Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/qkZl7Y-BYCeOqsF0aqXUQW2Tb-o.roa
File: qkZl7Y-BYCeOqsF0aqXUQW2Tb-o.roa (raw, json)
Hash identifier: TT9/IX2KAPFGUSpknMRY3cYrPyMlNfpuIfjw0qp1tbc=
Subject key identifier: AA:46:65:ED:8F:81:60:27:8E:AA:C1:74:6A:A5:D4:41:6D:93:6F:EA
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D0B58EA43A9B47EBFCB3E9A996EC94E7D
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/qkZl7Y-BYCeOqsF0aqXUQW2Tb-o.roa
Signing time: Fri 20 Mar 2026 13:04:29 +0000
ROA not before: Fri 20 Mar 2026 13:04:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 150.251.153.0/24 maxlen: 24
150.251.154.0/24 maxlen: 24
150.251.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:58:ea:43:a9:b4:7e:bf:cb:3e:9a:99:6e:c9:4e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 20 13:04:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa4665ed8f8160278eaac1746aa5d4416d936fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:f7:58:40:fa:88:13:4c:64:78:9f:ab:0e:
e6:bd:d9:be:f9:8b:33:cf:87:e7:1e:b6:f3:1c:24:
36:f6:33:5b:50:06:52:d8:73:ac:5f:aa:4a:c6:90:
96:a0:de:a2:59:6b:2a:cd:f6:24:1e:db:8d:d4:78:
ee:a1:93:07:f2:29:ab:f8:ce:21:0d:e0:b5:e1:f1:
5b:8b:3f:00:0f:c8:67:9b:f4:46:99:2b:7a:fd:50:
4a:5b:b1:ba:c0:4b:4f:bd:bd:02:83:c3:b9:41:0a:
4e:27:d6:d8:92:13:c5:99:c8:fd:56:46:ec:68:cf:
7a:fc:96:28:4c:04:13:21:f7:08:f9:01:a2:d9:8f:
0a:6f:a3:ff:3c:64:c9:f7:5d:2c:3b:4b:56:d2:eb:
f8:ce:f7:70:5e:54:a0:a2:fe:d9:e3:33:0f:39:fe:
80:c1:62:9e:e1:2a:e7:fa:6b:43:de:5e:cc:bc:8a:
cb:59:52:b0:fb:8f:c6:49:ba:a0:ee:1a:99:f7:02:
57:f5:a6:00:75:c0:58:94:be:60:15:44:4e:c0:e9:
3f:c3:64:97:09:71:c0:84:c3:9f:24:3a:be:e4:7b:
57:80:28:3c:a0:aa:74:ef:8c:b1:b9:07:8c:fe:dd:
3a:55:49:05:10:0e:fe:49:db:54:c9:2e:77:c2:4c:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:65:ED:8F:81:60:27:8E:AA:C1:74:6A:A5:D4:41:6D:93:6F:EA
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/qkZl7Y-BYCeOqsF0aqXUQW2Tb-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.153.0-150.251.154.255
150.251.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d1:5d:42:9a:07:01:2b:b5:8b:52:d6:c5:35:30:fc:71:e6:
fd:59:95:3d:f6:2c:24:d8:42:ea:ea:6c:73:b2:79:8a:42:1f:
e0:e3:07:0e:14:40:79:66:25:c4:10:0f:f7:91:6b:fa:7d:90:
3c:e0:7c:54:a5:26:0e:b7:0f:27:72:54:d4:31:99:d8:6e:29:
db:fe:fd:cc:0b:16:59:9c:3d:12:98:66:f9:1e:43:c5:7c:14:
23:1f:24:f3:ee:23:37:68:3e:d5:03:9b:d2:f8:1b:61:24:74:
55:15:d6:31:d4:68:cc:96:4f:ff:fd:ae:a1:3d:3d:70:cb:2e:
32:01:a8:f5:29:8a:3e:16:19:7b:bf:92:ab:48:34:36:a5:0a:
1c:d5:ed:43:87:89:24:82:16:13:6e:3e:f6:0d:42:29:2c:fa:
cf:02:1a:92:0d:61:3f:90:a3:24:16:06:4d:08:76:d9:cf:cb:
94:fd:eb:8e:12:93:f0:55:45:f0:e2:f0:46:e2:9d:3c:8b:8c:
1a:48:7b:52:85:d7:6c:f3:c1:65:83:e1:4f:00:81:ef:ce:2f:
e3:ce:1c:ea:6f:9d:e2:57:3b:e7:1d:b7:5b:22:e1:82:6a:da:
e1:bc:f3:7c:7f:63:56:b6:56:9d:f1:a8:4b:ad:01:ea:98:9d:
45:f7:11:b4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ0LWOpDqbR+v8s+mpluyU59MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYwMzIwMTMwNDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTQ2NjVlZDhmODE2MDI3OGVhYWMxNzQ2YWE1ZDQ0MTZkOTM2ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryL3WED6iBNMZHifqw7mvdm++Ysz
z4fnHrbzHCQ29jNbUAZS2HOsX6pKxpCWoN6iWWsqzfYkHtuN1HjuoZMH8imr+M4h
DeC14fFbiz8AD8hnm/RGmSt6/VBKW7G6wEtPvb0Cg8O5QQpOJ9bYkhPFmcj9Vkbs
aM96/JYoTAQTIfcI+QGi2Y8Kb6P/PGTJ910sO0tW0uv4zvdwXlSgov7Z4zMPOf6A
wWKe4Srn+mtD3l7MvIrLWVKw+4/GSbqg7hqZ9wJX9aYAdcBYlL5gFUROwOk/w2SX
CXHAhMOfJDq+5HtXgCg8oKp074yxuQeM/t06VUkFEA7+SdtUyS53wkzKRwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKpGZe2PgWAnjqrBdGql1EFtk2/qMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvcWtabDdZLUJZQ2VPcXNGMGFxWFVRVzJUYi1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACW+5kD
BACW+5oDBACW+54wDQYJKoZIhvcNAQELBQADggEBAKDRXUKaBwErtYtS1sU1MPxx
5v1ZlT32LCTYQurqbHOyeYpCH+DjBw4UQHlmJcQQD/eRa/p9kDzgfFSlJg63Dydy
VNQxmdhuKdv+/cwLFlmcPRKYZvkeQ8V8FCMfJPPuIzdoPtUDm9L4G2EkdFUV1jHU
aMyWT//9rqE9PXDLLjIBqPUpij4WGXu/kqtINDalChzV7UOHiSSCFhNuPvYNQiks
+s8CGpINYT+QoyQWBk0IdtnPy5T9644Sk/BVRfDi8EbinTyLjBpIe1KF12zzwWWD
4U8Age/OL+POHOpvneJXO+cdt1si4YJq2uG883x/Y1a2Vp3xqEutAeqYnUX3EbQ=
-----END CERTIFICATE-----
Generated at Sat Mar 21 10:13:38 2026 by rpki-client