Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/416iDZRsufO_Y0_MjxS9lic2Hus.roa
File: 416iDZRsufO_Y0_MjxS9lic2Hus.roa (raw, json)
Hash identifier: UzxERjn77n9uWQWW+xi7g71p8RwsOjMY8Gu8SqM0ixk=
Subject key identifier: E3:5E:A2:0D:94:6C:B9:F3:BF:63:4F:CC:8F:14:BD:96:27:36:1E:EB
Certificate issuer: /CN=73d55c1b7e92e6853994fdb5760f68dcdfda6b2e
Certificate serial: 01A125D541840D71734DEF3E23F8163D47DB
Authority key identifier: 73:D5:5C:1B:7E:92:E6:85:39:94:FD:B5:76:0F:68:DC:DF:DA:6B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9VcG36S5oU5lP21dg9o3N_aay4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/416iDZRsufO_Y0_MjxS9lic2Hus.roa
Signing time: Sat 10 Oct 2026 12:41:35 +0000
ROA not before: Sat 10 Oct 2026 12:41:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 149.170.178.0/24 maxlen: 24
149.170.179.0/24 maxlen: 24
149.170.180.0/24 maxlen: 24
149.170.181.0/24 maxlen: 24
149.170.182.0/24 maxlen: 24
149.170.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9VcG36S5oU5lP21dg9o3N_aay4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:d5:41:84:0d:71:73:4d:ef:3e:23:f8:16:3d:47:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d55c1b7e92e6853994fdb5760f68dcdfda6b2e
Validity
Not Before: Oct 10 12:41:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e35ea20d946cb9f3bf634fcc8f14bd9627361eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:e8:a7:22:12:9e:33:2d:41:dd:c9:60:95:
9e:2c:88:a0:e2:13:83:99:ee:d6:50:d3:59:fa:79:
3f:c7:cc:25:16:00:48:2a:43:78:c2:a3:3c:41:0f:
ae:af:1b:c0:21:cd:b4:23:6d:e3:27:5d:ff:21:75:
0f:5f:1c:2a:16:57:2e:52:68:5b:8f:44:22:e6:f7:
f0:41:78:31:46:b3:d2:48:61:25:df:c0:42:70:ad:
7b:72:37:67:17:38:c9:de:12:c9:b4:56:45:6e:ae:
74:6e:ab:41:2a:3e:57:d8:04:2e:bc:0a:c2:e4:5b:
a4:09:f8:66:f8:ff:c1:9a:cd:29:ca:9c:60:53:c0:
94:1c:52:83:05:06:5f:0a:d7:b2:d6:a1:fb:54:c6:
39:b2:9e:25:fe:a9:53:b4:21:19:06:8a:16:47:23:
59:d7:e5:dd:8e:2e:0d:aa:24:39:4f:c9:fd:d0:35:
4e:f5:2f:78:9a:01:55:17:c0:de:d2:e8:03:c3:8c:
5e:6b:eb:e8:35:79:ae:1e:de:bf:5d:f6:d8:fd:e3:
4c:67:e3:1c:d5:cf:70:44:bc:d1:05:24:1e:ff:e9:
dc:9a:76:3c:c9:d1:a3:bf:e4:7d:4c:db:9a:77:45:
ef:28:5f:f1:f3:ae:1b:64:79:0b:fa:d2:b1:64:bc:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5E:A2:0D:94:6C:B9:F3:BF:63:4F:CC:8F:14:BD:96:27:36:1E:EB
X509v3 Authority Key Identifier:
keyid:73:D5:5C:1B:7E:92:E6:85:39:94:FD:B5:76:0F:68:DC:DF:DA:6B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9VcG36S5oU5lP21dg9o3N_aay4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/416iDZRsufO_Y0_MjxS9lic2Hus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.170.178.0-149.170.183.255
Signature Algorithm: sha256WithRSAEncryption
22:09:a9:09:e5:12:a3:59:8d:62:9a:fe:6e:24:95:2d:a7:ff:
b7:b4:0b:82:78:b8:2b:68:9a:cf:f1:2c:82:41:9d:ea:8f:b0:
9b:89:6d:70:85:cd:d4:95:25:ce:1a:e7:0e:c4:fc:7e:32:cb:
92:7c:e3:8f:20:52:cc:ce:fc:ea:0e:40:22:2e:5e:f7:a6:e1:
7c:d5:65:1b:53:ce:9d:7a:bf:23:52:d7:7f:2b:ac:55:83:2d:
da:10:45:63:19:64:3c:6f:d5:ad:de:8c:0e:92:0a:db:3a:16:
cc:2e:23:e0:2a:fd:8a:56:0c:df:5e:9f:a6:67:8a:6f:da:33:
9a:a0:19:40:7a:47:26:75:05:1c:50:64:5e:68:68:28:7d:4a:
8e:8f:3e:91:dc:aa:a4:07:32:2f:90:21:49:56:44:a1:fe:f6:
c5:0f:64:5c:1d:7f:49:02:07:fc:cc:9d:f6:2c:61:79:b7:e5:
e0:41:8f:56:f7:b6:e4:51:53:5f:e0:25:a1:f4:85:b2:11:22:
03:75:69:6e:d4:a7:a8:50:a6:11:56:9b:e7:a0:ff:e1:16:5d:
fa:e5:63:4a:6d:45:22:0d:0b:e8:92:99:7a:4a:8c:df:2c:60:
4d:2a:0f:d2:0f:60:3e:a7:ff:0f:28:89:c8:d8:62:d8:44:e7:
fa:d0:0f:a6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaEl1UGEDXFzTe8+I/gWPUfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDU1YzFiN2U5MmU2ODUzOTk0ZmRiNTc2MGY2OGRjZGZk
YTZiMmUwHhcNMjYxMDEwMTI0MTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzVlYTIwZDk0NmNiOWYzYmY2MzRmY2M4ZjE0YmQ5NjI3MzYxZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSjopyISnjMtQd3JYJWeLIig4hOD
me7WUNNZ+nk/x8wlFgBIKkN4wqM8QQ+urxvAIc20I23jJ13/IXUPXxwqFlcuUmhb
j0Qi5vfwQXgxRrPSSGEl38BCcK17cjdnFzjJ3hLJtFZFbq50bqtBKj5X2AQuvArC
5FukCfhm+P/Bms0pypxgU8CUHFKDBQZfCtey1qH7VMY5sp4l/qlTtCEZBooWRyNZ
1+Xdji4NqiQ5T8n90DVO9S94mgFVF8De0ugDw4xea+voNXmuHt6/XfbY/eNMZ+Mc
1c9wRLzRBSQe/+ncmnY8ydGjv+R9TNuad0XvKF/x864bZHkL+tKxZLyKbwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFONeog2UbLnzv2NPzI8UvZYnNh7rMB8GA1UdIwQY
MBaAFHPVXBt+kuaFOZT9tXYPaNzf2msuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzlWY0czNlM1b1U1bFAyMWRnOW8zTl9hYXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNDcxYjItZDFkOC00N2RiLThkMmIt
Zjg2OWUxOWIzZDIxLzEvNDE2aURaUnN1Zk9fWTBfTWp4UzlsaWMySHVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zNDcxYjItZDFkOC00N2RiLThkMmItZjg2OWUxOWIzZDIx
LzEvYzlWY0czNlM1b1U1bFAyMWRnOW8zTl9hYXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGVqrID
BAOVqrAwDQYJKoZIhvcNAQELBQADggEBACIJqQnlEqNZjWKa/m4klS2n/7e0C4J4
uCtoms/xLIJBneqPsJuJbXCFzdSVJc4a5w7E/H4yy5J8448gUszO/OoOQCIuXvem
4XzVZRtTzp16vyNS138rrFWDLdoQRWMZZDxv1a3ejA6SCts6FswuI+Aq/YpWDN9e
n6Znim/aM5qgGUB6RyZ1BRxQZF5oaCh9So6PPpHcqqQHMi+QIUlWRKH+9sUPZFwd
f0kCB/zMnfYsYXm35eBBj1b3tuRRU1/gJaH0hbIRIgN1aW7Up6hQphFWm+eg/+EW
XfrlY0ptRSINC+iSmXpKjN8sYE0qD9IPYD6n/w8oicjYYthE5/rQD6Y=
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:09 2026 by rpki-client