Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/xDlSPTFShxNr81DuDjCMKY9l3Ao.roa
File: xDlSPTFShxNr81DuDjCMKY9l3Ao.roa (raw, json)
Hash identifier: 1jLK5BI3lIYRzAeSBH8RC8GC1xnpqFxEklwCR2h+c9Y=
Subject key identifier: C4:39:52:3D:31:52:87:13:6B:F3:50:EE:0E:30:8C:29:8F:65:DC:0A
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A15200EC3DBDB67B88AEC208F3B4E5CB90
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/xDlSPTFShxNr81DuDjCMKY9l3Ao.roa
Signing time: Mon 19 Oct 2026 02:32:34 +0000
ROA not before: Mon 19 Oct 2026 02:32:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 163.245.46.0/24 maxlen: 24
163.245.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:00:ec:3d:bd:b6:7b:88:ae:c2:08:f3:b4:e5:cb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 19 02:32:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c439523d315287136bf350ee0e308c298f65dc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:5f:2c:50:16:9a:52:bb:55:f7:3a:87:69:
3b:2b:cb:9d:2b:1a:b6:5f:7d:b3:14:b5:b1:83:00:
6d:20:47:b6:0f:aa:25:5d:00:f7:e0:7f:43:5e:8a:
88:78:d3:b6:5d:39:1c:aa:78:5c:2e:56:33:f7:2f:
df:f2:38:cf:3a:cd:33:f0:3f:cd:67:b9:98:a8:0b:
46:40:e6:20:14:3d:8d:19:50:a9:6d:d8:76:43:1c:
b9:9a:56:70:79:4f:01:cb:94:83:8a:8d:3c:87:11:
26:fe:91:08:61:df:f3:a4:fc:bd:1b:3a:9d:d2:05:
a3:91:85:b7:df:99:36:78:40:10:49:1b:5d:4a:ed:
97:01:96:4f:70:a9:bb:09:e7:64:ea:58:30:4f:d6:
1c:2c:a0:43:c5:a1:bb:0d:3f:0e:c7:df:bd:48:7a:
54:bd:a6:15:9a:e6:79:6c:26:3a:65:77:9b:77:13:
bf:f6:86:21:f5:b2:30:cc:17:68:cf:96:7f:12:3c:
bc:20:9d:da:ef:b4:53:18:24:b7:86:98:f0:57:ee:
fe:48:43:ba:60:f8:73:94:5d:79:12:5e:42:fa:bd:
02:50:ea:5f:9b:41:c6:a3:97:ed:5a:af:b2:c3:89:
e7:f0:6a:aa:de:de:4d:82:72:5d:6e:67:ec:2e:4a:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:39:52:3D:31:52:87:13:6B:F3:50:EE:0E:30:8C:29:8F:65:DC:0A
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/xDlSPTFShxNr81DuDjCMKY9l3Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.46.0/24
163.245.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:45:e1:45:99:aa:19:50:0b:2a:9f:31:eb:3d:7b:92:d0:2c:
bf:4b:9f:58:02:83:b3:88:2e:dd:b1:bb:b7:6a:89:30:69:ee:
7f:9a:94:5c:d6:fe:62:ab:da:96:53:b3:2b:72:fc:09:44:6b:
40:e2:89:4b:74:4f:5e:c4:38:e8:5b:14:e8:17:60:89:2d:27:
86:db:0d:d0:3b:32:fa:b8:10:ac:f3:2f:32:47:a9:ff:78:30:
fd:e7:50:61:0b:23:7b:e1:f9:c4:7c:90:ea:ed:9c:93:4e:3f:
04:fb:2b:61:2a:ce:45:82:ac:de:58:0f:62:35:96:ed:92:c6:
fc:f9:9e:74:f8:9c:ff:5e:c1:ef:ff:56:f9:cc:93:41:cc:cb:
5e:2d:2e:de:10:3e:87:26:2e:02:69:08:73:75:f8:06:b7:c5:
86:55:63:43:77:ad:d2:fc:f2:14:6d:6d:c2:46:12:b5:93:ca:
fd:6c:86:40:d9:36:85:62:8c:b9:13:ce:2d:48:5e:c4:aa:46:
a0:0f:50:26:64:32:6f:0d:46:52:80:8e:59:3d:80:a3:19:51:
84:04:5f:af:f5:c2:a8:7a:d6:e0:7b:20:33:4d:a9:64:29:bf:
de:85:78:6c:b7:9a:b0:ef:6e:19:87:b7:3e:19:70:32:ed:66:
26:ba:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:08 2026 by rpki-client