Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/purUNvgTOSmsg-p8xsxpzQohQx0.roa
File: purUNvgTOSmsg-p8xsxpzQohQx0.roa (raw, json)
Hash identifier: kok51pwgVJuYgc/bzGfooN9LJiamzAAHw6SNQaWNxCo=
Subject key identifier: A6:EA:D4:36:F8:13:39:29:AC:83:EA:7C:C6:CC:69:CD:0A:21:43:1D
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019F6B3E841DB713D661A7529381E83889BB
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/purUNvgTOSmsg-p8xsxpzQohQx0.roa
Signing time: Thu 16 Jul 2026 14:04:46 +0000
ROA not before: Thu 16 Jul 2026 14:04:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211693
IP address blocks: 150.251.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:3e:84:1d:b7:13:d6:61:a7:52:93:81:e8:38:89:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jul 16 14:04:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6ead436f8133929ac83ea7cc6cc69cd0a21431d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:2f:c6:63:fc:0a:5b:15:9b:ed:db:de:2a:
1e:e7:37:37:76:e8:5e:3a:76:9a:6b:f8:fe:41:76:
c5:43:d4:08:16:08:06:08:3c:00:1e:d6:f3:b3:b5:
a4:33:54:da:44:ea:5d:c3:1e:4d:c7:e0:34:af:16:
76:7d:28:9c:db:1b:d0:40:d4:96:fd:88:da:6a:3e:
6c:d9:e5:eb:a3:94:05:b3:74:ab:4e:18:51:78:85:
7f:16:25:e3:fa:9f:7e:51:94:d1:77:b6:b1:d3:1d:
c7:e3:e0:9f:2f:e3:ee:f0:d8:19:68:e4:80:69:49:
29:85:af:71:0f:a5:97:9f:df:be:69:7d:a5:8d:f6:
24:3a:fc:d4:ba:04:15:fb:65:a9:7b:fc:8d:5f:b7:
38:52:07:38:f5:14:44:18:f9:91:f7:e5:7a:15:9b:
da:f7:22:21:90:a1:82:38:c6:28:41:89:a3:3e:9c:
70:a6:b1:80:dc:3d:ec:11:de:4d:42:19:40:44:f0:
f0:e2:0d:c1:6b:8f:94:fa:fa:f2:a9:40:df:a8:50:
fd:60:66:d9:78:f4:64:da:ee:07:7d:c5:8c:5a:9f:
c7:17:63:5c:f6:55:64:eb:40:2c:da:d1:c3:d5:ae:
f2:f8:fc:9a:48:82:01:b7:44:69:98:a3:fa:7c:27:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:D4:36:F8:13:39:29:AC:83:EA:7C:C6:CC:69:CD:0A:21:43:1D
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/purUNvgTOSmsg-p8xsxpzQohQx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.37.0/24
Signature Algorithm: sha256WithRSAEncryption
65:be:52:d4:32:10:a6:03:e2:7c:3c:f4:00:01:2f:c4:05:73:
41:bf:14:1f:f9:da:37:fe:81:a1:da:45:e7:11:37:f0:cc:18:
8e:80:bf:9c:cb:39:8d:1b:00:d1:53:77:af:f0:e8:f7:62:d4:
01:84:c7:d5:e9:f9:56:d5:cd:6c:26:1d:3c:dc:47:7e:2c:08:
19:25:a5:bc:69:d2:aa:36:bf:cb:07:af:94:47:89:04:5d:e8:
d7:16:fa:94:21:fe:72:18:37:ce:89:77:4d:e7:5f:5d:54:79:
3c:e6:5f:ee:83:b2:77:fc:96:93:f8:3b:74:61:85:b6:c3:79:
41:3e:da:3a:9b:b6:c5:f7:ef:06:f0:2f:87:e6:83:cc:ae:43:
91:09:20:b5:66:c3:10:ff:aa:3e:92:75:49:0f:81:5e:14:e6:
25:95:44:9e:60:0e:2d:64:06:32:45:86:fc:0f:2b:7b:b7:16:
ed:17:c1:8e:bc:37:97:fb:f0:f1:d5:d2:91:80:eb:9d:79:ff:
05:5f:ef:8f:8d:47:db:c6:9d:55:a4:46:6c:c1:71:91:58:c6:
67:f5:e7:da:dd:d8:50:24:e8:23:1c:de:62:8a:6a:8f:8e:b8:
04:3d:1b:30:32:17:6f:0d:75:25:b3:7d:5d:16:c4:45:1f:bc:
3a:8f:11:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9rPoQdtxPWYadSk4HoOIm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYwNzE2MTQwNDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmVhZDQzNmY4MTMzOTI5YWM4M2VhN2NjNmNjNjljZDBhMjE0MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb8vxmP8ClsVm+3b3ioe5zc3duhe
Onaaa/j+QXbFQ9QIFggGCDwAHtbzs7WkM1TaROpdwx5Nx+A0rxZ2fSic2xvQQNSW
/Yjaaj5s2eXro5QFs3SrThhReIV/FiXj+p9+UZTRd7ax0x3H4+CfL+Pu8NgZaOSA
aUkpha9xD6WXn9++aX2ljfYkOvzUugQV+2Wpe/yNX7c4Ugc49RREGPmR9+V6FZva
9yIhkKGCOMYoQYmjPpxwprGA3D3sEd5NQhlARPDw4g3Ba4+U+vryqUDfqFD9YGbZ
ePRk2u4HfcWMWp/HF2Nc9lVk60As2tHD1a7y+PyaSIIBt0RpmKP6fCfhAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKbq1Db4EzkprIPqfMbMac0KIUMdMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvcHVyVU52Z1RPU21zZy1wOHhzeHB6UW9oUXgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvslMA0G
CSqGSIb3DQEBCwUAA4IBAQBlvlLUMhCmA+J8PPQAAS/EBXNBvxQf+do3/oGh2kXn
ETfwzBiOgL+cyzmNGwDRU3ev8Oj3YtQBhMfV6flW1c1sJh083Ed+LAgZJaW8adKq
Nr/LB6+UR4kEXejXFvqUIf5yGDfOiXdN519dVHk85l/ug7J3/JaT+Dt0YYW2w3lB
Pto6m7bF9+8G8C+H5oPMrkORCSC1ZsMQ/6o+knVJD4FeFOYllUSeYA4tZAYyRYb8
Dyt7txbtF8GOvDeX+/Dx1dKRgOudef8FX++PjUfbxp1VpEZswXGRWMZn9efa3dhQ
JOgjHN5iimqPjrgEPRswMhdvDXUls31dFsRFH7w6jxEn
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:07:19 2026 by rpki-client