Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/oY_S1rbnyvc2aT2LlnBjuNSgMMI.roa
File: oY_S1rbnyvc2aT2LlnBjuNSgMMI.roa (raw, json)
Hash identifier: I1u3TRoo6Y+BB7n1CDMuA9kawRp5ZHIK/39fhQ2i9Yo=
Subject key identifier: A1:8F:D2:D6:B6:E7:CA:F7:36:69:3D:8B:96:70:63:B8:D4:A0:30:C2
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01A0190BF36E5E07AC3D5EB2EAAFA7ED9704
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/oY_S1rbnyvc2aT2LlnBjuNSgMMI.roa
Signing time: Wed 19 Aug 2026 08:03:28 +0000
ROA not before: Wed 19 Aug 2026 08:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197731
IP address blocks: 158.173.56.0/23 maxlen: 24
158.173.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:0b:f3:6e:5e:07:ac:3d:5e:b2:ea:af:a7:ed:97:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Aug 19 08:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a18fd2d6b6e7caf736693d8b967063b8d4a030c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:bf:35:4f:de:10:ea:ec:01:14:f9:35:2d:
10:ec:9a:fe:4e:58:87:d2:4d:c0:42:17:1b:60:91:
27:8e:68:e0:46:91:f6:65:96:30:be:0c:9c:3e:1a:
dd:27:51:7c:ca:f7:8c:fb:da:19:8e:bc:b6:8b:42:
1b:15:18:e6:07:fa:71:79:bc:72:7a:08:f5:8a:d9:
17:0d:7b:5a:9a:82:a1:34:17:1b:6c:7b:e4:fd:14:
3b:6b:6e:6f:18:4a:fa:df:d3:f9:d8:f3:d4:ff:7c:
eb:b7:a2:26:c3:59:f5:85:b0:bb:fa:6d:22:8c:ea:
0e:08:66:ab:7d:6d:6b:09:77:6e:0c:66:8b:1a:dd:
50:e2:d6:87:25:ab:8f:a6:9e:15:64:0f:27:98:e5:
fc:94:3f:1d:82:a6:67:a6:6c:3a:34:98:55:90:84:
fe:c2:77:87:03:5f:1a:00:ea:1f:34:25:cd:ec:e0:
5d:1b:e5:3b:72:85:10:4a:eb:17:cc:af:99:b7:f8:
da:c3:1c:0e:73:34:e7:85:d1:5b:85:16:7b:80:29:
35:c4:c9:fd:1f:ee:9c:27:47:66:bd:b9:28:1f:7f:
c0:ac:00:a7:b2:cd:20:33:79:f4:35:cf:3a:a4:c6:
9c:b9:d9:18:29:06:8f:6f:e0:88:b6:55:d7:aa:7f:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8F:D2:D6:B6:E7:CA:F7:36:69:3D:8B:96:70:63:B8:D4:A0:30:C2
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/oY_S1rbnyvc2aT2LlnBjuNSgMMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.56.0/23
158.173.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b2:41:aa:e7:9a:25:15:ac:35:bc:7c:06:df:38:ab:69:d2:
12:aa:f2:1d:79:e0:9a:c4:8e:5e:93:31:1b:38:df:5d:cf:01:
35:b5:96:e1:4d:50:ec:46:9c:75:00:9b:a0:42:02:54:b1:20:
05:27:6f:b3:cc:0f:9e:c5:1c:35:52:8e:75:9c:5d:c5:b9:67:
f3:49:68:26:3a:e5:40:16:d7:7b:66:ea:cb:30:a4:33:2f:64:
26:fe:66:a0:fa:49:b0:3c:f2:a9:54:0e:00:5d:f7:1a:26:91:
c8:3d:65:77:b8:0e:ca:20:68:8f:ef:f1:2a:54:c1:c9:36:3a:
46:f1:85:49:c2:77:5e:27:67:60:3e:ed:58:a5:ae:61:84:65:
68:71:2e:cb:11:99:d2:76:e8:9e:32:0d:e0:40:51:59:3e:8b:
42:d4:d1:42:cf:8a:79:ce:b5:6e:d8:81:92:05:7c:b2:b5:ce:
68:0b:72:ad:99:0e:d9:1a:0d:d5:d5:f4:8a:a1:c8:25:b7:19:
50:1a:2a:53:d6:84:27:d0:43:37:9c:3c:fd:9b:f7:ef:7a:e7:
c2:e6:0e:9e:1d:3b:7c:ed:a3:27:64:a3:fb:ba:27:f4:32:41:
ea:ba:aa:c7:f8:75:37:a0:41:8c:b7:10:18:ab:57:0a:66:11:
a8:39:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:25:45 2026 by rpki-client