Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G3kqmVrFAUeg4bkj832w4shg1sE.roa
File: G3kqmVrFAUeg4bkj832w4shg1sE.roa (raw, json)
Hash identifier: hGSS7hJtchNICfryuUVUTj974RvMBv2N5lM3RjV8Jk4=
Subject key identifier: 1B:79:2A:99:5A:C5:01:47:A0:E1:B9:23:F3:7D:B0:E2:C8:60:D6:C1
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A18819BAD7A56C8E6BE29876332BCB5084
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G3kqmVrFAUeg4bkj832w4shg1sE.roa
Signing time: Thu 29 Oct 2026 14:39:09 +0000
ROA not before: Thu 29 Oct 2026 14:39:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39521
IP address blocks: 216.173.88.0/23 maxlen: 23
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:19:ba:d7:a5:6c:8e:6b:e2:98:76:33:2b:cb:50:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 29 14:39:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b792a995ac50147a0e1b923f37db0e2c860d6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:a4:15:d5:00:65:9a:c3:fc:ee:ff:3d:23:
7d:37:a8:73:34:7a:5e:17:f7:a1:f7:3a:d1:bb:c3:
49:ae:16:60:0a:91:4e:5f:9e:23:e5:e3:61:5b:c4:
8f:7c:ea:43:2e:b5:85:67:23:34:9f:17:42:e3:cc:
e5:db:c9:2a:27:55:dc:15:49:27:5f:5f:4a:45:eb:
79:26:d6:d0:1f:31:1a:7e:4a:7f:c6:5f:48:10:52:
ad:b4:69:86:9b:2a:f4:5c:12:e0:74:90:31:c9:21:
86:48:db:e0:46:7c:bc:5c:b5:20:6c:4f:b6:d7:de:
9c:c7:12:cf:da:5b:38:f6:cc:c2:9b:ec:db:d4:d4:
5c:87:1d:6c:ff:0f:f5:51:0b:8f:67:3b:14:d4:48:
7e:6d:3a:26:bc:94:cc:35:7f:f4:0b:e4:b8:b6:98:
f3:96:fc:03:95:01:5a:e8:4f:0d:d8:2f:f4:e9:94:
19:c4:c7:99:9e:fa:c2:f3:74:57:1e:6e:b4:b0:e2:
64:13:48:38:79:cb:45:30:ab:d8:4a:32:1d:dc:6b:
60:04:2c:c4:54:41:81:3c:48:03:9d:fa:5b:c6:5f:
25:2c:63:60:a8:42:49:9f:5a:4d:c4:69:53:c9:45:
8a:a4:95:68:43:6e:2c:dd:25:ec:89:6f:b5:cf:cf:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:79:2A:99:5A:C5:01:47:A0:E1:B9:23:F3:7D:B0:E2:C8:60:D6:C1
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G3kqmVrFAUeg4bkj832w4shg1sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.173.88.0/23
216.173.92.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:2a:ff:5e:33:8a:75:31:cd:bc:39:60:c3:9a:9b:da:94:a8:
25:b9:c2:62:5a:04:98:99:67:0f:80:88:b0:a6:24:4f:49:7f:
3a:96:7f:c8:09:e1:c5:93:30:56:6a:2b:6a:2d:3c:df:45:d4:
0b:cf:c1:07:a5:60:ff:5b:9f:75:e2:eb:5f:e6:90:c4:29:5e:
19:ef:d8:94:a1:1c:85:e3:2d:ab:84:2b:47:f4:bb:16:cf:fe:
19:d2:c4:6d:07:3b:76:29:b2:c0:ed:08:5f:55:c8:30:e8:61:
87:0d:1f:1f:40:03:fe:17:cb:3a:a3:12:52:ec:f5:c0:c8:10:
ec:ca:c5:3d:a5:f1:bf:cb:39:b9:92:89:9f:79:03:70:ea:54:
65:c2:92:18:b6:fd:5d:b4:ba:14:8e:5f:d0:92:81:46:96:4d:
ad:bc:48:f1:38:19:5b:65:08:e7:0a:c9:26:f8:74:d2:06:d6:
dc:aa:bc:77:cb:1b:b3:c1:98:91:26:d7:e8:2d:b4:23:59:17:
e3:38:eb:33:c9:ef:66:cc:23:5d:9d:54:61:aa:e4:ef:82:de:
bf:20:b9:86:7c:f9:ba:08:54:4c:01:73:bc:ea:b8:0a:4f:46:
5f:1f:46:79:e3:00:62:cc:50:fa:c2:22:b2:b2:e8:48:f6:4d:
7b:ff:14:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:31:05 2026 by rpki-client