Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/n43sGwmhzZ66iynJ53zXSTJbQU8.roa
File: n43sGwmhzZ66iynJ53zXSTJbQU8.roa (raw, json)
Hash identifier: fV5lfxAtxqffZkSRdmIPhZPQSriuDx7t3nKVTXbhIf8=
Subject key identifier: 9F:8D:EC:1B:09:A1:CD:9E:BA:8B:29:C9:E7:7C:D7:49:32:5B:41:4F
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 01A00A2145D4F0E4AF2C78E3AAD5075E38F1
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/n43sGwmhzZ66iynJ53zXSTJbQU8.roa
Signing time: Sun 16 Aug 2026 10:32:27 +0000
ROA not before: Sun 16 Aug 2026 10:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 193.160.152.0/24 maxlen: 24
2a0c:9e40:1::/48 maxlen: 48
2a0c:9e40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:21:45:d4:f0:e4:af:2c:78:e3:aa:d5:07:5e:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Aug 16 10:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f8dec1b09a1cd9eba8b29c9e77cd749325b414f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:80:12:cd:d4:02:24:5e:42:b8:20:c0:64:2f:
0e:cf:0b:cd:24:a9:b2:c6:03:e2:1a:6c:68:81:2f:
cb:83:d5:cc:f3:4f:85:c7:ed:1c:f7:96:58:fa:8e:
4b:60:35:42:6e:20:a4:6c:ac:0a:6c:25:de:4e:41:
49:82:28:1a:9e:60:b7:27:28:d2:81:27:84:bb:28:
c8:e0:39:32:c6:d4:90:4d:05:01:9c:40:6a:71:9a:
95:2a:49:7e:6d:33:32:d4:4f:44:0e:2f:31:b4:65:
eb:68:9e:f4:03:2f:d9:f0:31:fd:c3:d0:5e:30:cd:
53:58:b1:ba:2a:7d:f8:87:3d:f6:ec:2a:8a:57:72:
34:63:c1:27:e0:7b:65:0e:d2:e6:60:3c:e0:29:2f:
51:bc:75:58:26:e4:56:61:0a:8d:88:da:a8:36:d0:
8f:3a:48:76:d8:4b:23:48:84:29:ca:21:a0:c3:c7:
dd:04:c3:8d:c0:87:29:ab:eb:2d:8b:e5:b1:de:df:
2c:5b:e7:cb:15:3f:50:c0:ca:f3:67:1c:fa:0d:ab:
f7:83:69:b6:c9:7f:1d:a0:de:ca:c0:b3:e2:a4:a3:
77:83:bd:61:33:b8:39:d2:4d:f2:9e:b6:95:b2:13:
95:47:bd:96:23:26:81:ce:70:49:cf:3f:9e:8b:fc:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8D:EC:1B:09:A1:CD:9E:BA:8B:29:C9:E7:7C:D7:49:32:5B:41:4F
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/n43sGwmhzZ66iynJ53zXSTJbQU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.152.0/24
IPv6:
2a0c:9e40:1::-2a0c:9e40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a3:b3:c5:65:04:d0:6d:9b:a5:63:92:fd:08:47:8a:70:24:e6:
13:0a:4b:1c:71:e8:3d:74:93:bd:a1:56:9f:9c:8f:f9:22:cf:
29:76:71:9a:f3:24:8a:bb:b4:64:d3:7d:d5:80:d9:04:36:b9:
64:69:9b:6d:0c:3c:8d:83:94:47:d5:31:8e:ea:47:b5:d4:1c:
f9:3d:4e:fc:9b:ca:ed:ac:df:d4:8b:2b:55:bd:31:a0:14:21:
48:af:fc:fa:ad:ed:84:5c:6b:13:95:a4:54:10:4d:a1:4e:fc:
1d:49:37:23:75:ed:57:d8:a0:ee:06:90:5f:ae:a3:e8:02:16:
1c:da:3e:3a:96:56:35:f1:7b:8f:30:60:d3:fb:4f:5b:f3:44:
5f:cd:55:40:ac:01:14:a7:20:9c:0f:6e:71:dc:ba:de:48:fb:
5a:67:91:38:ad:d2:df:4e:aa:fc:42:e2:3c:91:47:35:36:54:
76:81:e6:3f:fc:d9:97:d2:af:29:a3:5b:73:f3:8a:16:d9:ce:
29:a2:cf:a3:33:39:96:30:d8:84:be:32:cb:eb:b4:7e:44:3b:
d9:bf:5f:56:d7:38:78:fb:25:62:83:96:3a:40:7a:36:04:08:
50:2f:50:07:6d:d2:ad:19:fb:66:95:ac:b2:f2:ca:99:65:1c:
40:ab:32:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:48:22 2026 by rpki-client