Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/trj4JZrm6KW5qnh9ub0Hfax8sRc.roa
File: trj4JZrm6KW5qnh9ub0Hfax8sRc.roa (raw, json)
Hash identifier: eBo6mSyklGxZ2aUk7O6A4iy6fxSynJ3DR1pW3j9PUQQ=
Subject key identifier: B6:B8:F8:25:9A:E6:E8:A5:B9:AA:78:7D:B9:BD:07:7D:AC:7C:B1:17
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019FD7D2F43D8E20DAE233E5F5FB0E944FEA
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/trj4JZrm6KW5qnh9ub0Hfax8sRc.roa
Signing time: Thu 06 Aug 2026 16:05:54 +0000
ROA not before: Thu 06 Aug 2026 16:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219059
IP address blocks: 150.251.35.0/24 maxlen: 24
193.29.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:d2:f4:3d:8e:20:da:e2:33:e5:f5:fb:0e:94:4f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Aug 6 16:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6b8f8259ae6e8a5b9aa787db9bd077dac7cb117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:9f:d1:57:43:a4:e3:4f:fc:1e:32:ed:25:
81:98:85:3a:c5:9a:ce:84:b4:cb:83:3a:f0:34:d2:
95:bf:09:36:e7:ab:e6:86:2b:aa:cd:d1:bb:0b:e4:
8d:c2:2a:c4:0a:4a:7f:1a:1d:d1:8f:c4:a5:c4:d2:
34:7f:ee:9f:08:37:07:e1:79:e4:8b:7f:ca:fa:e8:
e6:da:49:60:a8:27:68:91:41:74:8a:71:65:b0:0e:
01:60:e2:23:ae:60:52:e8:b6:60:68:6f:9c:b0:9e:
38:a9:2e:73:2a:f2:4a:94:c6:d7:61:22:f5:d8:3f:
87:3a:45:ed:92:87:fe:3f:42:32:d8:9c:c8:6e:af:
c4:d4:88:54:26:e0:f5:97:27:aa:ab:c5:36:53:ad:
32:37:04:83:9f:fe:0b:cc:f2:ac:82:a0:97:ad:ba:
b6:70:80:44:8a:6d:c4:a1:78:19:c0:d3:c0:e8:6d:
d3:bd:23:10:dd:34:72:0e:0c:85:c8:57:93:1e:b1:
b2:c4:e9:a7:21:3e:34:79:89:67:a8:ad:80:65:3a:
c8:be:4f:bd:87:34:ac:81:38:78:c2:80:b8:9a:86:
51:91:30:a3:34:e4:b5:2a:49:5c:a4:11:41:0d:5d:
e4:fc:85:9f:2c:63:f8:74:2d:7c:39:21:f2:c0:85:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B8:F8:25:9A:E6:E8:A5:B9:AA:78:7D:B9:BD:07:7D:AC:7C:B1:17
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/trj4JZrm6KW5qnh9ub0Hfax8sRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.35.0/24
193.29.180.0/24
Signature Algorithm: sha256WithRSAEncryption
00:16:d1:da:ae:18:92:a3:48:03:e7:17:f1:60:ac:b9:01:8a:
ba:ec:f8:5f:88:61:21:7b:65:45:5c:64:24:6c:be:e4:04:08:
12:fd:e8:f0:48:c4:6e:8f:47:02:dc:db:07:7b:bb:73:64:68:
24:67:32:45:9b:c6:04:72:06:60:bd:ed:e5:13:fb:4c:3a:be:
df:df:99:e0:36:d3:33:7e:99:f0:35:72:d9:cb:1f:8f:88:2d:
be:80:96:a8:9d:33:b7:f4:c5:38:95:e3:9a:69:8d:a4:ad:bf:
b0:31:41:86:1f:f6:0f:66:0e:5f:6e:e5:81:f4:58:1d:a4:59:
1d:d6:6a:b5:a4:18:14:90:3b:a7:15:b8:3c:c8:14:34:1e:9c:
ea:39:ff:59:10:7d:c5:0d:4d:1c:67:2a:bf:b2:13:77:4c:59:
3c:bb:1f:43:6d:3c:77:70:79:51:8c:46:a8:89:09:68:a9:45:
78:69:fc:8b:26:15:19:c7:57:d8:45:50:f7:85:6f:58:98:f9:
80:b6:33:48:a1:52:e5:b9:ba:f3:56:47:d2:3e:56:a3:33:61:
d9:60:a8:67:8b:bf:d3:7b:d2:6a:11:fc:85:41:12:ea:4a:66:
8e:2b:96:13:a7:aa:ed:64:35:87:45:c4:53:d7:9e:3d:80:e8:
ed:00:9b:28
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/X0vQ9jiDa4jPl9fsOlE/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYwODA2MTYwNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmI4ZjgyNTlhZTZlOGE1YjlhYTc4N2RiOWJkMDc3ZGFjN2NiMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv72f0VdDpONP/B4y7SWBmIU6xZrO
hLTLgzrwNNKVvwk256vmhiuqzdG7C+SNwirECkp/Gh3Rj8SlxNI0f+6fCDcH4Xnk
i3/K+ujm2klgqCdokUF0inFlsA4BYOIjrmBS6LZgaG+csJ44qS5zKvJKlMbXYSL1
2D+HOkXtkof+P0Iy2JzIbq/E1IhUJuD1lyeqq8U2U60yNwSDn/4LzPKsgqCXrbq2
cIBEim3EoXgZwNPA6G3TvSMQ3TRyDgyFyFeTHrGyxOmnIT40eYlnqK2AZTrIvk+9
hzSsgTh4woC4moZRkTCjNOS1KklcpBFBDV3k/IWfLGP4dC18OSHywIUY3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLa4+CWa5uiluap4fbm9B32sfLEXMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvdHJqNEpacm02S1c1cW5oOXViMEhmYXg4c1JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAlvsjAwQA
wR20MA0GCSqGSIb3DQEBCwUAA4IBAQAAFtHarhiSo0gD5xfxYKy5AYq67PhfiGEh
e2VFXGQkbL7kBAgS/ejwSMRuj0cC3NsHe7tzZGgkZzJFm8YEcgZgve3lE/tMOr7f
35ngNtMzfpnwNXLZyx+PiC2+gJaonTO39MU4leOaaY2krb+wMUGGH/YPZg5fbuWB
9FgdpFkd1mq1pBgUkDunFbg8yBQ0HpzqOf9ZEH3FDU0cZyq/shN3TFk8ux9DbTx3
cHlRjEaoiQloqUV4afyLJhUZx1fYRVD3hW9YmPmAtjNIoVLlubrzVkfSPlajM2HZ
YKhni7/Te9JqEfyFQRLqSmaOK5YTp6rtZDWHRcRT1549gOjtAJso
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:55:52 2026 by rpki-client