Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/dzJJ9iO5CZzXx6IYJCJswDVMxwo.roa
File: dzJJ9iO5CZzXx6IYJCJswDVMxwo.roa (raw, json)
Hash identifier: Tq90AY1mI1gTBfp6PMA/p5bw2R0ha3Bh0Do2Sy6jw6c=
Subject key identifier: 77:32:49:F6:23:B9:09:9C:D7:C7:A2:18:24:22:6C:C0:35:4C:C7:0A
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 01A17E98CE1FFF4D873339D19065E5166347
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/dzJJ9iO5CZzXx6IYJCJswDVMxwo.roa
Signing time: Tue 27 Oct 2026 18:21:45 +0000
ROA not before: Tue 27 Oct 2026 18:21:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142019
IP address blocks: 194.150.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:98:ce:1f:ff:4d:87:33:39:d1:90:65:e5:16:63:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Oct 27 18:21:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=773249f623b9099cd7c7a21824226cc0354cc70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:6f:0f:cb:a1:08:b7:0b:76:47:4a:bd:c7:
2c:94:df:80:41:ec:8a:e2:f1:4a:71:6b:ac:d7:d8:
fa:4e:b4:a7:a3:49:92:5f:0b:64:a3:90:1c:05:72:
65:8c:36:4c:c8:c5:78:08:4d:6d:23:f1:59:1e:9a:
c1:d8:6b:90:e4:fa:c3:fb:f2:cd:6d:0e:c7:96:b1:
8f:73:75:e1:fc:8a:02:e4:99:d5:bd:42:e0:3c:3f:
54:26:e1:7e:f2:ee:14:4e:23:90:a2:11:3f:d9:9b:
d4:b9:b2:df:6c:86:e2:69:b0:08:29:82:5d:d0:f2:
ff:5c:28:b1:75:18:2b:ea:97:36:c5:13:25:61:7f:
76:f1:d3:d3:67:cd:18:38:40:58:6f:c9:96:19:cc:
3c:0b:90:ed:32:c0:70:31:d7:10:f1:12:d4:96:5e:
03:ad:e6:16:99:be:2f:c7:47:d7:cc:d7:5d:b3:d0:
4f:ee:40:2f:2a:47:96:00:fb:e5:91:a1:18:f0:3c:
f0:d9:28:29:12:69:f5:8a:72:67:7a:b1:9d:04:e0:
87:9f:ce:a1:29:9c:8c:ca:5f:97:c1:8d:3d:8d:e3:
52:41:d4:b6:01:74:92:ed:40:c4:8d:54:26:b3:11:
72:bb:59:61:88:ff:04:c2:0d:1d:c6:d7:14:83:b2:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:49:F6:23:B9:09:9C:D7:C7:A2:18:24:22:6C:C0:35:4C:C7:0A
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/dzJJ9iO5CZzXx6IYJCJswDVMxwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.75.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:00:71:9b:41:17:42:bf:52:81:90:4b:48:67:1b:55:c9:23:
e4:28:37:42:47:02:77:ad:f1:49:52:f4:e6:1d:1b:0a:12:7e:
d4:39:9d:fc:e7:46:4c:5d:01:22:5e:11:89:c5:57:eb:1a:3f:
37:95:56:a7:b5:4d:fe:14:74:02:47:ac:52:2e:e9:3f:07:c0:
d0:89:16:1a:09:4f:9b:74:f4:01:0a:ca:48:0c:47:57:c7:59:
f1:18:6e:c1:01:75:d4:91:a2:7f:ff:5b:d2:59:d7:51:f0:5e:
ad:fd:75:ea:d6:84:bc:3d:6a:a4:8e:31:f1:10:33:c0:ef:1c:
a3:47:a3:d5:2e:60:26:9c:d8:77:c3:0e:fa:87:70:04:cb:0a:
fc:8e:a2:ed:16:b6:45:79:f8:a4:1a:bb:36:c8:af:b5:fb:dd:
bc:5b:52:dd:c9:96:cb:a6:df:d3:57:95:cc:9a:f2:0c:f2:bb:
b5:f5:e4:51:4f:b3:33:61:97:f2:4f:13:d9:02:60:b7:55:4a:
e5:36:49:0f:07:2b:90:32:b1:41:3a:1e:8f:0f:b5:97:43:9e:
1f:e2:5b:52:11:72:b0:15:31:57:c6:9b:b5:64:1f:f3:a7:58:
e7:41:4e:fb:b9:3c:80:97:79:db:1e:81:1d:a8:ed:9a:57:3a:
7c:7d:7c:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF+mM4f/02HMznRkGXlFmNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkM2MzOTg3ZTdjMzRiMzY2YWEwZjA5YzQwZWE0YzgwYmZl
ZDBlMDEwHhcNMjYxMDI3MTgyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzMyNDlmNjIzYjkwOTljZDdjN2EyMTgyNDIyNmNjMDM1NGNjNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0FvD8uhCLcLdkdKvccslN+AQeyK
4vFKcWus19j6TrSno0mSXwtko5AcBXJljDZMyMV4CE1tI/FZHprB2GuQ5PrD+/LN
bQ7HlrGPc3Xh/IoC5JnVvULgPD9UJuF+8u4UTiOQohE/2ZvUubLfbIbiabAIKYJd
0PL/XCixdRgr6pc2xRMlYX928dPTZ80YOEBYb8mWGcw8C5DtMsBwMdcQ8RLUll4D
reYWmb4vx0fXzNdds9BP7kAvKkeWAPvlkaEY8Dzw2SgpEmn1inJnerGdBOCHn86h
KZyMyl+XwY09jeNSQdS2AXSS7UDEjVQmsxFyu1lhiP8Ewg0dxtcUg7JckQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHcySfYjuQmc18eiGCQibMA1TMcKMB8GA1UdIwQY
MBaAFC08OYfnw0s2aqDwnEDqTIC/7Q4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2Ut
M2E2ZGU5OWVkZTQ3LzEvZHpKSjlpTzVDWnpYeDZJWUpDSnN3RFZNeHdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2UtM2E2ZGU5OWVkZTQ3
LzEvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpZLMA0G
CSqGSIb3DQEBCwUAA4IBAQDCAHGbQRdCv1KBkEtIZxtVySPkKDdCRwJ3rfFJUvTm
HRsKEn7UOZ3850ZMXQEiXhGJxVfrGj83lVantU3+FHQCR6xSLuk/B8DQiRYaCU+b
dPQBCspIDEdXx1nxGG7BAXXUkaJ//1vSWddR8F6t/XXq1oS8PWqkjjHxEDPA7xyj
R6PVLmAmnNh3ww76h3AEywr8jqLtFrZFefikGrs2yK+1+928W1LdyZbLpt/TV5XM
mvIM8ru19eRRT7MzYZfyTxPZAmC3VUrlNkkPByuQMrFBOh6PD7WXQ54f4ltSEXKw
FTFXxpu1ZB/zp1jnQU77uTyAl3nbHoEdqO2aVzp8fXzP
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:22:28 2026 by rpki-client