Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/ZdVKQpLo9vNHJYiULqvYD4K3pFg.roa
File: ZdVKQpLo9vNHJYiULqvYD4K3pFg.roa (raw, json)
Hash identifier: ASedGVZyOg8knd4ZSur+ci7D8ZvQGqZwiT4OyDczhpc=
Subject key identifier: 65:D5:4A:42:92:E8:F6:F3:47:25:88:94:2E:AB:D8:0F:82:B7:A4:58
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019DF712C36402966E2E7D92BD5287248B41
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/ZdVKQpLo9vNHJYiULqvYD4K3pFg.roa
Signing time: Tue 05 May 2026 07:38:15 +0000
ROA not before: Tue 05 May 2026 07:38:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211344
IP address blocks: 150.251.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:12:c3:64:02:96:6e:2e:7d:92:bd:52:87:24:8b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: May 5 07:38:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65d54a4292e8f6f3472588942eabd80f82b7a458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:51:ae:18:48:0d:9b:22:12:6c:b6:dd:24:
b7:70:e3:b6:e7:18:76:ff:8b:29:58:5f:57:7a:23:
39:4f:64:d8:90:7c:d5:f6:51:e8:05:8f:8a:82:fd:
5e:76:6a:2b:f1:d7:24:a3:ad:22:ad:a7:fb:0c:9c:
5e:30:5b:51:d0:4b:05:33:ee:20:c6:8d:e8:ef:12:
cc:00:14:23:2d:01:30:b6:95:47:b9:dc:57:9a:c3:
1d:2a:42:11:1d:c2:33:1d:9e:1f:5d:d1:d4:56:b9:
55:2c:2d:25:4a:50:75:c9:30:62:4a:6c:5e:bd:35:
8c:15:be:1c:1a:8e:85:85:9f:ee:b9:f0:bd:92:02:
6c:06:49:24:69:f6:dc:7d:4f:86:50:0e:17:93:f6:
ff:68:38:fc:5c:3a:65:16:20:b4:cc:7d:da:0d:a0:
3b:6a:6d:77:e2:27:05:b9:6b:38:d2:ec:9a:c6:88:
8d:5e:93:ad:a1:98:42:8c:71:11:f1:37:11:3f:fc:
51:9c:43:45:ed:5a:3e:3e:b5:6b:8d:b7:26:ec:76:
d1:c5:ca:9f:64:96:ab:c8:05:7a:ca:93:6e:72:4f:
b7:77:02:9f:27:79:6a:d5:37:e9:01:d7:f5:18:68:
ac:ab:f5:b2:f9:cd:53:f7:fe:d6:3b:c8:de:03:ca:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D5:4A:42:92:E8:F6:F3:47:25:88:94:2E:AB:D8:0F:82:B7:A4:58
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/ZdVKQpLo9vNHJYiULqvYD4K3pFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.148.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bc:e5:51:3c:96:56:37:57:f7:a3:68:ea:93:97:81:2a:45:
26:79:5e:66:52:d1:9b:43:3c:09:83:ed:3e:d2:19:72:2c:56:
e2:ec:5f:7e:8b:cd:7f:7c:08:c7:37:41:78:da:ef:62:bc:c8:
19:83:1d:99:47:f9:25:55:79:9e:41:7c:01:30:cf:1f:45:de:
2e:45:1c:d9:82:9c:bb:c3:4b:42:1d:e1:56:15:89:15:8a:03:
e8:25:82:9f:7d:5e:ab:6e:11:1e:5e:d8:a9:76:e3:10:7e:74:
a9:4b:1e:c0:9a:5c:9e:d7:33:99:19:52:2e:dc:f7:37:f5:91:
36:41:2f:50:c9:c9:f9:2a:1e:f2:2b:0f:c6:b5:b6:ca:9d:e5:
ec:91:9e:7d:bf:26:d3:71:a7:27:19:00:1c:1d:33:62:5e:23:
d0:bb:d8:10:f0:5f:e8:f9:36:a3:72:c8:34:3c:a4:e6:c5:cb:
8b:a7:48:6a:95:89:b9:e1:7b:b9:65:ec:3d:01:62:cc:86:0c:
5c:01:77:7d:47:69:e1:1e:e2:17:1c:6c:aa:61:32:8e:c4:41:
cc:d6:ed:df:f2:eb:2c:1d:7e:1b:67:8e:f4:a9:25:61:fc:1f:
da:9d:78:92:a5:6f:88:b5:2e:4c:01:8c:0c:a1:e1:a9:b8:ea:
63:0e:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:17:03 2026 by rpki-client