Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/tcjikEDijpXRT1lDNX_JhAqrt5I.roa
File: tcjikEDijpXRT1lDNX_JhAqrt5I.roa (raw, json)
Hash identifier: Aza8MTYflMbUlTM70/tMnxkQ4GmUTgksUt0LPd3HAHM=
Subject key identifier: B5:C8:E2:90:40:E2:8E:95:D1:4F:59:43:35:7F:C9:84:0A:AB:B7:92
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A0E9EACD7AA7225A13255844BB3DE0C3E1
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/tcjikEDijpXRT1lDNX_JhAqrt5I.roa
Signing time: Mon 28 Sep 2026 21:27:54 +0000
ROA not before: Mon 28 Sep 2026 21:27:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 150.237.68.0/24 maxlen: 24
150.237.69.0/24 maxlen: 24
150.237.70.0/24 maxlen: 24
150.237.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:ea:cd:7a:a7:22:5a:13:25:58:44:bb:3d:e0:c3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Sep 28 21:27:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5c8e29040e28e95d14f5943357fc9840aabb792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:a2:92:1f:e9:73:c8:f7:3e:0b:47:55:59:
58:8d:ef:15:68:e1:fa:0f:0a:16:db:d4:6e:10:f5:
53:79:56:a9:cc:6d:dc:2b:81:b6:81:5c:a6:06:4a:
a8:02:70:2e:dd:64:da:91:31:9b:ad:64:b6:d9:24:
d1:86:68:30:00:2f:30:21:a3:93:51:41:b3:46:c8:
98:e5:8a:23:f6:71:c5:ce:02:be:58:70:3b:ca:48:
5e:99:1e:44:81:15:53:f5:21:d4:f0:12:54:00:42:
cf:29:35:49:f3:1d:10:86:2f:53:ae:9e:e6:27:95:
32:24:bb:b4:7a:8a:3e:67:53:44:c5:e2:c8:51:83:
5f:a5:87:a9:c2:5d:a7:f5:8c:5c:5d:41:e6:53:e2:
d1:ba:af:f2:b9:b6:14:98:a9:14:5a:09:3e:37:27:
bc:d0:c5:6d:e6:91:aa:8f:cb:eb:c2:e1:3f:5d:5a:
c5:48:ca:6c:af:c0:20:c9:50:df:19:8b:8c:7a:58:
46:4a:05:52:8f:94:7d:3a:af:8d:7e:cd:39:2c:53:
83:23:fa:6a:f4:b4:34:e6:82:1c:7c:4e:83:ad:6e:
07:f7:f9:31:70:43:1a:f1:a7:a4:95:4b:c6:3a:8b:
b7:b4:c3:55:7e:94:bb:f4:30:ae:87:f8:82:75:3a:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C8:E2:90:40:E2:8E:95:D1:4F:59:43:35:7F:C9:84:0A:AB:B7:92
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/tcjikEDijpXRT1lDNX_JhAqrt5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.68.0/22
Signature Algorithm: sha256WithRSAEncryption
65:78:8d:8a:16:e5:3f:2d:89:21:fd:dc:8a:ba:56:42:3c:3f:
bb:84:42:bb:f9:8f:3b:f6:9a:97:f1:c2:a6:7e:96:74:90:2b:
9f:0a:5b:9a:fe:d8:53:63:30:51:4c:bc:95:aa:96:e2:d9:7d:
a6:d6:60:b2:f2:f9:9b:b3:9e:1c:83:dd:18:e2:17:c5:0c:d7:
3c:77:d0:e8:02:9b:16:0f:a4:9f:4d:d1:a6:a0:bf:51:7c:65:
65:e3:a9:66:90:ee:cd:c4:4b:c2:22:6d:65:61:62:b8:2a:93:
37:7b:24:0f:34:80:7c:8a:d8:54:fb:94:b7:33:18:f1:9e:e4:
76:c1:6c:64:a7:4b:07:8a:84:ef:5f:a5:80:67:e5:2e:9a:e8:
dd:d6:00:87:2b:21:cd:51:11:a5:36:f9:c2:cc:50:f9:89:f6:
63:76:a4:85:e9:45:ee:df:4a:38:f1:32:6a:50:53:1b:21:52:
7b:38:82:a9:7a:6d:7f:23:3c:18:4e:34:6b:2e:49:cd:d9:a7:
07:18:90:1f:a2:b0:93:d5:93:12:18:7e:89:82:a3:18:35:28:
dc:32:f2:b0:0b:54:fa:ad:f4:6f:44:48:a2:74:3a:79:bd:f6:
52:3f:91:1e:db:a5:a4:15:a2:08:d4:5a:a4:4c:90:2f:bf:10:
9c:1f:64:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:13:03 2026 by rpki-client