Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/EXrOLUDQAp23FqXgqWtHM788r-U.roa
File: EXrOLUDQAp23FqXgqWtHM788r-U.roa (raw, json)
Hash identifier: sx3BQl45nInlbJ/mL9FrG5DE/6EuzM0BnNkwesraPY8=
Subject key identifier: 11:7A:CE:2D:40:D0:02:9D:B7:16:A5:E0:A9:6B:47:33:BF:3C:AF:E5
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0F3833F24649571389D91880F02BA1E1B
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/EXrOLUDQAp23FqXgqWtHM788r-U.roa
Signing time: Wed 30 Sep 2026 18:10:59 +0000
ROA not before: Wed 30 Sep 2026 18:10:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206134
IP address blocks: 160.20.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:83:3f:24:64:95:71:38:9d:91:88:0f:02:ba:1e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 30 18:10:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=117ace2d40d0029db716a5e0a96b4733bf3cafe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c8:65:3b:3b:fa:dd:7a:96:54:6c:c2:75:db:
b4:ac:39:37:db:3e:66:8d:3c:76:c2:51:47:21:3b:
d7:a7:f0:41:d3:28:18:be:27:71:48:a7:c0:4c:5d:
c1:65:f1:02:f2:14:2e:a9:19:47:c5:74:ac:2b:ce:
e2:67:fd:9f:86:02:6f:cd:33:da:fe:22:7f:0f:8b:
07:27:75:ea:cf:d0:07:85:64:9c:b9:b6:99:ca:64:
8f:1b:29:6b:26:c0:32:54:7f:06:2c:0e:f8:05:20:
e3:66:c0:91:f1:5d:85:76:e8:6e:54:20:e3:a4:5a:
6c:b6:82:ce:d7:a1:e3:e4:cc:f6:90:42:1f:72:47:
91:23:16:36:12:96:a8:d5:dd:e7:c9:75:ef:3c:64:
ee:3c:b0:2f:05:a3:50:ab:6c:f6:a1:db:c2:4f:c8:
47:3f:8c:9b:24:ab:31:64:02:95:80:5a:f5:03:23:
5e:90:66:90:67:a5:a7:e5:27:57:75:eb:7b:6f:71:
53:b3:0e:00:9a:ab:f5:98:79:02:03:c9:48:99:30:
ef:1f:47:31:5f:eb:c3:d6:33:ae:4a:0d:2e:8b:c8:
6b:9a:82:e8:a0:30:30:c2:58:e5:e9:47:9b:9a:76:
5e:1b:87:95:ea:c4:0d:7e:d2:5b:ab:a5:5e:e2:f0:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7A:CE:2D:40:D0:02:9D:B7:16:A5:E0:A9:6B:47:33:BF:3C:AF:E5
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/EXrOLUDQAp23FqXgqWtHM788r-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.158.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8a:83:32:bf:19:e8:02:0f:51:78:55:c9:0d:83:ae:e0:8d:
ff:cb:00:4d:16:3b:db:3d:bc:03:7d:c8:e8:50:8a:08:49:20:
a7:58:dd:4f:bb:60:25:44:d1:60:4e:fb:44:eb:2e:7c:c3:12:
52:e2:ce:8d:9d:ae:8b:0b:2c:6d:2f:93:2f:1d:88:a1:24:13:
f9:9c:14:c4:15:8e:6f:a5:b7:58:de:da:8f:a6:be:49:9c:8b:
70:b5:7e:60:33:c9:3f:bc:09:2c:99:66:bb:14:e3:29:fc:9c:
1d:b8:f4:e7:3f:94:23:f2:6d:ed:d3:e4:51:86:b0:63:07:bc:
33:df:9b:81:95:cd:78:7a:41:7c:d6:6b:cf:63:84:f8:73:91:
53:2a:73:62:58:e9:e3:15:61:ef:c4:c2:2b:7a:d2:76:2c:40:
43:f6:fc:dd:54:fd:78:b2:9c:9f:b2:dc:6d:d3:19:95:65:4a:
5d:2e:c0:c9:97:46:d7:f4:62:2c:91:dd:df:83:60:b0:41:84:
f1:15:83:d1:4d:24:fd:62:56:bd:bb:0c:a6:cc:a3:9c:48:7b:
3b:4f:13:db:3b:b6:0c:13:5f:b5:df:84:e9:91:6c:3c:01:10:
20:7c:81:23:07:0c:ef:f1:fa:d1:59:86:90:50:03:39:24:b7:
b8:a4:89:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:38 2026 by rpki-client