Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/paPAUBRSQmWJmyJYIiDjD0NeS0Q.roa
File: paPAUBRSQmWJmyJYIiDjD0NeS0Q.roa (raw, json)
Hash identifier: 5u5C3F174FXgx2/0vtlU5Avs0fzHfbt6iJUbZkqiaRI=
Subject key identifier: A5:A3:C0:50:14:52:42:65:89:9B:22:58:22:20:E3:0F:43:5E:4B:44
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A0339092BDB837592A2479312BC1FC5EEE
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/paPAUBRSQmWJmyJYIiDjD0NeS0Q.roa
Signing time: Mon 24 Aug 2026 11:38:27 +0000
ROA not before: Mon 24 Aug 2026 11:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 150.237.72.0/24 maxlen: 24
150.237.73.0/24 maxlen: 24
150.237.74.0/24 maxlen: 24
150.237.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:90:92:bd:b8:37:59:2a:24:79:31:2b:c1:fc:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Aug 24 11:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5a3c05014524265899b22582220e30f435e4b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:65:08:cb:54:79:fd:07:fe:83:53:9b:73:
31:53:b8:1e:04:28:ac:3b:27:2e:35:68:04:7f:22:
d2:f0:15:93:01:9d:51:ef:c2:17:5b:f1:d8:58:a1:
5e:2f:d3:34:fa:2e:aa:dd:34:52:f0:65:3f:43:5a:
fc:8c:ee:f6:22:0e:0e:3b:8e:a5:a8:27:9b:6b:b7:
4b:eb:69:70:64:15:ff:a1:77:81:f5:99:ef:24:2a:
9d:78:a6:a4:da:a5:83:c6:64:4f:fd:0b:fb:df:b0:
96:de:ea:ab:f5:34:39:65:ee:a9:be:72:a8:cf:4c:
1c:36:5a:29:de:cf:61:ef:ba:c7:07:0c:64:20:80:
2d:ef:4e:81:ac:c3:6f:99:44:a3:5d:e0:51:f8:b6:
bd:92:9a:5b:bf:78:57:5e:e7:07:5a:6a:6d:9d:79:
ed:98:4b:fb:ba:62:ea:5f:2b:79:4f:de:81:ed:3e:
ca:07:30:e1:9a:6b:76:07:ff:dd:7b:29:d9:98:13:
43:f4:24:cd:16:4b:61:81:a5:b4:c2:a8:5a:f3:47:
40:1b:c3:a1:1a:71:65:14:06:1f:78:5c:c7:07:96:
f2:70:b7:b2:da:49:a1:cf:a6:d3:74:9d:fc:d3:c0:
28:fe:85:dd:49:96:13:ea:34:d5:bc:d2:c1:00:8b:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:C0:50:14:52:42:65:89:9B:22:58:22:20:E3:0F:43:5E:4B:44
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/paPAUBRSQmWJmyJYIiDjD0NeS0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.72.0/22
Signature Algorithm: sha256WithRSAEncryption
16:83:3b:bb:57:9b:3c:b8:bb:4a:32:5b:26:85:e1:08:d5:3e:
e3:af:ff:a8:9f:2c:2c:53:a4:58:49:31:78:b8:9d:1f:d2:be:
94:ec:31:cd:da:70:bc:84:96:19:9f:9a:6e:48:b4:b1:ee:6d:
ed:00:f4:4d:07:fe:b9:a3:5f:46:5e:a0:3d:c3:3e:68:ee:ca:
50:7b:7a:7d:13:3c:e3:e4:45:a4:d4:ec:e4:35:44:01:30:3c:
11:7c:1a:b4:de:ad:ea:46:b9:07:d7:fb:76:64:3e:e8:81:71:
e2:86:da:95:ee:09:db:74:f3:a5:cc:cb:55:ef:49:81:20:1d:
87:98:ed:a7:7d:d3:29:fe:1b:73:a5:c2:68:53:f7:ed:d0:61:
c1:98:f3:aa:8d:cc:63:2a:b7:b6:59:35:a2:a8:fe:dc:e3:11:
b0:ec:b1:ec:ce:e4:d3:77:7c:34:2c:9d:4e:62:7b:31:db:06:
d0:e5:54:c9:ed:e3:b7:30:c4:6d:72:3c:19:d2:89:6f:ec:46:
2b:0e:4f:af:8b:a1:6b:3d:43:fc:e2:07:3a:5f:8a:1f:cd:c8:
3b:10:97:29:b2:de:3d:14:af:de:a8:02:30:c3:41:38:c9:ab:
ef:d3:e9:c3:5b:1d:6c:18:1a:c1:ad:27:ca:15:fd:4e:d4:de:
be:e2:c2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:17 2026 by rpki-client