Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/g_sHPkLz2B90P8J8nDAbSwQ-ZcI.roa
File: g_sHPkLz2B90P8J8nDAbSwQ-ZcI.roa (raw, json)
Hash identifier: Cr2l3sA2U91TQ2iJwpkevScKeGzbtfdzzwvFdcFGH38=
Subject key identifier: 83:FB:07:3E:42:F3:D8:1F:74:3F:C2:7C:9C:30:1B:4B:04:3E:65:C2
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F6A059C378EE2ACCC809F3FB1963F4C0
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/g_sHPkLz2B90P8J8nDAbSwQ-ZcI.roa
Signing time: Thu 01 Oct 2026 08:41:38 +0000
ROA not before: Thu 01 Oct 2026 08:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20523
IP address blocks: 217.150.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a0:59:c3:78:ee:2a:cc:c8:09:f3:fb:19:63:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83fb073e42f3d81f743fc27c9c301b4b043e65c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:7a:ad:0a:c0:78:cc:a0:be:e5:86:33:94:
fb:fd:26:a5:05:d6:36:ab:40:9e:e5:6d:b1:44:64:
bd:84:0d:e1:cd:76:e6:07:2b:3a:73:2e:12:05:e6:
55:d8:43:7c:04:36:76:b5:0a:f4:cb:94:6d:a3:e0:
39:5c:52:29:de:2a:66:11:57:b9:bd:d9:67:e4:01:
00:0d:fd:b6:35:e8:1a:7b:2e:6c:32:84:41:45:89:
03:a4:7a:1a:00:7b:9d:00:77:47:d7:6e:81:0c:ba:
12:00:58:9d:40:82:b8:10:b1:30:b1:74:0a:9c:92:
94:21:09:17:47:6f:98:9e:be:d8:8a:d3:12:ba:cf:
81:a4:de:fe:41:f8:5c:ad:f1:49:ab:f9:46:ad:d3:
54:0b:57:8f:56:cf:9f:91:dc:cd:e0:bd:b4:95:23:
1a:91:f6:a8:79:9e:92:ef:a4:44:25:56:bf:24:54:
2f:0d:6b:f2:13:27:ab:e1:9f:73:df:05:95:a2:35:
16:70:de:81:e4:3a:40:25:38:13:4e:3e:00:d2:9d:
86:74:80:eb:02:34:1f:de:b5:a0:9a:c2:41:01:bf:
07:ee:5c:fa:39:26:ec:12:47:6f:39:d2:45:58:40:
c4:cb:a4:2b:22:45:08:bd:3c:d6:25:b4:b1:a4:8c:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FB:07:3E:42:F3:D8:1F:74:3F:C2:7C:9C:30:1B:4B:04:3E:65:C2
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/g_sHPkLz2B90P8J8nDAbSwQ-ZcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.150.128.0/20
Signature Algorithm: sha256WithRSAEncryption
42:95:c1:b2:a8:9f:a0:46:51:72:32:11:da:2b:aa:b6:14:77:
64:56:bb:0a:0c:2b:d9:17:4d:56:92:13:27:95:cb:7a:71:1b:
35:da:2e:85:84:3b:ad:a6:cc:5a:58:47:17:1f:f0:7f:96:8e:
25:9e:aa:15:aa:65:92:5b:dd:30:6f:e5:2a:af:89:ac:87:aa:
13:92:58:a5:18:c0:5d:e4:00:22:ed:01:8d:69:83:7d:0b:3b:
d7:3b:6c:37:49:f4:ec:fe:d2:71:12:db:3f:e7:d8:f5:36:63:
ee:44:7a:60:ef:e1:02:14:ca:ad:38:1f:6b:a9:2f:09:06:27:
f0:d7:dd:c4:03:10:35:35:9a:e4:e8:e6:d7:c9:ad:fc:68:b8:
a6:a2:68:e3:bf:3a:e6:38:b3:b6:58:c7:23:95:bd:4a:83:62:
77:fc:92:2e:3b:8a:b2:c3:4d:cd:9e:4b:7e:cc:ef:3e:d4:f1:
b2:ff:5b:59:e5:ed:44:49:d9:00:31:a8:d1:dc:10:80:76:4b:
b5:29:58:3d:a6:21:d3:00:68:a4:b4:b4:b0:ed:56:7e:b8:7e:
e8:e8:e3:48:41:4a:33:98:b8:77:44:5b:a9:55:28:0a:91:e7:
93:eb:b4:ab:55:6a:62:7d:b8:64:07:56:99:4b:ce:fa:68:ae:
18:16:e0:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD2oFnDeO4qzMgJ8/sZY/TAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMzY2OWVhZTg3NmQyZjIzYjlmODUyN2U4OGE4NzAyZGJk
NDIzZTMwHhcNMjYxMDAxMDg0MTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2ZiMDczZTQyZjNkODFmNzQzZmMyN2M5YzMwMWI0YjA0M2U2NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts96rQrAeMygvuWGM5T7/SalBdY2
q0Ce5W2xRGS9hA3hzXbmBys6cy4SBeZV2EN8BDZ2tQr0y5Rto+A5XFIp3ipmEVe5
vdln5AEADf22Negaey5sMoRBRYkDpHoaAHudAHdH126BDLoSAFidQIK4ELEwsXQK
nJKUIQkXR2+Ynr7YitMSus+BpN7+QfhcrfFJq/lGrdNUC1ePVs+fkdzN4L20lSMa
kfaoeZ6S76REJVa/JFQvDWvyEyer4Z9z3wWVojUWcN6B5DpAJTgTTj4A0p2GdIDr
AjQf3rWgmsJBAb8H7lz6OSbsEkdvOdJFWEDEy6QrIkUIvTzWJbSxpIwmrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIP7Bz5C89gfdD/CfJwwG0sEPmXCMB8GA1UdIwQY
MBaAFOo2aerodtLyO5+FJ+iKhwLb1CPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjct
M2FjZTFlZmYzYTI0LzEvZ19zSFBrTHoyQjkwUDhKOG5EQWJTd1EtWmNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjctM2FjZTFlZmYzYTI0
LzEvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ZaAMA0G
CSqGSIb3DQEBCwUAA4IBAQBClcGyqJ+gRlFyMhHaK6q2FHdkVrsKDCvZF01WkhMn
lct6cRs12i6FhDutpsxaWEcXH/B/lo4lnqoVqmWSW90wb+Uqr4msh6oTklilGMBd
5AAi7QGNaYN9CzvXO2w3SfTs/tJxEts/59j1NmPuRHpg7+ECFMqtOB9rqS8JBifw
193EAxA1NZrk6ObXya38aLimomjjvzrmOLO2WMcjlb1Kg2J3/JIuO4qyw03Nnkt+
zO8+1PGy/1tZ5e1ESdkAMajR3BCAdku1KVg9piHTAGiktLSw7VZ+uH7o6ONIQUoz
mLh3RFupVSgKkeeT67SrVWpifbhkB1aZS876aK4YFuA/
-----END CERTIFICATE-----
Generated at Tue Oct 20 23:50:18 2026 by rpki-client