Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/j9lb95MRI6k4ZQi79l1BYOQ9q5g.roa
File: j9lb95MRI6k4ZQi79l1BYOQ9q5g.roa (raw, json)
Hash identifier: jG6mvsKJ/wm6AKGWEMF9yiC3O2s9IW2CPPP2tffxr3w=
Subject key identifier: 8F:D9:5B:F7:93:11:23:A9:38:65:08:BB:F6:5D:41:60:E4:3D:AB:98
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D34DD18BDEEBAF693E67B4555BF394B1D
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/j9lb95MRI6k4ZQi79l1BYOQ9q5g.roa
Signing time: Sat 28 Mar 2026 14:33:18 +0000
ROA not before: Sat 28 Mar 2026 14:33:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 150.251.139.0/24 maxlen: 24
150.251.146.0/23 maxlen: 24
150.251.153.0/24 maxlen: 24
150.251.154.0/24 maxlen: 24
150.251.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:dd:18:bd:ee:ba:f6:93:e6:7b:45:55:bf:39:4b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 28 14:33:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fd95bf7931123a9386508bbf65d4160e43dab98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:2b:b5:6b:65:28:cb:59:0d:b6:02:17:8f:
51:f3:a0:b1:30:27:3a:36:fd:2e:28:36:46:28:28:
52:3d:d4:27:fc:9b:77:b9:bf:e3:5c:bd:ca:1b:8f:
5b:ed:ea:cc:9b:dd:7e:b0:2d:8b:c9:3d:b0:98:53:
6f:cd:dc:90:bb:15:2e:e8:3d:fa:ad:bb:2c:c0:6e:
44:c7:b5:25:f7:7e:9d:73:90:02:28:69:15:ac:14:
af:9e:e1:8d:4c:00:e1:dd:d0:1f:2a:c9:a3:8e:8f:
d2:45:b5:4f:dd:01:8f:06:43:e9:2a:f5:2c:71:76:
61:ff:2b:aa:52:ff:3e:70:0f:51:4b:5a:0c:f6:c6:
87:b8:63:de:a0:81:4a:59:c7:64:1e:2e:eb:28:ba:
9a:2c:1e:20:41:c1:18:8d:e6:2b:39:29:76:7a:ae:
76:f3:35:9e:55:9d:34:d7:0d:58:af:b7:22:fb:69:
07:0d:13:45:f0:d7:4a:8f:cc:d1:17:99:93:13:8c:
a4:6c:f2:77:2b:69:fb:f3:5a:06:67:8c:1e:e6:4f:
c8:2e:33:19:09:43:d9:f6:4c:5a:bc:06:e4:fd:02:
fa:15:ca:59:d9:f8:0b:a2:af:55:99:20:e5:db:cd:
0a:93:d2:18:b6:df:97:52:14:c1:84:fe:05:31:d8:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:5B:F7:93:11:23:A9:38:65:08:BB:F6:5D:41:60:E4:3D:AB:98
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/j9lb95MRI6k4ZQi79l1BYOQ9q5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.139.0/24
150.251.146.0/23
150.251.153.0-150.251.154.255
150.251.158.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3a:9f:df:45:82:21:99:85:47:1c:29:b7:e6:c3:a4:46:19:
06:18:3b:0b:0e:43:5e:16:91:28:b5:fa:08:6a:12:ff:07:17:
e3:29:ed:9e:b0:53:5d:62:82:f4:28:35:12:e9:e1:94:39:d3:
66:13:49:d1:4f:68:80:1b:60:07:78:3f:8e:47:7e:35:e7:f2:
94:f4:6e:2a:d3:62:44:3e:19:19:a7:75:72:ee:d5:77:fc:ce:
ca:5d:4d:1c:a6:85:c4:a7:e0:83:39:ae:93:ba:76:cd:18:d8:
70:5e:1e:50:6a:c6:ef:7a:1e:b8:10:2e:b6:4c:83:58:95:d2:
dd:33:f4:75:c4:93:dd:de:3c:11:3c:b5:c3:69:78:ca:f4:63:
57:7e:2e:23:53:ab:a2:8c:44:f3:f2:d8:2b:c9:e5:4d:48:f3:
c6:f2:e5:05:af:54:49:7f:83:92:72:38:16:98:b3:1e:ed:f8:
76:90:6e:57:47:b5:4e:af:ec:67:76:4d:dc:7f:a6:c2:65:69:
5f:f5:8f:bd:63:0f:26:11:c4:98:25:cc:e3:8b:01:23:84:e5:
cb:2a:2c:86:27:60:71:3f:78:1e:c4:60:f0:7e:fa:08:27:1d:
7c:2a:bf:96:ef:67:40:f5:86:50:db:32:d8:14:95:59:0f:8b:
10:8d:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:49:20 2026 by rpki-client