Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/sRieXWXUnmpw3cn_Y3GaLU_4g0s.roa
File: sRieXWXUnmpw3cn_Y3GaLU_4g0s.roa (raw, json)
Hash identifier: slJE1f0uUSFtnX/JKVpX4v1mUQMwyhaEmSh+/njVReA=
Subject key identifier: B1:18:9E:5D:65:D4:9E:6A:70:DD:C9:FF:63:71:9A:2D:4F:F8:83:4B
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A16E08B15EE9C668B09D176EEB3E107BE2
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/sRieXWXUnmpw3cn_Y3GaLU_4g0s.roa
Signing time: Sat 24 Oct 2026 13:10:25 +0000
ROA not before: Sat 24 Oct 2026 13:10:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 163.245.44.0/24 maxlen: 24
209.161.105.0/24 maxlen: 24
209.161.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:08:b1:5e:e9:c6:68:b0:9d:17:6e:eb:3e:10:7b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 24 13:10:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1189e5d65d49e6a70ddc9ff63719a2d4ff8834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:70:6d:f5:22:c2:af:59:a1:d1:c6:4e:e4:
19:e9:8c:8f:4e:c4:cd:1d:de:fc:df:fd:42:7e:90:
b2:4b:5d:22:51:79:14:b2:7a:7a:93:60:74:be:91:
52:e4:60:30:70:42:24:d2:72:5b:91:3a:6d:9c:8c:
4d:d2:2c:41:dd:cc:d1:67:61:26:e4:dc:da:49:43:
54:78:45:4a:12:66:a3:63:da:f2:73:58:2e:ed:a6:
f3:9d:f7:24:65:54:c3:da:cc:b0:07:9f:9d:22:83:
a3:7f:b3:53:4f:32:a7:a7:b3:7b:b4:e8:51:7c:32:
33:4e:c8:66:cb:f5:91:69:81:9e:50:bf:0a:85:4b:
76:ea:12:3d:06:07:24:2b:eb:b2:e3:88:a5:16:2b:
15:4c:5e:47:e9:a1:7a:96:19:f8:a5:eb:19:d7:e3:
e2:34:e4:50:41:a7:5c:7b:d7:56:71:da:ee:95:27:
df:fe:fe:49:77:26:d3:6a:2c:9c:00:aa:fb:f2:da:
f1:86:fb:f7:74:62:5f:3f:57:6f:7d:b3:14:bd:e1:
84:d2:5a:bd:ab:42:48:68:e8:ea:8b:d8:39:bf:b5:
c5:1d:9c:f9:ad:a8:c5:48:e6:72:5f:bb:eb:1d:3d:
94:d3:06:70:f3:67:a0:51:2d:0d:c6:19:a4:1f:f9:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:9E:5D:65:D4:9E:6A:70:DD:C9:FF:63:71:9A:2D:4F:F8:83:4B
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/sRieXWXUnmpw3cn_Y3GaLU_4g0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.44.0/24
209.161.105.0/24
209.161.107.0/24
Signature Algorithm: sha256WithRSAEncryption
85:0d:ce:c3:11:c3:69:0d:5c:50:b3:52:47:01:c7:53:02:05:
c0:64:34:fc:40:45:a0:1a:0c:85:7a:73:f2:86:65:36:c0:31:
f4:14:4d:f0:58:84:0f:72:5e:3d:19:38:03:53:85:89:4c:24:
50:3d:90:2e:a1:76:d8:67:ba:40:6b:8b:3c:36:17:c2:ae:f7:
fc:29:43:35:26:0b:88:81:03:f2:24:4a:43:71:fe:7d:9c:e8:
a3:ed:2d:85:82:f7:85:96:e0:46:25:f5:b7:55:e8:08:d0:39:
b9:cb:33:a4:22:c8:98:f2:60:69:f8:48:08:30:ea:6f:af:35:
1d:f4:5a:9d:4b:57:0f:1a:9e:f8:23:cb:cc:95:65:4d:6c:09:
d6:2d:03:04:4f:8e:76:d6:6b:de:26:3f:79:1f:61:72:f1:79:
d8:87:62:9a:0c:5b:d9:3c:7c:e9:16:d5:d6:04:5e:71:d4:6b:
1c:11:86:2b:1a:a2:3a:f4:93:49:91:ed:a9:46:3f:4c:48:11:
f6:f2:05:09:d9:c3:64:11:40:e6:4d:a7:07:75:15:8c:30:9e:
6a:e6:10:61:71:18:9c:46:35:8d:a3:81:b0:39:b2:08:22:ba:
55:fe:b8:03:30:e2:65:83:e8:53:ed:bd:8b:1b:1f:c5:a8:fd:
88:be:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:53 2026 by rpki-client