Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/ABzQhF4nQJ_-i6GeJXswvNvfqi0.roa
File: ABzQhF4nQJ_-i6GeJXswvNvfqi0.roa (raw, json)
Hash identifier: aonltyMdip7ckndP3bCkL6kJ0BckC9oOrLSPreRT5ew=
Subject key identifier: 00:1C:D0:84:5E:27:40:9F:FE:8B:A1:9E:25:7B:30:BC:DB:DF:AA:2D
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 01A12FF52B3901EED32BCCA390E2000D9A36
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/ABzQhF4nQJ_-i6GeJXswvNvfqi0.roa
Signing time: Mon 12 Oct 2026 11:52:38 +0000
ROA not before: Mon 12 Oct 2026 11:52:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 57.250.40.0/24 maxlen: 24
57.250.42.0/24 maxlen: 24
57.250.48.0/24 maxlen: 24
57.250.50.0/24 maxlen: 24
57.250.56.0/24 maxlen: 24
57.250.58.0/24 maxlen: 24
57.250.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:f5:2b:39:01:ee:d3:2b:cc:a3:90:e2:00:0d:9a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Oct 12 11:52:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=001cd0845e27409ffe8ba19e257b30bcdbdfaa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4f:2a:8b:f4:06:57:f7:d4:1b:64:9e:8f:ea:
b6:5e:95:37:8d:a6:3f:cc:ba:01:6b:ae:ca:e5:44:
a9:2c:c4:c6:c4:d8:e1:fb:88:f0:02:dd:cc:3c:f0:
76:a9:7d:00:1e:53:f9:b9:58:6e:7e:9a:f7:98:fd:
90:35:db:3e:0d:c4:70:76:11:37:a5:63:1c:0f:f8:
a9:03:07:1e:82:32:e9:8d:98:93:b6:66:26:67:c1:
36:7c:64:ad:56:36:0b:19:18:4d:27:cc:be:87:e0:
ca:9d:1e:3c:07:aa:c3:a1:f5:52:0f:70:6d:3f:3f:
1b:fb:88:db:28:1b:32:8d:31:51:4d:c7:ab:3d:10:
68:59:00:47:01:60:51:d5:0a:51:9b:77:4d:9a:f1:
ce:fb:28:12:da:b6:2e:b6:e3:4d:61:8d:67:21:d3:
c4:1d:56:39:ab:06:d3:88:d2:74:fb:68:52:1d:cd:
22:f8:7c:d0:dd:15:46:2e:07:74:9d:ee:7b:d4:2c:
67:a7:05:41:8d:56:1b:6b:7a:7f:53:1e:75:a6:c4:
15:db:5b:b4:5c:8b:aa:f1:d0:de:bd:7d:b7:f0:7a:
70:60:6e:c0:37:54:e7:9b:d8:0a:a6:25:2f:8d:78:
35:b0:c9:77:e7:74:cd:01:b0:3d:04:f6:8f:bf:7a:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1C:D0:84:5E:27:40:9F:FE:8B:A1:9E:25:7B:30:BC:DB:DF:AA:2D
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/ABzQhF4nQJ_-i6GeJXswvNvfqi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.40.0/24
57.250.42.0/24
57.250.48.0/24
57.250.50.0/24
57.250.56.0/24
57.250.58.0/24
57.250.255.0/24
Signature Algorithm: sha256WithRSAEncryption
82:18:62:86:fc:ea:26:a2:9c:40:ec:10:6c:70:34:46:de:17:
be:f8:17:86:fd:10:44:d8:d2:1a:cf:62:73:b7:9a:0f:ac:6c:
f4:e8:42:f6:ca:22:80:1b:7d:ed:42:fc:64:9a:54:2d:a2:3d:
4a:12:65:81:c6:fb:aa:9b:4c:b4:b1:3b:20:9e:83:d8:73:32:
c0:7a:6e:2c:12:cd:4e:9a:5d:37:df:c7:ea:dc:18:ea:d1:16:
2d:ca:b8:f3:f8:09:5f:0d:eb:3c:12:6e:50:7f:87:0c:3c:30:
9b:d0:eb:a3:8b:23:fb:df:c1:e4:4f:29:fc:c6:c7:36:44:3f:
8d:56:3a:c6:7e:76:26:f7:a8:86:f4:13:bf:87:c0:f8:7b:46:
4b:f0:48:87:d1:8c:b4:ec:28:bc:26:63:86:b8:4f:fa:6a:dc:
2e:1e:06:fc:40:31:c4:83:ef:ea:a3:73:d0:10:d0:0a:3f:c0:
76:db:07:a2:9c:9c:19:e3:60:90:d8:16:ec:fa:12:95:56:57:
8e:b3:66:44:88:bf:76:eb:d5:c3:a2:a9:72:3c:34:4a:7f:de:
58:03:62:e1:b7:81:9b:d5:9a:47:84:d2:87:ff:3b:1e:af:6e:
a3:32:48:50:e8:94:b6:83:8e:05:73:1a:3e:75:55:c3:43:39:
60:90:b4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:05:34 2026 by rpki-client