Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/8zq8jfhLay9GEdkNHcrcZemerhE.roa
File: 8zq8jfhLay9GEdkNHcrcZemerhE.roa (raw, json)
Hash identifier: /mN4edi0sUvFQSqIfI4jaHDgFZ0DAjGTQZtelr4gllA=
Subject key identifier: F3:3A:BC:8D:F8:4B:6B:2F:46:11:D9:0D:1D:CA:DC:65:E9:9E:AE:11
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A1D0AC27FF3969E0D5B0EDE573202D02DF
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/8zq8jfhLay9GEdkNHcrcZemerhE.roa
Signing time: Thu 12 Nov 2026 16:51:45 +0000
ROA not before: Thu 12 Nov 2026 16:51:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 150.237.72.0/24 maxlen: 24
150.237.73.0/24 maxlen: 24
150.237.74.0/24 maxlen: 24
150.237.75.0/24 maxlen: 24
150.237.79.0/24 maxlen: 24
150.237.88.0/24 maxlen: 24
150.237.89.0/24 maxlen: 24
150.237.90.0/24 maxlen: 24
150.237.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:ac:27:ff:39:69:e0:d5:b0:ed:e5:73:20:2d:02:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Nov 12 16:51:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f33abc8df84b6b2f4611d90d1dcadc65e99eae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:0c:af:ab:01:e7:85:1d:30:bb:3d:c7:20:
1d:22:be:a0:be:35:a3:c0:b3:41:6c:39:84:98:fe:
99:34:c2:17:f9:fa:75:33:a6:47:3e:da:d0:16:36:
71:be:c0:bf:8e:71:73:c5:60:0f:2f:10:94:e1:91:
27:8b:af:e7:74:ce:a6:59:a0:4e:ff:e5:af:30:12:
51:0a:bb:fb:d0:7a:af:90:77:ef:ad:53:97:6b:20:
e0:68:7d:d1:40:a4:99:b3:44:11:aa:39:d7:c7:01:
73:9f:37:d0:cb:0f:35:5c:db:0f:15:f6:21:05:e2:
8b:f2:df:7f:b7:44:a1:d4:ae:99:d0:b8:f7:db:0f:
45:45:d1:6c:f6:58:50:e8:0b:87:95:d4:37:66:39:
bd:95:96:50:e6:86:2f:6a:23:e8:79:c2:ee:c3:f5:
d0:ed:22:f1:74:65:00:2c:46:37:3d:8f:34:0c:a8:
1f:50:51:f8:62:3c:db:ea:ad:44:7f:e7:f6:aa:2d:
e3:11:1d:df:3e:02:bf:f7:c1:50:fb:38:9c:e6:24:
89:7a:06:ee:06:7c:e9:de:cf:9e:96:49:95:b4:68:
ae:fc:fd:e9:f1:8d:d7:c0:e6:f5:1a:59:5e:a7:b4:
14:eb:65:3f:44:5f:82:92:8b:97:e3:93:ee:7f:ef:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3A:BC:8D:F8:4B:6B:2F:46:11:D9:0D:1D:CA:DC:65:E9:9E:AE:11
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/8zq8jfhLay9GEdkNHcrcZemerhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.72.0/22
150.237.79.0/24
150.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
46:f4:30:27:cf:e1:14:03:ae:d6:8b:af:78:b8:56:a2:6c:3c:
0e:7e:ac:91:8f:74:d7:11:2f:5d:51:2f:1c:a2:d7:0e:82:a9:
cf:22:7c:62:5f:3e:fc:94:8f:66:71:88:4f:16:36:3f:b9:6e:
87:94:9f:cd:73:17:60:17:e5:62:e2:3d:5b:52:1c:43:d2:85:
bd:b3:2b:7e:07:e2:8d:40:ea:a9:ba:a0:12:6a:0e:00:62:57:
b3:98:26:f0:d4:14:ce:5d:54:ae:35:d7:f9:62:e1:ab:f0:82:
92:3d:38:2f:f9:8a:03:19:f2:cd:1c:63:e0:2d:cc:91:06:b2:
32:5c:f4:22:99:e5:0c:00:5c:13:98:47:a3:80:93:bc:ab:a2:
f1:ee:dc:6d:da:d6:20:61:34:ab:eb:34:16:5f:44:6b:ea:fb:
d9:65:2f:1f:d0:fa:d7:58:0d:eb:11:00:5f:c3:67:f4:52:89:
87:e8:16:d5:99:28:b2:b7:65:e8:80:f8:14:79:d2:50:58:15:
51:23:0e:c6:db:83:86:84:7c:f0:e3:62:02:18:83:b7:32:9e:
c0:83:6e:74:7d:f9:dc:45:4d:a2:48:f7:de:09:59:97:10:1b:
44:6b:6c:e8:d4:26:63:ac:47:31:34:ae:fa:d5:da:b3:b0:53:
93:e7:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:23 2026 by rpki-client