Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/g3jRHV7SkX7IyrsNYQQNXfz52cc.roa
File: g3jRHV7SkX7IyrsNYQQNXfz52cc.roa (raw, json)
Hash identifier: 3RIyPynCw3IYQ9iJEsUxyyQ94HQj2166pZLADNaP89M=
Subject key identifier: 83:78:D1:1D:5E:D2:91:7E:C8:CA:BB:0D:61:04:0D:5D:FC:F9:D9:C7
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A135E96760EF70CC7378C712E495081454
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/g3jRHV7SkX7IyrsNYQQNXfz52cc.roa
Signing time: Tue 13 Oct 2026 15:37:31 +0000
ROA not before: Tue 13 Oct 2026 15:37:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205923
IP address blocks: 158.173.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:e9:67:60:ef:70:cc:73:78:c7:12:e4:95:08:14:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 13 15:37:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8378d11d5ed2917ec8cabb0d61040d5dfcf9d9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:c7:33:d1:c5:5c:8b:1b:18:b9:0d:ee:77:
d0:56:33:b0:9a:1e:33:63:bf:d4:99:88:1f:8c:32:
c0:66:de:79:18:43:43:23:91:fc:ea:c8:16:4a:2a:
98:10:51:23:7f:94:ea:da:a1:b6:06:02:b4:5b:be:
d1:44:86:5f:0c:18:8c:14:7f:53:a4:30:e0:a3:5c:
e2:fa:9c:e4:5f:c8:39:c5:aa:36:af:89:79:08:59:
e5:dd:28:fd:a9:2b:3a:e3:73:9c:55:7f:fb:4a:c3:
6f:47:93:7f:12:23:4a:91:94:5c:58:c6:d2:92:71:
77:ba:3d:1d:80:71:59:84:f9:69:ab:7a:29:6e:66:
2a:61:50:49:9f:ee:90:65:a7:31:0d:52:ca:60:59:
3b:16:49:44:d5:26:20:ca:d7:f4:1c:78:69:7e:aa:
d8:07:58:0a:8f:4c:cf:3b:82:7f:50:d4:bd:9c:04:
bf:26:32:99:36:07:6e:09:74:25:91:2d:e1:5d:12:
29:49:5b:2d:26:a1:f6:16:f7:63:1b:3a:b4:15:32:
7f:22:ee:06:dc:33:75:a5:3f:0c:d4:8c:a2:42:84:
00:01:f2:2e:c7:b9:17:06:75:81:bf:ee:d9:eb:01:
4b:70:b8:6c:59:b4:6c:62:fd:40:2c:30:5c:de:43:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:78:D1:1D:5E:D2:91:7E:C8:CA:BB:0D:61:04:0D:5D:FC:F9:D9:C7
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/g3jRHV7SkX7IyrsNYQQNXfz52cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.160.0/24
Signature Algorithm: sha256WithRSAEncryption
df:81:2e:3c:46:58:91:ac:b5:00:f4:e9:03:a2:b8:b9:39:a5:
f8:b7:fc:ee:b2:01:be:ce:7e:53:7f:97:b7:6f:2c:c5:ee:49:
29:7f:cf:cb:14:d4:41:7c:6a:8b:78:a8:66:91:93:b1:98:48:
2c:34:94:ec:49:56:a9:f5:5d:21:43:03:a7:91:e8:b4:0b:b6:
d6:e7:27:84:a0:d4:51:37:08:a0:ac:24:de:df:0c:41:d7:cd:
7a:64:ec:5d:9e:89:4f:4f:7d:4e:61:09:20:b6:ba:58:bc:bf:
b7:41:9a:46:20:8f:45:ae:10:03:f3:5c:6a:ab:0f:5f:86:51:
40:42:12:35:67:a0:e0:62:7a:78:87:a8:0d:21:41:13:22:f9:
69:f3:c3:e5:ab:7b:a6:b3:aa:41:74:a1:b2:12:42:35:38:bf:
52:41:b6:72:7c:a4:48:af:b8:83:25:bc:19:fc:8b:ca:61:6d:
1d:4b:3f:ef:fd:2d:be:f7:1e:79:8c:87:d4:26:77:65:b3:54:
6f:4c:4b:5b:2f:42:41:4a:6f:ae:86:4e:32:b2:66:9c:a4:17:
3e:95:e3:13:d5:2c:bb:de:26:ae:25:93:01:45:8b:63:d8:27:
28:e8:48:57:eb:36:84:32:e5:bc:21:f5:a8:cb:f8:b4:44:72:
35:19:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:44:38 2026 by rpki-client