Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/g4IN_o9b_i2TT8ouMUtFkvTWals.roa
File: g4IN_o9b_i2TT8ouMUtFkvTWals.roa (raw, json)
Hash identifier: rf/XfEaRfGfq5oA0ri7mvzi2aJ4ReQHceRq0ZALCi6Y=
Subject key identifier: 83:82:0D:FE:8F:5B:FE:2D:93:4F:CA:2E:31:4B:45:92:F4:D6:6A:5B
Certificate issuer: /CN=f7afb4dadb93560120c9fc4cfb911e044aa82743
Certificate serial: 01A0F28C4BAD493358AEDEAE3B133245D645
Authority key identifier: F7:AF:B4:DA:DB:93:56:01:20:C9:FC:4C:FB:91:1E:04:4A:A8:27:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96-02tuTVgEgyfxM-5EeBEqoJ0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/g4IN_o9b_i2TT8ouMUtFkvTWals.roa
Signing time: Wed 30 Sep 2026 13:41:15 +0000
ROA not before: Wed 30 Sep 2026 13:41:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 161.111.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/96-02tuTVgEgyfxM-5EeBEqoJ0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/96-02tuTVgEgyfxM-5EeBEqoJ0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/96-02tuTVgEgyfxM-5EeBEqoJ0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:8c:4b:ad:49:33:58:ae:de:ae:3b:13:32:45:d6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7afb4dadb93560120c9fc4cfb911e044aa82743
Validity
Not Before: Sep 30 13:41:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83820dfe8f5bfe2d934fca2e314b4592f4d66a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:b8:50:09:eb:2b:65:eb:69:b9:8f:56:33:
44:db:79:ef:74:4d:0d:6f:57:48:7a:c9:20:9b:f5:
6b:c2:d2:e1:66:1e:b7:1d:e3:f2:ac:9d:e8:36:fc:
8a:ac:fa:4b:1b:b9:8f:7a:cb:dd:08:f6:ba:56:f4:
e1:be:aa:76:bb:7b:4f:0c:1d:22:af:ff:64:2e:a8:
1a:ae:e1:13:37:fd:67:64:25:3a:58:f7:81:dc:10:
f2:91:80:e5:64:d4:ef:dd:b0:8e:60:99:3b:8a:7d:
86:f3:0f:cf:2e:38:8c:ce:db:e5:46:90:42:aa:c9:
47:51:18:f3:8a:20:62:13:3c:9e:a3:f7:1c:9c:4e:
8b:5e:d2:b9:d8:51:85:4c:55:f9:06:2b:be:36:56:
70:30:60:13:f9:45:3d:96:10:a3:ee:f4:54:e5:34:
fa:62:16:19:da:97:4f:4b:69:a1:21:f6:ea:72:0c:
86:b6:13:79:b3:74:c3:4b:f7:bc:11:c5:e8:e6:9b:
0a:00:62:af:8d:c9:e8:65:cb:59:d0:ed:8c:f7:03:
b2:0c:8a:0f:86:13:b6:23:20:a2:f2:40:6f:22:10:
c4:fe:31:b3:ef:90:31:dc:33:66:9e:ab:38:21:bd:
c3:61:70:4a:db:8a:e5:34:6b:22:8c:ba:2e:cb:47:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:82:0D:FE:8F:5B:FE:2D:93:4F:CA:2E:31:4B:45:92:F4:D6:6A:5B
X509v3 Authority Key Identifier:
keyid:F7:AF:B4:DA:DB:93:56:01:20:C9:FC:4C:FB:91:1E:04:4A:A8:27:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96-02tuTVgEgyfxM-5EeBEqoJ0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/g4IN_o9b_i2TT8ouMUtFkvTWals.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6f3bcf-298d-4df9-9c6f-3a8f3a085cf4/1/96-02tuTVgEgyfxM-5EeBEqoJ0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.111.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:ee:2b:1d:bf:2d:0f:24:1e:ea:e3:f4:63:82:de:48:f5:50:
38:71:82:e2:18:fa:38:85:1c:38:7c:d4:ad:c8:69:04:ee:04:
b6:9f:a6:76:f4:8d:94:32:84:41:40:a4:bc:84:f9:4c:9b:e2:
ef:19:b2:7e:94:04:f4:34:d5:76:40:d9:b9:a6:c0:71:17:61:
e9:4c:e0:b9:17:f0:b9:c8:26:27:f1:28:5a:6b:88:8c:eb:a6:
32:dd:5b:36:27:70:3d:f2:32:4f:4b:19:d4:98:56:90:86:50:
bf:78:87:42:a4:31:4c:cb:86:21:06:01:82:35:96:ae:29:18:
13:a4:7a:3c:32:91:56:ae:72:1f:b7:ae:ee:82:fe:11:5c:61:
0c:8e:ab:87:de:b4:0a:c4:7e:dc:25:d5:7c:2b:10:62:7b:17:
c5:7d:c2:60:d3:11:d7:77:10:aa:89:86:8d:07:68:7e:6c:46:
64:66:7d:ab:9c:ee:79:fe:f3:c3:e6:03:35:01:3e:6d:fa:6b:
08:18:8f:f3:5b:01:7e:36:ac:bb:c8:0b:bf:b4:a3:e2:46:46:
0e:d2:68:7b:4b:a9:ad:95:dd:30:37:e0:77:09:08:81:f1:eb:
31:3e:89:de:5a:ea:af:2a:c3:39:71:f5:18:99:71:5e:59:aa:
64:f2:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:54:23 2026 by rpki-client