Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/V3NHoCO2C0OIcoB4H53PpBNrUdU.roa
File: V3NHoCO2C0OIcoB4H53PpBNrUdU.roa (raw, json)
Hash identifier: LdoGmRo3CKC/nx9jgbFbF8C1cm/1gnONTUC2D8S2Gx0=
Subject key identifier: 57:73:47:A0:23:B6:0B:43:88:72:80:78:1F:9D:CF:A4:13:6B:51:D5
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 01A05D1686B4B24D66CF1A99F7E7F2F270B7
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/V3NHoCO2C0OIcoB4H53PpBNrUdU.roa
Signing time: Tue 01 Sep 2026 13:09:12 +0000
ROA not before: Tue 01 Sep 2026 13:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 104.160.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:16:86:b4:b2:4d:66:cf:1a:99:f7:e7:f2:f2:70:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Sep 1 13:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=577347a023b60b43887280781f9dcfa4136b51d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:cb:e5:0b:c7:ed:fa:ae:f5:c1:d9:d0:46:
0c:8d:44:ce:e1:0d:be:27:31:d3:f0:62:93:3f:64:
15:4a:52:d7:e5:73:42:d8:d0:85:53:e2:8c:7e:62:
35:20:16:93:6b:1a:39:1c:78:be:d2:fe:d0:41:34:
1e:2b:f0:70:c0:62:b5:17:69:af:81:f4:0a:52:c0:
e9:56:ae:52:3b:3f:ba:3f:d2:99:c9:6b:be:db:b2:
77:c3:0f:4a:8d:76:8a:cd:f2:fb:8e:ee:5c:cb:1c:
c8:16:f9:42:53:bc:4f:85:80:40:eb:e0:52:83:6f:
92:92:bd:2c:9b:f7:19:65:be:0d:c3:08:52:da:03:
16:93:02:2a:7a:6b:b7:f1:27:db:4f:af:e6:28:4a:
ac:e2:46:33:66:ff:e1:be:d7:8d:77:0d:42:52:29:
ab:2f:8c:98:b1:ce:b4:02:01:c2:5f:9d:4c:e6:6f:
17:80:5a:17:51:d6:4d:20:69:eb:dd:8e:2a:0b:bb:
2a:e4:49:6a:b5:88:82:22:df:9a:f5:3d:13:fd:5a:
d9:f6:f3:24:5b:a4:e8:c8:cd:ff:c0:88:a5:db:bd:
05:44:34:5e:9d:48:81:54:24:7f:d1:8e:0f:6a:13:
4c:f6:09:c2:bf:56:e5:27:5e:0f:56:b9:5a:4a:74:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:73:47:A0:23:B6:0B:43:88:72:80:78:1F:9D:CF:A4:13:6B:51:D5
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/V3NHoCO2C0OIcoB4H53PpBNrUdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.18.0/24
Signature Algorithm: sha256WithRSAEncryption
02:03:63:86:80:2f:ff:56:00:09:7b:27:26:d7:03:98:e5:c6:
70:e5:7f:ba:a0:be:1e:03:cc:2f:0d:b4:a0:a9:67:15:26:e7:
fd:30:74:db:c4:91:db:2d:16:25:9a:3b:72:c8:fa:61:22:88:
28:77:62:1c:de:f0:d9:70:79:0d:b4:d1:02:a1:26:f5:6b:87:
1f:f9:b2:09:43:5b:9c:1e:50:13:a2:c7:38:fc:b2:b3:5d:22:
ef:bc:41:53:9a:99:79:90:30:a1:b2:08:7c:9d:8c:c2:19:48:
e7:59:dd:8a:cd:18:89:d1:23:9c:fa:0b:39:6a:81:5b:ca:4a:
50:2f:1a:d5:aa:8e:a7:95:ea:11:e4:0c:57:aa:0c:93:19:4c:
4e:d9:15:35:e3:4e:5f:0b:32:c2:56:ed:39:d0:90:c0:fd:57:
97:40:34:07:50:58:ba:d0:b9:a7:b4:72:16:81:2a:5c:06:65:
62:e6:13:cf:e0:1d:38:c7:09:80:44:ce:2d:eb:61:2d:33:6d:
c7:38:6c:14:30:4f:be:5c:d2:55:ee:86:e2:6f:c0:79:a1:ec:
d3:89:44:e6:86:cc:20:e0:22:2e:8d:9b:1a:c1:5b:f8:10:98:
12:0c:f3:b2:2f:50:5b:72:b1:79:44:85:c6:b8:be:e6:a6:90:
8c:1c:68:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBdFoa0sk1mzxqZ9+fy8nC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy
MDdmZDIwHhcNMjYwOTAxMTMwOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzczNDdhMDIzYjYwYjQzODg3MjgwNzgxZjlkY2ZhNDEzNmI1MWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz7L5QvH7fqu9cHZ0EYMjUTO4Q2+
JzHT8GKTP2QVSlLX5XNC2NCFU+KMfmI1IBaTaxo5HHi+0v7QQTQeK/BwwGK1F2mv
gfQKUsDpVq5SOz+6P9KZyWu+27J3ww9KjXaKzfL7ju5cyxzIFvlCU7xPhYBA6+BS
g2+Skr0sm/cZZb4NwwhS2gMWkwIqemu38SfbT6/mKEqs4kYzZv/hvteNdw1CUimr
L4yYsc60AgHCX51M5m8XgFoXUdZNIGnr3Y4qC7sq5ElqtYiCIt+a9T0T/VrZ9vMk
W6ToyM3/wIil270FRDRenUiBVCR/0Y4PahNM9gnCv1blJ14PVrlaSnTFpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFdzR6AjtgtDiHKAeB+dz6QTa1HVMB8GA1UdIwQY
MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt
MTVmMTNlM2Y3ZDg1LzEvVjNOSG9DTzJDME9JY29CNEg1M1BwQk5yVWRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1
LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKASMA0G
CSqGSIb3DQEBCwUAA4IBAQACA2OGgC//VgAJeycm1wOY5cZw5X+6oL4eA8wvDbSg
qWcVJuf9MHTbxJHbLRYlmjtyyPphIogod2Ic3vDZcHkNtNECoSb1a4cf+bIJQ1uc
HlATosc4/LKzXSLvvEFTmpl5kDChsgh8nYzCGUjnWd2KzRiJ0SOc+gs5aoFbykpQ
LxrVqo6nleoR5AxXqgyTGUxO2RU1405fCzLCVu050JDA/VeXQDQHUFi60LmntHIW
gSpcBmVi5hPP4B04xwmARM4t62EtM23HOGwUME++XNJV7obib8B5oezTiUTmhswg
4CIujZsawVv4EJgSDPOyL1BbcrF5RIXGuL7mppCMHGiQ
-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:21 2026 by rpki-client