Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/gXToFCTUuvuYMIEdmvS6O56XgPo.roa
File: gXToFCTUuvuYMIEdmvS6O56XgPo.roa (raw, json)
Hash identifier: pR1vScVxKAcrSeb8XWNSFRHsHQo7yVXqwsICeVIj3hg=
Subject key identifier: 81:74:E8:14:24:D4:BA:FB:98:30:81:1D:9A:F4:BA:3B:9E:97:80:FA
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01A01377B7069F937FAEA46A9C47AC05012A
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/gXToFCTUuvuYMIEdmvS6O56XgPo.roa
Signing time: Tue 18 Aug 2026 06:03:27 +0000
ROA not before: Tue 18 Aug 2026 06:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 158.173.3.0/24 maxlen: 24
158.173.4.0/24 maxlen: 24
158.173.5.0/24 maxlen: 24
158.173.6.0/24 maxlen: 24
158.173.7.0/24 maxlen: 24
158.173.16.0/24 maxlen: 24
158.173.17.0/24 maxlen: 24
158.173.18.0/24 maxlen: 24
158.173.19.0/24 maxlen: 24
158.173.20.0/24 maxlen: 24
158.173.21.0/24 maxlen: 24
158.173.22.0/24 maxlen: 24
158.173.23.0/24 maxlen: 24
158.173.24.0/24 maxlen: 24
158.173.25.0/24 maxlen: 24
158.173.32.0/24 maxlen: 24
158.173.33.0/24 maxlen: 24
158.173.44.0/24 maxlen: 24
158.173.45.0/24 maxlen: 24
158.173.46.0/24 maxlen: 24
158.173.47.0/24 maxlen: 24
158.173.55.0/24 maxlen: 24
158.173.67.0/24 maxlen: 24
158.173.72.0/24 maxlen: 24
158.173.73.0/24 maxlen: 24
158.173.76.0/24 maxlen: 24
158.173.88.0/24 maxlen: 24
158.173.89.0/24 maxlen: 24
158.173.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:77:b7:06:9f:93:7f:ae:a4:6a:9c:47:ac:05:01:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Aug 18 06:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8174e81424d4bafb9830811d9af4ba3b9e9780fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:df:46:25:75:52:4b:4e:8b:0f:d9:5d:da:
81:f9:1d:4a:d8:d1:bd:b6:f8:4d:fc:a3:99:23:12:
be:00:eb:ca:45:d8:e6:55:32:91:73:20:88:23:96:
cc:ba:b1:da:62:6c:f6:2f:be:ba:b8:9c:47:69:35:
bb:7e:69:a9:c3:5b:3f:fd:30:3d:56:aa:d8:72:73:
6e:0b:31:6d:26:cc:81:89:b1:36:8d:ab:8f:be:bd:
5e:40:e3:9c:c1:2a:82:c8:c3:6c:0b:5d:c3:59:93:
ce:db:0f:d3:00:78:fb:43:f8:68:26:64:3a:69:b6:
08:fd:66:d0:46:cb:9a:ca:7a:e6:67:fd:6c:5c:61:
b6:ea:18:72:16:ea:d3:0a:40:65:30:89:1a:c0:7e:
5d:9f:0b:6d:2e:09:1b:5e:72:41:ce:05:ca:83:dd:
b3:4b:ff:56:a3:67:a2:a6:c7:ae:2b:bd:67:9b:ad:
ec:2d:eb:81:46:6f:a6:6a:ff:c6:c3:56:bc:c0:3a:
bc:ba:38:a0:f2:a8:a8:56:b7:a2:d8:ed:aa:47:eb:
3c:3d:4b:95:7b:2d:2f:a9:d7:46:14:81:f1:73:4d:
02:9a:ad:58:fc:3f:97:5c:28:2d:bf:b3:5c:02:2f:
f4:5d:07:3a:ff:2f:ce:b7:32:67:90:b5:40:02:4f:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:E8:14:24:D4:BA:FB:98:30:81:1D:9A:F4:BA:3B:9E:97:80:FA
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/gXToFCTUuvuYMIEdmvS6O56XgPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.3.0-158.173.7.255
158.173.16.0-158.173.25.255
158.173.32.0/23
158.173.44.0/22
158.173.55.0/24
158.173.67.0/24
158.173.72.0/23
158.173.76.0/24
158.173.88.0/23
158.173.101.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f2:1d:7d:ff:d0:e9:74:82:c3:6d:a6:0f:11:76:4b:2a:2f:
ea:35:20:8f:89:ac:57:4c:bc:df:30:74:49:a7:a6:e8:9c:22:
ce:bb:48:e6:bd:16:7c:05:ba:52:31:2a:83:02:33:44:af:91:
1e:ae:97:91:a9:27:1c:e8:19:34:bf:97:72:75:6a:bd:e4:69:
06:56:f7:ae:92:a5:e4:cf:2a:15:4c:84:87:a6:9c:b4:14:d4:
9b:45:42:38:4e:ac:f4:d9:0f:e7:17:90:e9:70:9d:8a:5a:af:
18:b3:43:9b:38:ca:32:c7:93:cd:5f:a5:36:30:7e:78:20:48:
b5:00:d0:b8:d4:6c:28:aa:cf:f5:88:ea:eb:d6:30:32:eb:d8:
94:00:23:4e:ef:9c:e7:82:67:15:a8:20:a2:91:0b:8f:67:db:
00:46:7d:6f:35:e9:35:16:c9:57:35:cb:11:a2:b0:39:79:56:
7c:13:68:c7:8a:27:f5:6d:44:c3:58:9f:73:43:c5:db:ab:cc:
ad:2a:a1:52:0c:03:bf:e8:86:83:fa:10:f3:1f:40:9f:ae:1e:
f0:3d:75:8a:fa:70:b6:56:45:a4:0d:1e:5e:35:fe:1e:07:a8:
26:09:16:57:63:c4:85:f2:ce:42:1f:2c:0f:d0:fa:f2:94:7b:
c0:bf:b7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:25:43 2026 by rpki-client