Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Sgfp1UT19G6H6hBNrBxFeqHCOsQ.roa
File: Sgfp1UT19G6H6hBNrBxFeqHCOsQ.roa (raw, json)
Hash identifier: VbpT0QmFbmZC7455vlm8HzA54E69MOhcbNCjq872vIM=
Subject key identifier: 4A:07:E9:D5:44:F5:F4:6E:87:EA:10:4D:AC:1C:45:7A:A1:C2:3A:C4
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A0E2104E221D08C4C125408B46CAA8E0CC
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Sgfp1UT19G6H6hBNrBxFeqHCOsQ.roa
Signing time: Sun 27 Sep 2026 08:51:54 +0000
ROA not before: Sun 27 Sep 2026 08:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198077
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:10:4e:22:1d:08:c4:c1:25:40:8b:46:ca:a8:e0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 27 08:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a07e9d544f5f46e87ea104dac1c457aa1c23ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:c0:1d:5e:65:ba:dc:58:d1:77:f7:13:b9:
36:d0:2a:70:20:d1:3d:5e:be:4a:eb:ff:16:c8:06:
fd:2e:7f:87:32:15:41:e7:65:f2:18:f8:99:7e:be:
9c:1c:b7:88:19:12:44:ed:17:99:78:7e:eb:31:6a:
78:cd:e0:0c:20:d5:c9:60:dc:20:4b:19:f4:f2:0f:
97:17:65:ce:98:9c:d0:91:31:b9:48:2e:df:24:9e:
61:1e:af:6c:e2:ab:17:76:3a:9d:0e:ea:74:7f:a1:
00:17:61:a9:c2:0e:99:2f:ea:f5:d3:ae:df:96:50:
d5:9f:b8:e6:2c:b3:a3:37:4d:6e:2c:15:03:d5:99:
77:84:cf:53:34:1d:eb:1c:8b:76:61:ac:39:4c:0a:
8f:47:ba:4f:03:5a:2c:d6:13:f5:db:14:97:92:8e:
a3:5e:e7:78:3b:c9:85:d1:b4:a7:2b:8e:be:eb:3a:
fa:d6:db:91:d9:50:2f:93:42:4f:e5:17:3c:ee:92:
34:b9:cb:5a:d8:46:8a:b1:85:e3:65:92:73:71:08:
0d:fd:59:b0:9b:4e:47:85:e6:8f:8e:58:f0:af:a1:
ae:4f:cb:92:d5:3e:40:6e:29:cb:f8:a9:db:4f:9c:
e6:2c:0e:23:3b:94:1b:4f:78:06:10:3d:49:18:53:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:07:E9:D5:44:F5:F4:6E:87:EA:10:4D:AC:1C:45:7A:A1:C2:3A:C4
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Sgfp1UT19G6H6hBNrBxFeqHCOsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e2:c7:23:a3:52:12:8b:6e:1d:bd:a4:82:db:b0:27:4c:8c:
f5:a2:b9:1c:d2:cb:92:b6:a9:ae:86:a6:7c:88:db:71:44:47:
47:be:52:0e:d9:bf:39:42:7e:de:71:82:a2:fe:6e:94:88:02:
98:e4:e9:cf:50:ae:f2:98:9e:ce:79:91:d1:ed:92:4e:de:5f:
b0:e2:bf:83:a4:ce:ab:bd:94:e3:ca:6a:a5:95:50:b5:a1:11:
c5:30:4f:9c:0a:ed:96:f0:e7:63:01:84:c0:a6:37:b9:35:aa:
67:fe:66:8c:0a:f9:4d:3d:31:46:db:2a:3d:6d:84:2d:b0:76:
46:08:1c:76:f2:ad:2a:f5:f0:a5:d7:c2:66:75:be:0e:72:b6:
a6:44:2d:d5:8d:92:82:8a:64:1b:7a:73:e3:d5:aa:0b:94:3f:
04:b2:5f:c8:f2:05:84:b6:c9:17:68:7d:37:79:cf:4c:9a:73:
75:78:14:b7:6f:17:6a:cc:a5:3f:22:97:ff:43:b2:b3:11:ed:
21:ba:79:6d:51:5b:40:4d:44:0d:24:ed:03:41:12:78:7d:0c:
5a:f4:2d:02:ee:e5:3e:62:42:c9:0a:5d:73:fc:b6:68:bb:bb:
f3:04:c7:eb:bc:9f:5b:5b:52:94:15:4d:19:a7:23:98:cc:b6:
ab:f2:30:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:12:53 2026 by rpki-client