Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/g3Jt-M-LFCi6oADeqbYV8DqGqrE.roa
File: g3Jt-M-LFCi6oADeqbYV8DqGqrE.roa (raw, json)
Hash identifier: ybEc7v/E67X9cLp6C4/oEdNWUvUdA62rKdiHaLldR5I=
Subject key identifier: 83:72:6D:F8:CF:8B:14:28:BA:A0:00:DE:A9:B6:15:F0:3A:86:AA:B1
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 01A1A774E4CC74D6DBE17044036A66D2A2FE
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/g3Jt-M-LFCi6oADeqbYV8DqGqrE.roa
Signing time: Wed 04 Nov 2026 16:46:58 +0000
ROA not before: Wed 04 Nov 2026 16:46:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7469
IP address blocks: 173.214.112.0/20 maxlen: 24
2a12:f8c1:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:74:e4:cc:74:d6:db:e1:70:44:03:6a:66:d2:a2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Nov 4 16:46:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83726df8cf8b1428baa000dea9b615f03a86aab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:f3:2b:bf:af:82:0e:08:21:54:03:76:3b:
49:92:2d:9e:c0:c0:9c:82:17:aa:88:5c:b8:89:68:
17:f3:71:1a:44:38:96:b0:7d:ea:6d:57:bf:6a:bc:
74:32:e9:5c:5c:0b:30:79:48:5f:8b:52:56:2a:0e:
7b:82:d8:8e:ed:64:a7:a9:62:47:1a:7a:1d:e6:42:
fd:aa:73:90:48:50:44:d4:a8:78:c8:49:1c:d3:02:
3d:13:a6:c0:78:32:d3:36:7f:15:0a:5c:35:92:c4:
bc:8e:7e:19:be:b0:ef:02:01:ce:2f:45:bf:96:b4:
e4:21:1a:45:16:61:f1:51:c9:23:f0:3a:af:e2:6b:
84:f0:27:a3:c6:f3:da:11:9d:e8:77:fd:ec:46:f5:
f0:bc:d0:04:28:4e:80:54:36:8b:7e:fc:29:99:3a:
40:19:53:da:98:7c:14:ba:b5:b3:1e:0d:3e:02:79:
03:43:49:7a:c9:22:47:45:96:0e:8d:00:da:f4:7d:
ed:d7:7d:8f:72:3b:c4:66:0e:bc:18:f3:c8:11:83:
fc:c7:24:e9:86:08:07:8a:ec:6f:f0:8c:88:88:ab:
0e:3c:ab:4a:f1:42:e5:66:84:a9:5f:4d:e5:59:46:
eb:bc:08:7e:11:9f:35:f6:8d:52:2f:11:8b:20:2f:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:72:6D:F8:CF:8B:14:28:BA:A0:00:DE:A9:B6:15:F0:3A:86:AA:B1
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/g3Jt-M-LFCi6oADeqbYV8DqGqrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.214.112.0/20
IPv6:
2a12:f8c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
12:13:db:86:f3:90:ee:8c:fa:9b:12:4f:49:4d:82:37:f9:eb:
15:cb:35:15:72:c3:ee:67:12:fa:17:39:24:82:3a:4a:fd:a2:
1c:32:14:68:6b:51:ad:be:f0:4c:87:66:df:d8:37:bb:92:c0:
8f:e4:15:12:e1:90:f0:69:54:bf:8b:d0:89:ac:3e:f9:ea:eb:
4f:91:11:8e:a4:6a:32:27:1f:b9:62:b8:82:8e:a1:05:af:c0:
86:1e:b3:50:15:9d:97:94:2f:91:2c:6b:63:a7:47:14:0d:e3:
d4:80:11:ea:da:f3:d7:46:0a:9e:a6:b8:52:2c:99:40:c9:1b:
a9:49:55:95:f3:b8:36:ca:0e:46:67:9d:3e:62:1c:47:7e:3b:
97:6f:1b:07:fe:fa:5c:5a:50:31:dc:74:bf:e1:93:4f:93:30:
b0:8d:0c:1a:76:cf:93:03:18:79:43:73:ad:eb:04:05:b6:42:
78:41:c4:15:da:33:6e:69:67:e7:3c:1e:60:81:11:a1:84:56:
2b:ff:5d:d1:e2:8b:ca:55:81:f6:46:d0:b8:9a:8e:27:89:9a:
ed:84:b7:2b:53:64:e9:06:eb:a1:cd:4b:fc:e4:3a:b4:03:bb:
e8:23:e5:b7:b0:60:c3:cd:a9:5a:ca:fa:a5:29:9c:de:ef:99:
86:c3:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:54:34 2026 by rpki-client