:65:39:56:66:9b:92:66:f2:94:60:47:1d:79:c1:9d:e1:
1a:1d:75:25:a8:b4:a3:3f:1e:1f:26:bc:49:97:cf:66:1b:bb:
b1:9c:d4:72:40:7a:14:ff:eb:3b:91:32:0c:8e:e0:5c:78:97:
65:e7:60:cb:f0:6a:ca:36:53:0d:8c:ed:c3:4c:d6:2f:ae:30:
b7:d2:48:a0:44:dd:05:62:66:0f:a7:1d:75:08:0d:29:9e:aa:
5d:42:7a:ea:94:ed:f4:ef:2c:22:8a:63:f2:4e:f9:c3:10:41:
85:c8:8d:61:8d:2d:66:67:c5:f8:0b:7b:75:f4:37:12:40:97:
40:93:be:d2:bb:26:b2:72:61:e3:98:19:e3:49:61:43:94:90:
09:10:1b:49:59:f3:dc:fe:23:d6:6e:73:37:0c:0a:96:09:34:
34:9a:91:fc:ee:b6:7f:7b:dd:75:c7:00:8f:15:09:a7:35:10:
38:65:37:04:23:19:4e:a9:88:68:fe:c1:0e:e8:47:76:7b:a0:
5f:8d:fe:1e:6d:8b:81:5c:07:e1:dd:b0:80:b6:18:ac:56:c8:
72:fa:0c:31:40:6f:bf:79:8a:b0:62:ff:e5:5b:31:87:77:ee:
9b:03:1a:cc:17:26:4a:f5:da:39:a5:9d:c8:0c:0a:be:45:7f:
82:b8:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:43 2026 by rpki-client