Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/sGLZo9Eoen8LA7LFGDK3yyF3vG0.roa
File: sGLZo9Eoen8LA7LFGDK3yyF3vG0.roa (raw, json)
Hash identifier: 8HbGLdy+KioWh0LLNMUAVkm+QjxpuM+9CGW87LgdAXI=
Subject key identifier: B0:62:D9:A3:D1:28:7A:7F:0B:03:B2:C5:18:32:B7:CB:21:77:BC:6D
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A12A800537BEFC342CCF44A28E898EA92A
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/sGLZo9Eoen8LA7LFGDK3yyF3vG0.roa
Signing time: Sun 11 Oct 2026 10:26:35 +0000
ROA not before: Sun 11 Oct 2026 10:26:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218809
IP address blocks: 150.237.81.0/24 maxlen: 24
150.237.82.0/24 maxlen: 24
150.237.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:80:05:37:be:fc:34:2c:cf:44:a2:8e:89:8e:a9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 11 10:26:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b062d9a3d1287a7f0b03b2c51832b7cb2177bc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:c8:36:af:d6:ed:0e:34:21:ef:83:4d:40:
de:a9:18:56:c3:62:19:0e:df:04:ff:cf:bd:51:67:
ac:09:69:10:34:4b:cc:31:cc:d1:2b:43:1e:03:f3:
e3:ec:3c:9b:25:a2:30:9f:0a:c7:15:9b:65:77:36:
1f:27:fa:1b:b9:b6:e9:56:8b:a7:f7:71:a0:cf:ef:
7d:e2:a1:fc:b5:a5:ea:39:d0:8d:64:91:56:4a:03:
e2:f7:94:c1:29:1d:0b:44:19:f5:c6:2b:b6:d2:35:
cb:75:aa:7e:bc:da:7f:b2:f6:5d:ae:2f:e6:20:7f:
3c:81:6b:23:cb:46:80:13:82:ae:b7:4f:6e:75:11:
44:dc:ec:b5:3a:16:63:da:a3:5f:47:1c:56:e5:b0:
cc:d7:ef:13:b9:76:25:12:d3:12:89:72:8b:8d:39:
be:6b:69:48:4d:34:be:47:8b:38:f6:e5:d8:66:1b:
e8:87:ef:85:4b:c1:72:04:a0:8e:38:e0:4a:04:8e:
ab:11:c9:03:26:e3:7e:bd:30:f4:35:a8:bb:4d:91:
8c:7d:01:b5:19:9e:a1:9e:f5:97:83:d6:22:e3:4e:
87:48:2a:41:f2:51:14:9b:ee:fd:3f:9e:e0:cc:f7:
33:05:f4:4f:b5:76:4c:09:bb:3b:a6:49:9f:98:97:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:62:D9:A3:D1:28:7A:7F:0B:03:B2:C5:18:32:B7:CB:21:77:BC:6D
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/sGLZo9Eoen8LA7LFGDK3yyF3vG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.81.0-150.237.83.255
Signature Algorithm: sha256WithRSAEncryption
9d:88:92:c4:e5:2e:96:69:36:65:50:49:68:c6:c3:57:2d:7e:
34:31:3a:59:26:bf:29:c0:af:80:b8:68:70:99:f3:e2:87:b4:
f2:3f:d2:b6:7f:3a:ce:3d:6a:f5:83:e0:29:26:d7:8a:36:17:
b1:10:a6:e6:e0:81:af:24:e5:3e:fe:02:30:ad:10:ab:a8:41:
c0:e4:a4:0e:6f:54:42:41:26:27:85:46:d5:41:e3:11:60:40:
2f:92:98:e5:c4:f4:1e:73:9c:19:56:9c:6d:3c:fe:32:e9:d6:
bc:fa:5c:ce:9b:1e:9d:94:02:53:16:b5:54:cf:9e:7d:9d:bc:
34:b0:27:6d:6a:29:6b:51:df:40:73:73:e0:5a:c1:1e:16:59:
44:77:97:44:3c:0e:fd:43:21:46:5a:e5:19:c0:69:39:54:c0:
c6:f6:57:7e:3b:73:55:b6:3e:53:db:31:f9:b0:bc:80:3a:00:
91:10:09:60:d9:b4:c2:68:07:a7:f2:55:81:16:83:7b:83:60:
35:10:3e:2a:64:79:0a:0f:60:04:6c:06:d3:2f:12:0b:5e:d8:
c3:0c:50:37:b3:2e:04:f3:8c:aa:bd:e0:55:78:13:1c:ae:c5:
d3:a2:e7:71:38:66:b5:23:75:ca:17:80:ae:c2:42:d3:b7:ef:
d8:c3:0b:5b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaEqgAU3vvw0LM9Eoo6JjqkqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYxMDExMTAyNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDYyZDlhM2QxMjg3YTdmMGIwM2IyYzUxODMyYjdjYjIxNzdiYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxavINq/W7Q40Ie+DTUDeqRhWw2IZ
Dt8E/8+9UWesCWkQNEvMMczRK0MeA/Pj7DybJaIwnwrHFZtldzYfJ/obubbpVoun
93Ggz+994qH8taXqOdCNZJFWSgPi95TBKR0LRBn1xiu20jXLdap+vNp/svZdri/m
IH88gWsjy0aAE4Kut09udRFE3Oy1OhZj2qNfRxxW5bDM1+8TuXYlEtMSiXKLjTm+
a2lITTS+R4s49uXYZhvoh++FS8FyBKCOOOBKBI6rEckDJuN+vTD0Nai7TZGMfQG1
GZ6hnvWXg9Yi406HSCpB8lEUm+79P57gzPczBfRPtXZMCbs7pkmfmJfCOQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLBi2aPRKHp/CwOyxRgyt8shd7xtMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvc0dMWm85RW9lbjhMQTdMRkdESzN5eUYzdkcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACW7VED
BAKW7VAwDQYJKoZIhvcNAQELBQADggEBAJ2IksTlLpZpNmVQSWjGw1ctfjQxOlkm
vynAr4C4aHCZ8+KHtPI/0rZ/Os49avWD4Ckm14o2F7EQpubgga8k5T7+AjCtEKuo
QcDkpA5vVEJBJieFRtVB4xFgQC+SmOXE9B5znBlWnG08/jLp1rz6XM6bHp2UAlMW
tVTPnn2dvDSwJ21qKWtR30Bzc+BawR4WWUR3l0Q8Dv1DIUZa5RnAaTlUwMb2V347
c1W2PlPbMfmwvIA6AJEQCWDZtMJoB6fyVYEWg3uDYDUQPipkeQoPYARsBtMvEgte
2MMMUDezLgTzjKq94FV4ExyuxdOi53E4ZrUjdcoXgK7CQtO379jDC1s=
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:45 2026 by rpki-client