Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SUhpcyUSMct7PHWumalhdwuQCIY.roa
File: SUhpcyUSMct7PHWumalhdwuQCIY.roa (raw, json)
Hash identifier: TGvAZVN4UJ/EwjBTaB5slCtJ1ZBI0hecCZSzby67RXY=
Subject key identifier: 49:48:69:73:25:12:31:CB:7B:3C:75:AE:99:A9:61:77:0B:90:08:86
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A143FCF94D4D69A697396C5254AE048C3B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SUhpcyUSMct7PHWumalhdwuQCIY.roa
Signing time: Fri 16 Oct 2026 09:13:34 +0000
ROA not before: Fri 16 Oct 2026 09:13:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 124.198.131.0/24 maxlen: 24
124.198.132.0/24 maxlen: 24
147.90.214.0/24 maxlen: 24
147.90.219.0/24 maxlen: 24
155.2.192.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:fc:f9:4d:4d:69:a6:97:39:6c:52:54:ae:04:8c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 16 09:13:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49486973251231cb7b3c75ae99a961770b900886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:e3:ea:02:0c:1d:ba:d3:ed:4d:33:06:7b:
fd:28:7e:b9:77:3a:c8:aa:26:9b:96:83:bb:c0:c8:
8c:68:68:f9:dd:c1:de:92:48:92:e2:eb:b8:45:d0:
f2:1d:21:7b:81:cb:2e:bd:9a:0b:bc:05:98:49:fe:
49:4a:81:0c:87:13:3a:eb:ad:aa:7f:32:c5:da:d4:
81:04:60:a0:9f:08:10:cf:f8:69:12:28:6b:00:09:
29:c2:b1:81:61:0d:c8:a0:9e:b3:a5:a0:c4:a0:38:
7f:6a:53:76:b1:cf:0d:52:fb:0c:0b:8c:e9:d1:11:
1b:8f:02:a0:62:15:87:6e:8b:76:1b:0f:1f:c6:bc:
b3:9a:11:fe:d2:a5:ab:f2:93:b5:32:d8:35:6f:9d:
14:35:14:ff:4e:40:2f:3b:fe:ba:4b:4e:62:36:fa:
5d:64:44:91:d8:63:3b:ae:d7:78:34:23:f3:be:35:
10:e4:06:03:5e:6e:01:29:57:ca:6a:87:7c:52:a0:
19:23:8c:03:f4:3a:f9:be:4c:30:7a:38:09:45:95:
d0:ed:bc:b4:c7:94:ee:bb:00:d0:5d:32:ee:39:46:
f9:f6:da:9c:2c:98:a9:60:0b:8c:5a:c3:17:b1:16:
6f:2b:49:fd:06:3d:da:d9:0a:f4:d2:71:7e:73:40:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:48:69:73:25:12:31:CB:7B:3C:75:AE:99:A9:61:77:0B:90:08:86
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SUhpcyUSMct7PHWumalhdwuQCIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.198.131.0-124.198.132.255
147.90.214.0/24
147.90.219.0/24
155.2.192.0/24
203.188.171.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:73:d8:b7:f0:3f:88:44:5c:df:53:11:03:4b:98:21:68:af:
6e:3d:71:53:fd:49:84:58:0e:ac:0f:82:a0:34:c4:6a:e3:bf:
3b:4a:9e:13:09:3f:3d:d2:0d:53:54:6e:b2:d2:39:a4:d4:fd:
3c:86:b8:55:cf:c6:56:da:8b:4a:55:d8:9c:58:ef:20:86:17:
ee:a8:7b:b6:53:45:53:4f:ad:7b:99:15:ee:a3:4b:c3:da:fa:
02:98:5f:da:5a:ac:79:91:d6:85:25:59:f0:59:09:0b:7a:32:
f8:f1:ee:6f:53:b5:12:41:be:61:d8:1e:aa:01:a9:e2:2c:1f:
2a:a2:a0:df:b3:b7:32:98:68:ad:46:c4:80:fd:01:41:1d:8e:
38:a6:fd:fb:a8:46:5b:88:66:4c:2e:74:7b:0f:e5:dc:98:93:
a6:e3:9a:fe:38:93:23:6a:ab:36:25:1b:72:ed:c5:87:49:54:
a5:1c:50:61:7d:41:d8:4f:97:a1:12:46:74:3d:59:c1:5c:e1:
a0:97:df:4f:a3:47:87:80:2d:2a:f8:7d:4e:c3:08:59:21:fc:
74:e8:11:f1:83:69:73:05:76:29:16:c1:e8:40:c9:7c:a0:19:
8c:c8:de:b0:f6:5d:cf:a2:1b:ba:51:cb:6f:cc:d1:3d:8a:98:
c2:b6:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:20 2026 by rpki-client