Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1Z0_ApxcuCgioh0MyVjG8-TfHBs.roa
File: 1Z0_ApxcuCgioh0MyVjG8-TfHBs.roa (raw, json)
Hash identifier: V6e6Q0bshSnj00CzAXXKaUf+tlaSG0UpJbFK5HGxko0=
Subject key identifier: D5:9D:3F:02:9C:5C:B8:28:22:A2:1D:0C:C9:58:C6:F3:E4:DF:1C:1B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019FC6E5CA676580E4A4540ABD0C5D147AD1
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1Z0_ApxcuCgioh0MyVjG8-TfHBs.roa
Signing time: Mon 03 Aug 2026 09:12:55 +0000
ROA not before: Mon 03 Aug 2026 09:12:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213122
IP address blocks: 2.58.201.0/24 maxlen: 24
2.58.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:e5:ca:67:65:80:e4:a4:54:0a:bd:0c:5d:14:7a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 3 09:12:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d59d3f029c5cb82822a21d0cc958c6f3e4df1c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:fe:88:cd:e5:4a:69:81:18:fa:3a:50:73:
b2:3d:82:4e:97:cb:4b:09:57:40:7b:20:d8:4d:52:
9e:dd:f6:b8:1c:5f:94:76:55:c2:f4:87:17:d5:8d:
f7:d9:b8:38:35:2f:fc:a7:99:57:d1:3d:51:94:97:
09:5d:f3:dd:f3:97:3e:bf:a0:21:d3:e4:41:0c:24:
c2:5a:06:f1:87:7f:eb:cc:c2:5e:e9:59:ab:8c:96:
7d:ee:9e:4b:16:89:d6:f0:31:00:24:16:a8:67:f2:
51:6e:5e:5f:3d:a8:d7:a0:47:8d:87:90:b5:9e:9b:
ef:ab:77:a5:d8:8e:02:0e:71:5e:ae:b3:73:a1:6f:
3b:37:64:28:a1:6f:7e:e4:7e:4d:41:e9:a4:25:eb:
d7:71:5c:39:22:63:32:74:98:b9:29:99:61:d9:7c:
c6:7a:c8:8d:99:11:6b:16:4d:b4:2f:b8:aa:1b:e7:
23:04:c6:72:72:77:7b:56:47:e6:1f:9b:3a:80:32:
c6:19:d9:af:9e:ce:8f:33:04:b3:4c:fb:8f:1a:99:
f9:19:bf:d7:01:eb:2a:f1:01:79:59:71:57:8b:30:
94:67:ab:00:df:2f:f5:d5:31:2c:1f:13:98:50:a8:
b9:9d:c2:cb:10:bb:c4:da:2a:c4:3d:61:76:95:49:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:3F:02:9C:5C:B8:28:22:A2:1D:0C:C9:58:C6:F3:E4:DF:1C:1B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1Z0_ApxcuCgioh0MyVjG8-TfHBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.201.0-2.58.202.255
Signature Algorithm: sha256WithRSAEncryption
9c:f7:22:e7:e0:cf:83:c4:c1:6a:61:c0:0a:bb:63:f0:21:b3:
10:27:8d:71:ab:f9:e0:be:d6:5c:22:07:8a:3e:c6:5a:7d:07:
e3:99:81:49:df:03:ad:fc:00:e5:63:c0:11:cb:8a:03:a6:a5:
6e:62:1f:4e:ce:76:bd:dc:d1:f8:e1:18:09:63:7d:0c:6b:56:
f6:7c:20:56:b6:94:35:8c:83:2e:f7:bc:85:0a:42:cf:b9:d6:
2d:3c:d6:a0:69:12:fc:0f:a3:f0:42:be:e9:24:ab:92:c8:31:
9f:ea:e3:c0:98:39:7e:d0:e2:8b:96:25:2e:83:8d:92:cc:38:
cc:cf:ba:a6:bb:4d:40:44:1e:e9:b6:5f:34:c3:de:df:88:ab:
81:5b:71:ab:96:c0:92:92:ea:f2:ff:7b:7c:9c:c0:96:d1:41:
d1:b4:17:51:28:aa:16:10:ac:71:b6:b3:6c:c4:1c:33:cd:2e:
c7:e6:1b:81:bf:38:d9:c6:22:6a:0c:d1:c0:3d:9c:c0:61:57:
9a:5e:58:72:77:41:c4:0a:6d:8d:f0:08:b8:f6:dd:bf:63:13:
68:8a:e1:8b:41:3a:cd:dd:0d:ce:11:56:fe:4a:b2:9e:f7:b0:
24:7d:d9:c3:f5:ed:94:42:45:3c:b6:a9:ea:e4:48:65:28:2b:
97:7e:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:29:06 2026 by rpki-client