Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/g_6tBe5UBBPm29z-5RqNtjnMIN8.roa
File: g_6tBe5UBBPm29z-5RqNtjnMIN8.roa (raw, json)
Hash identifier: p/w8uApV6MwmBcLKylYrIizvBUbAJWW0yAHYzSe/xGs=
Subject key identifier: 83:FE:AD:05:EE:54:04:13:E6:DB:DC:FE:E5:1A:8D:B6:39:CC:20:DF
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A169B52286D26E5FCAFC962FA1205B8BC0
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/g_6tBe5UBBPm29z-5RqNtjnMIN8.roa
Signing time: Fri 23 Oct 2026 17:00:40 +0000
ROA not before: Fri 23 Oct 2026 17:00:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40994
IP address blocks: 163.245.58.0/24 maxlen: 24
163.245.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:b5:22:86:d2:6e:5f:ca:fc:96:2f:a1:20:5b:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 23 17:00:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83fead05ee540413e6dbdcfee51a8db639cc20df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:10:fc:d6:3c:5a:63:ad:b3:1f:0a:5f:b4:
c1:d2:9f:86:91:c2:02:ed:d1:55:46:ee:10:3d:4b:
7e:6c:41:4e:5d:62:15:ea:30:23:48:67:39:f7:57:
e1:cc:c2:5a:9a:56:3e:6f:07:95:4d:d9:a6:01:f6:
33:89:62:23:2f:ac:b9:3f:b4:82:79:13:4c:49:74:
3e:ac:6b:2e:06:aa:2b:0c:25:1b:32:06:b7:84:e1:
84:e9:09:23:bf:76:f4:8a:85:47:00:2e:7b:57:af:
a3:c4:34:1b:b5:ab:fc:5d:97:5a:8e:7b:80:89:67:
63:d4:7c:95:97:8b:80:a4:0f:be:57:fb:37:c8:4f:
e3:54:b6:0a:ce:3b:1c:fb:56:ef:97:11:e4:19:9c:
e2:bd:f0:29:e3:4d:a3:29:2f:13:2e:8d:8a:e4:86:
6e:79:ea:30:0c:43:62:91:16:bf:a7:13:2e:31:39:
8e:64:53:48:4f:61:61:ad:ca:00:34:1f:2f:44:01:
f7:8a:d3:a1:41:f3:f0:55:d6:13:ac:11:66:d8:53:
cf:2b:e5:c5:0f:d0:4b:b7:b4:1d:82:0e:9b:8e:89:
e0:f1:31:ca:21:fc:d6:2a:e8:2e:46:fb:7c:24:75:
6f:03:49:b8:1d:0d:b3:0d:7c:8a:63:77:76:7a:2a:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FE:AD:05:EE:54:04:13:E6:DB:DC:FE:E5:1A:8D:B6:39:CC:20:DF
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/g_6tBe5UBBPm29z-5RqNtjnMIN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.58.0/23
Signature Algorithm: sha256WithRSAEncryption
00:05:9c:d3:09:8f:2b:6a:3f:fc:8e:4a:29:87:af:4e:be:78:
75:9c:4b:55:36:fa:75:1a:5a:f9:5d:a1:92:7c:22:c7:e8:b9:
30:eb:22:a7:0c:96:5d:89:bc:2d:a8:ec:85:de:66:e2:80:8c:
ac:ab:d3:70:04:4d:7f:33:d7:b2:91:0e:5f:80:83:d1:17:3a:
91:d3:1f:e0:84:1c:a4:84:61:d3:dd:81:7d:ec:d5:15:70:50:
79:7f:2e:2b:1b:67:e2:62:9f:4c:ef:f6:c5:70:79:b3:73:77:
27:8a:ea:74:c2:7d:1a:0f:c0:be:15:12:93:01:0e:47:57:a1:
86:ab:79:3e:3d:84:60:12:7a:5d:95:a7:2d:db:d9:b8:40:e9:
0f:21:af:12:db:e0:d0:e4:0f:b5:10:b9:c1:93:bb:6f:00:27:
94:da:3d:73:55:1a:24:50:f3:bc:fd:59:7f:85:5c:13:21:f6:
13:dd:7e:33:82:e9:25:7c:53:03:82:a5:0f:b3:13:b1:34:c6:
c5:e2:ca:b3:9a:62:03:c3:bb:65:4a:35:6b:dc:e0:25:e2:60:
08:42:0a:0a:3a:dd:b7:07:d5:89:0f:57:4c:01:0f:b2:11:08:
ca:e4:4c:f1:48:85:f2:7d:bc:dc:0b:28:0d:42:43:b1:3d:e8:
11:e8:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:08 2026 by rpki-client