Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/SHESg-pXJr_Het0W-3cbbUvLLUk.roa
File: SHESg-pXJr_Het0W-3cbbUvLLUk.roa (raw, json)
Hash identifier: eBtq6k5xafILrBSAzCCl8DxL+vNsikVlShGU83ALNOQ=
Subject key identifier: 48:71:12:83:EA:57:26:BF:C7:7A:DD:16:FB:77:1B:6D:4B:CB:2D:49
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 01A034547E7A1FE060E6F644954432F96BBF
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/SHESg-pXJr_Het0W-3cbbUvLLUk.roa
Signing time: Mon 24 Aug 2026 15:12:27 +0000
ROA not before: Mon 24 Aug 2026 15:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 159.197.224.0/19 maxlen: 24
159.197.224.0/20 maxlen: 24
159.197.240.0/20 maxlen: 24
161.8.128.0/19 maxlen: 24
161.8.128.0/20 maxlen: 24
161.8.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:54:7e:7a:1f:e0:60:e6:f6:44:95:44:32:f9:6b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Aug 24 15:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48711283ea5726bfc77add16fb771b6d4bcb2d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:bf:6b:60:5c:6a:aa:84:70:91:ce:16:7e:
a3:7a:66:b3:a7:88:30:cc:64:ff:de:86:8e:f6:09:
b4:5c:43:f6:6e:77:fe:f7:fe:68:e7:4d:8e:b6:7e:
86:02:45:99:04:66:f5:58:d6:87:aa:2e:1b:8d:76:
09:c3:fc:2c:f4:fd:6a:7a:f1:9c:1c:a3:1c:d4:62:
33:07:e9:bf:fe:f0:7a:44:aa:b6:81:bd:b1:db:da:
50:30:5a:10:96:f6:4c:a7:2d:f4:56:9a:4c:59:89:
2d:4e:32:7b:c5:df:61:14:da:74:23:1f:d4:e5:4b:
89:e5:9f:e3:01:55:4d:8c:11:f8:48:ea:47:f3:c5:
2f:df:14:3a:c4:2e:29:f4:ae:56:86:e8:30:58:36:
43:3a:19:19:18:92:bf:5b:4a:fa:50:9c:aa:88:d6:
78:df:f9:3f:a0:01:d7:76:e2:be:e3:bc:48:19:95:
ac:03:b1:73:d1:eb:94:68:18:33:dd:0c:83:a0:ab:
20:17:83:89:68:1c:de:ec:94:a6:66:c5:ef:b7:53:
05:9d:62:a9:b6:23:af:05:35:ac:5b:a0:be:51:98:
83:85:bd:16:ff:62:34:b5:3f:bf:c1:69:e0:bc:a8:
8f:27:97:a8:f4:24:46:38:65:ba:f4:af:63:11:da:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:71:12:83:EA:57:26:BF:C7:7A:DD:16:FB:77:1B:6D:4B:CB:2D:49
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/SHESg-pXJr_Het0W-3cbbUvLLUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.197.224.0/19
161.8.128.0/19
Signature Algorithm: sha256WithRSAEncryption
32:37:ce:0e:7c:71:fb:c9:6f:b7:79:ee:93:35:d4:02:4c:0f:
60:ba:f4:bc:4a:d7:47:8b:64:94:c0:15:97:46:0d:9f:97:80:
93:64:19:c8:1a:0f:9b:bc:ca:b9:5b:26:98:30:07:e2:35:a9:
56:eb:29:b9:82:02:15:4d:3a:b6:75:7c:e1:2d:2e:be:cf:4c:
69:65:64:f2:ca:86:cd:0d:53:9a:22:5a:00:67:c7:0a:07:27:
62:74:52:15:ed:46:bb:f1:ba:aa:04:6c:bb:09:0b:bf:fe:9d:
5c:f8:2f:f6:1c:af:92:f5:f0:39:71:73:fd:d9:e1:19:7a:88:
0e:a4:95:91:b1:28:87:cc:fa:7e:0d:5c:af:2b:2f:d2:1c:1b:
65:8a:76:cf:98:4d:cb:86:ca:2e:ba:cd:44:90:c2:16:eb:b9:
a1:6d:9b:e9:06:29:07:e7:3a:f9:28:38:a9:ef:68:75:7f:cd:
f7:56:b8:fd:e4:e6:63:0c:99:14:ee:eb:89:e4:7a:75:7e:f8:
47:35:42:62:1c:14:66:97:fd:c6:f1:9b:76:25:e5:24:a1:87:
43:00:1f:c5:c1:87:b5:71:54:b9:db:d8:e6:cc:f6:5f:d8:90:
6f:0b:31:a4:90:c7:03:d5:25:ab:79:a7:d1:8f:03:b7:55:cd:
05:93:1c:a9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaA0VH56H+Bg5vZElUQy+Wu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5
MWQ0YTkwHhcNMjYwODI0MTUxMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODcxMTI4M2VhNTcyNmJmYzc3YWRkMTZmYjc3MWI2ZDRiY2IyZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w2/a2BcaqqEcJHOFn6jemazp4gw
zGT/3oaO9gm0XEP2bnf+9/5o502Otn6GAkWZBGb1WNaHqi4bjXYJw/ws9P1qevGc
HKMc1GIzB+m//vB6RKq2gb2x29pQMFoQlvZMpy30VppMWYktTjJ7xd9hFNp0Ix/U
5UuJ5Z/jAVVNjBH4SOpH88Uv3xQ6xC4p9K5WhugwWDZDOhkZGJK/W0r6UJyqiNZ4
3/k/oAHXduK+47xIGZWsA7Fz0euUaBgz3QyDoKsgF4OJaBze7JSmZsXvt1MFnWKp
tiOvBTWsW6C+UZiDhb0W/2I0tT+/wWngvKiPJ5eo9CRGOGW69K9jEdoHTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEhxEoPqVya/x3rdFvt3G21Lyy1JMB8GA1UdIwQY
MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt
ZWI3YWFhNjgyOGJlLzEvU0hFU2ctcFhKcl9IZXQwVy0zY2JiVXZMTFVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl
LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFn8XgAwQF
oQiAMA0GCSqGSIb3DQEBCwUAA4IBAQAyN84OfHH7yW+3ee6TNdQCTA9guvS8StdH
i2SUwBWXRg2fl4CTZBnIGg+bvMq5WyaYMAfiNalW6ym5ggIVTTq2dXzhLS6+z0xp
ZWTyyobNDVOaIloAZ8cKBydidFIV7Ua78bqqBGy7CQu//p1c+C/2HK+S9fA5cXP9
2eEZeogOpJWRsSiHzPp+DVyvKy/SHBtlinbPmE3Lhsouus1EkMIW67mhbZvpBikH
5zr5KDip72h1f833Vrj95OZjDJkU7uuJ5Hp1fvhHNUJiHBRml/3G8Zt2JeUkoYdD
AB/FwYe1cVS529jmzPZf2JBvCzGkkMcD1SWreafRjwO3Vc0Fkxyp
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:10 2026 by rpki-client