Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/I6YWMGhy7HKFnX7IA6Ri3Fvq3Bw.roa
File: I6YWMGhy7HKFnX7IA6Ri3Fvq3Bw.roa (raw, json)
Hash identifier: iO6NFnEQ5zNAX8dkduVe692P6jMfZQ6IsoktNrW/oGA=
Subject key identifier: 23:A6:16:30:68:72:EC:72:85:9D:7E:C8:03:A4:62:DC:5B:EA:DC:1C
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 01A04833D8B1522F56FDD9A3B227CF946156
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/I6YWMGhy7HKFnX7IA6Ri3Fvq3Bw.roa
Signing time: Fri 28 Aug 2026 11:49:12 +0000
ROA not before: Fri 28 Aug 2026 11:49:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 57.250.40.0/24 maxlen: 24
57.250.42.0/24 maxlen: 24
57.250.48.0/24 maxlen: 24
57.250.49.0/24 maxlen: 24
57.250.50.0/24 maxlen: 24
57.250.51.0/24 maxlen: 24
57.250.56.0/24 maxlen: 24
57.250.58.0/24 maxlen: 24
57.250.64.0/24 maxlen: 24
57.250.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:33:d8:b1:52:2f:56:fd:d9:a3:b2:27:cf:94:61:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Aug 28 11:49:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23a616306872ec72859d7ec803a462dc5beadc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:ff:5e:5e:d6:70:79:40:cc:f0:46:5c:9e:
fa:87:a0:bd:3b:8f:60:d5:87:6c:44:2b:6f:10:3e:
97:23:00:f5:c7:b6:0f:70:ab:fb:79:94:97:8c:66:
28:6e:ee:ae:fa:46:16:5b:e8:d2:9c:1c:00:8a:1b:
4e:c7:30:36:18:f5:3b:e1:a3:83:5f:0b:94:6d:81:
7b:9c:c4:48:f2:57:43:c5:fb:46:30:d4:be:b7:93:
7a:2c:df:89:0b:3c:89:ea:0a:77:a6:3f:80:1f:b9:
d7:95:5c:84:c5:cd:9a:f3:b0:e5:2f:be:2d:b0:da:
fe:49:fa:40:93:76:c7:ac:29:9a:24:b7:cb:e0:64:
d0:04:6a:64:cc:fc:51:dc:30:e0:2b:52:eb:62:41:
ca:ff:29:9b:e5:8b:09:a7:ed:e9:04:dc:71:de:bd:
8f:07:18:87:2c:78:f8:e0:db:c4:af:eb:99:d0:21:
0c:d5:b9:18:29:19:7b:13:39:f0:14:2f:7a:53:20:
80:f9:6e:bb:08:b6:2a:e8:c9:fd:25:50:f4:b9:f5:
f5:27:c4:bc:68:82:47:19:33:9e:84:e7:09:46:d1:
f3:47:05:3d:5e:89:ad:7e:92:10:ff:f6:d0:35:6d:
25:49:c1:a0:38:a1:01:af:78:e9:9c:dd:e1:e5:17:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A6:16:30:68:72:EC:72:85:9D:7E:C8:03:A4:62:DC:5B:EA:DC:1C
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/I6YWMGhy7HKFnX7IA6Ri3Fvq3Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.40.0/24
57.250.42.0/24
57.250.48.0/22
57.250.56.0/24
57.250.58.0/24
57.250.64.0/24
57.250.66.0/24
Signature Algorithm: sha256WithRSAEncryption
49:cf:c3:81:ba:66:44:73:7f:18:36:6f:53:68:42:8e:22:4f:
29:9d:b1:06:45:00:78:df:11:bc:15:d5:fc:de:2a:27:1c:e7:
c1:3b:22:19:4d:bb:3c:f0:2a:0d:07:21:7a:fa:44:38:7b:38:
01:19:65:2a:6d:e1:9c:53:83:9d:ca:39:2b:1c:74:78:bb:70:
87:3e:2f:7f:69:c6:85:b1:74:60:c9:29:75:54:6a:1f:69:06:
70:5b:84:64:ca:38:d7:70:89:e1:e2:eb:7b:a1:15:7a:76:3b:
8e:81:97:e9:49:33:78:49:d5:66:98:64:d2:80:ab:80:58:cc:
dc:75:4c:32:ca:ed:d7:29:fe:99:c6:ec:4f:11:af:c5:f2:8e:
61:c3:ee:08:a4:bb:5e:e2:ef:9c:77:7b:3b:9e:7a:8c:ac:e7:
32:e4:70:a8:ab:be:b3:4e:69:c1:24:8f:2c:5e:13:e7:3e:2e:
29:a2:a3:ae:15:38:d8:40:90:0a:48:9d:05:06:4b:71:5f:74:
a4:b1:5e:ad:60:8d:7c:c0:e8:77:da:fb:82:92:8b:04:b1:87:
8b:f7:44:82:ef:95:c9:0a:74:e6:1d:b7:de:66:a0:f4:34:7f:
5e:bb:af:56:b7:5e:64:fe:a5:c5:bf:ae:a5:19:75:21:ac:37:
c3:1e:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:39 2026 by rpki-client