Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/g2mq5fXw0aZ88BSIIPCaVM6cI9s.roa
File: g2mq5fXw0aZ88BSIIPCaVM6cI9s.roa (raw, json)
Hash identifier: HTPkfWurE/QkJy0L1mUBje2pSgdAEd5QgAQCEntV908=
Subject key identifier: 83:69:AA:E5:F5:F0:D1:A6:7C:F0:14:88:20:F0:9A:54:CE:9C:23:DB
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A057D3C9B0A86E6A073CE1369CC3F924ED
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/g2mq5fXw0aZ88BSIIPCaVM6cI9s.roa
Signing time: Mon 31 Aug 2026 12:38:12 +0000
ROA not before: Mon 31 Aug 2026 12:38:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205570
IP address blocks: 203.202.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:d3:c9:b0:a8:6e:6a:07:3c:e1:36:9c:c3:f9:24:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 31 12:38:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8369aae5f5f0d1a67cf0148820f09a54ce9c23db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4f:ec:1a:90:3c:09:75:ce:55:61:8a:3d:6c:
bb:b2:80:f7:3d:61:bc:71:04:d2:c8:9c:66:56:cc:
3e:0e:5d:e1:12:3d:da:40:77:a5:0f:2a:9c:b9:9f:
d7:5c:7f:53:5a:2f:fa:64:5a:91:85:51:14:eb:a4:
91:b7:1b:ca:38:d7:b0:ec:82:0f:9d:68:75:13:8b:
b7:1f:91:92:d8:59:4a:b9:ed:a7:68:2a:b6:7d:97:
c7:4c:f2:ec:6f:61:38:86:0e:76:3c:71:e6:1e:9a:
2f:af:d5:46:68:21:d4:b6:2f:02:12:74:b2:77:2a:
51:b2:00:17:13:f9:fb:58:4a:28:e2:1a:6b:54:7c:
17:ea:b2:b7:d4:2a:e1:80:14:de:11:ae:0f:ea:2a:
2d:ff:2a:34:f4:dd:20:0e:b1:45:a3:c0:ce:5f:60:
49:82:8e:8b:0c:28:f1:9e:8b:08:db:2a:6c:c5:e2:
cc:d8:55:e7:fe:28:d0:89:93:52:79:7f:03:41:90:
5b:94:62:9e:d2:c7:9a:7d:d7:e5:7c:19:e4:c0:48:
79:4e:37:42:19:d5:dd:9c:f7:c1:07:3b:d7:08:06:
68:b1:71:01:d1:3c:e0:56:7d:fb:6b:28:e8:10:91:
8e:a7:26:d5:8f:bf:02:1f:97:2d:74:d8:ee:a6:b8:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:69:AA:E5:F5:F0:D1:A6:7C:F0:14:88:20:F0:9A:54:CE:9C:23:DB
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/g2mq5fXw0aZ88BSIIPCaVM6cI9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.202.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:9d:d5:02:ce:1c:d7:a4:a9:f2:6c:a0:88:bc:5f:a0:ab:41:
30:e9:48:aa:1f:6a:d5:dc:71:25:48:8f:af:29:91:73:f4:20:
26:a8:47:ee:84:8a:81:cd:f9:db:7a:0c:a9:55:11:b1:86:f0:
7f:6e:58:be:7f:c6:4f:f5:56:fd:21:3d:bf:63:31:24:b1:39:
21:b1:0c:e3:30:c9:75:c5:3a:b9:a7:40:3d:d3:1a:55:90:7c:
fe:4e:e0:01:14:4e:04:28:43:33:c4:31:2b:a5:f2:7c:55:a2:
74:aa:bc:0b:12:b6:f7:7c:9b:87:0b:c0:e2:c4:8a:15:27:d3:
33:06:69:1b:89:b2:bb:c6:40:77:ff:17:99:a1:2d:70:d6:a7:
38:20:c5:f4:c8:ed:7f:e3:4c:f3:37:b3:42:48:82:a5:b9:37:
72:cf:07:e3:7c:7f:85:20:81:9a:9f:32:1c:15:2a:10:f2:40:
06:31:f2:0a:be:61:09:65:20:62:af:cd:f0:cc:14:e4:55:5f:
f9:ef:89:5c:ab:97:a9:c3:cf:36:7c:25:b7:99:d4:a0:db:e1:
59:e4:de:c3:40:b4:d6:6a:c2:3a:97:b2:72:54:5b:e9:88:2c:
06:ba:d8:37:c9:cb:f6:ac:6e:ae:dc:d3:d3:43:48:ab:9d:8b:
69:3b:46:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:05 2026 by rpki-client