Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/lrKpz4zt1BJR86oilJEYbBvvO8E.roa
File: lrKpz4zt1BJR86oilJEYbBvvO8E.roa (raw, json)
Hash identifier: JdS6nB2WfyIXLJvp2VnADOpDh/46Cb/1Hcm4KtK3YD8=
Subject key identifier: 96:B2:A9:CF:8C:ED:D4:12:51:F3:AA:22:94:91:18:6C:1B:EF:3B:C1
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019F297642AF01B94838EA9DD5C2BA9AA009
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/lrKpz4zt1BJR86oilJEYbBvvO8E.roa
Signing time: Fri 03 Jul 2026 19:30:43 +0000
ROA not before: Fri 03 Jul 2026 19:30:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211344
IP address blocks: 150.251.32.0/24 maxlen: 24
150.251.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:76:42:af:01:b9:48:38:ea:9d:d5:c2:ba:9a:a0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jul 3 19:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96b2a9cf8cedd41251f3aa229491186c1bef3bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:88:55:0a:e7:ff:bd:63:53:a5:79:12:25:
4b:29:ec:29:fb:11:31:c3:3f:fa:27:dd:ff:39:54:
52:88:00:af:83:f2:ff:b4:c2:56:19:56:d9:c3:1f:
a6:3b:fc:9e:ff:be:6c:4c:5e:ab:8e:36:94:d9:3d:
93:cf:0d:6e:91:d7:ec:df:f1:87:4e:08:0a:a5:78:
36:f8:6a:71:c6:81:ae:88:be:d1:76:11:ff:99:8d:
b5:ca:4a:ff:91:28:af:2e:0e:22:8c:19:83:f7:16:
9e:76:ba:51:ad:d4:8a:99:21:53:8a:fa:34:ef:fe:
2d:92:bf:b4:5f:57:6f:8c:e6:4e:5a:2d:6b:e7:20:
4c:b9:e8:6f:aa:04:95:7d:4f:74:e8:b1:1e:47:39:
c5:6e:51:d7:ff:b8:bf:ee:df:5c:72:34:e7:f8:d2:
80:6d:3d:6f:c8:bb:f5:8f:ba:66:73:08:46:4a:9c:
ba:1c:b2:bc:2b:a5:59:33:bc:bf:7f:e4:4d:15:82:
28:c0:40:c8:10:b6:d2:19:aa:53:c9:15:26:bd:7b:
85:21:83:be:d5:ce:12:24:98:f5:5a:30:c7:5c:1c:
71:db:78:ad:8f:7e:98:99:3d:be:a0:df:70:cf:7e:
d5:b4:fe:56:b4:d3:62:0a:2b:90:94:19:6a:6e:fd:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B2:A9:CF:8C:ED:D4:12:51:F3:AA:22:94:91:18:6C:1B:EF:3B:C1
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/lrKpz4zt1BJR86oilJEYbBvvO8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.32.0/24
150.251.148.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ba:25:90:a2:bc:f1:29:fc:e9:69:41:8e:6f:c4:18:84:55:
07:05:5f:25:df:39:2f:23:81:d9:16:a3:7a:b3:1c:3b:2d:27:
4e:12:d6:de:5f:95:a3:e2:5b:a8:7b:3c:14:93:77:cb:92:7a:
5e:f5:5a:17:80:ce:e3:c6:e0:a6:e5:95:e6:da:d9:4f:d1:94:
c3:cb:30:11:90:d0:a8:c6:7a:fb:45:48:e2:d3:52:fe:78:2c:
b9:50:13:a6:f9:9f:01:ee:5e:37:0f:64:19:07:d0:d2:14:32:
60:c0:24:df:71:25:e9:12:e9:8e:a4:a1:bb:19:4c:4b:b6:d5:
da:ab:fd:b8:80:51:38:d8:9d:aa:85:58:e7:4e:e9:fb:48:04:
a9:4c:00:61:d0:76:f1:96:72:87:ad:6b:9e:d3:c6:0f:20:18:
52:7e:26:57:d1:08:fa:b1:95:d7:ac:9e:eb:33:3d:c8:b7:b5:
63:9b:e9:ee:87:12:9a:2e:14:79:d3:2d:a2:7b:b9:a4:63:16:
e1:8e:4e:89:d5:32:ce:5e:cb:c7:6b:16:0f:c4:fb:d3:37:25:
84:ed:2f:e7:72:3f:e8:de:51:eb:df:d8:84:0b:05:d3:25:a9:
ec:87:3c:e8:2e:98:7a:59:ab:42:2f:3a:5e:e7:cd:ac:b7:31:
91:ca:a6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:38:12 2026 by rpki-client