Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/gIa0siDHBQUIVJC-h9wzZHsz_wo.roa
File: gIa0siDHBQUIVJC-h9wzZHsz_wo.roa (raw, json)
Hash identifier: Q05EkkWFRXXj0iriIUfeqc3S/RvQaY5kNMIte9Ex2Us=
Subject key identifier: 80:86:B4:B2:20:C7:05:05:08:54:90:BE:87:DC:33:64:7B:33:FF:0A
Certificate issuer: /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial: 019CBD968F4E0729FAA25D66AEAD15AA6AAF
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/gIa0siDHBQUIVJC-h9wzZHsz_wo.roa
Signing time: Thu 05 Mar 2026 10:41:26 +0000
ROA not before: Thu 05 Mar 2026 10:41:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214366
IP address blocks: 153.51.41.0/24 maxlen: 24
153.51.43.0/24 maxlen: 24
153.51.44.0/24 maxlen: 24
153.51.45.0/24 maxlen: 24
153.51.46.0/24 maxlen: 24
153.51.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:96:8f:4e:07:29:fa:a2:5d:66:ae:ad:15:aa:6a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Validity
Not Before: Mar 5 10:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8086b4b220c70505085490be87dc33647b33ff0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:18:0b:e7:a7:da:67:f1:82:ae:de:d1:7a:
7f:77:54:2f:1f:6e:54:8d:fa:a5:f4:b9:6e:f2:48:
7d:58:28:38:d6:df:d0:c0:c3:d1:07:84:41:41:9c:
f6:a6:f6:47:69:4e:d8:18:aa:ae:e5:ac:0c:5e:fd:
6d:5f:5d:5c:aa:6c:97:f5:85:6d:0e:b2:bb:1a:ba:
04:f8:96:f5:bf:88:25:45:01:49:66:f1:3b:ed:99:
6f:8b:9b:c6:4b:c1:0d:94:c4:14:c7:3d:f0:04:8a:
91:e8:23:4d:d2:f4:4f:b1:00:91:8b:cc:a9:3c:2a:
1b:55:75:90:88:41:70:54:4d:d3:78:18:d8:7b:d8:
d1:c0:89:23:56:a2:26:f5:91:59:99:3a:44:1a:8e:
b9:12:d7:fb:a8:8b:40:9f:81:eb:dc:c2:e8:b1:d7:
fe:5c:d5:d1:88:88:b2:d7:5c:f1:d7:cf:61:7a:cc:
9b:34:60:fc:96:b5:4d:0f:4f:fc:5a:d9:45:a0:a0:
b4:07:05:5c:31:8d:27:af:5b:d4:ee:e8:80:c9:3e:
e9:dd:34:09:ac:86:4b:e9:88:ba:bf:2c:e4:b1:b7:
84:a5:d0:8e:fc:79:ad:cd:85:7d:5a:68:44:b0:8b:
ca:97:45:06:f2:81:06:03:e1:94:e1:43:55:91:57:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:86:B4:B2:20:C7:05:05:08:54:90:BE:87:DC:33:64:7B:33:FF:0A
X509v3 Authority Key Identifier:
keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/gIa0siDHBQUIVJC-h9wzZHsz_wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.41.0/24
153.51.43.0-153.51.46.255
153.51.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:50:75:d9:98:c6:ab:8c:0f:c0:bd:51:4b:f9:6d:86:cf:44:
9d:20:6a:73:b2:7e:45:07:85:48:ac:74:84:50:05:4e:86:10:
f5:10:a1:21:30:2b:45:10:6c:18:ff:a2:de:19:32:3e:61:03:
f1:9f:74:c4:fe:2c:76:f5:b1:a0:15:18:ee:b0:47:e9:ee:ae:
a6:31:82:07:b7:0a:8e:bc:70:76:bb:6b:b2:bb:31:78:9e:85:
01:18:92:41:40:fa:14:62:c9:a3:e6:cb:d1:76:f2:9e:70:b0:
ff:42:91:6d:30:1f:88:5e:41:1c:1e:61:81:b0:d6:94:59:fa:
02:36:af:ce:cc:71:28:f3:50:7f:f0:5e:34:e5:f2:d6:61:d9:
66:71:e4:80:20:26:eb:ca:9e:99:67:b8:b0:85:e1:ea:3b:d7:
53:37:1c:98:9a:17:d6:54:2b:5b:d5:36:84:d6:b8:d2:0f:61:
5c:dc:6a:af:df:d5:46:40:64:c4:69:7e:35:ab:bd:bf:82:09:
6c:0c:93:40:c0:83:94:4b:41:c7:8f:f6:21:e7:83:77:44:1c:
38:fc:d8:8d:a5:81:8c:f9:5f:57:9e:85:5b:a5:92:e9:7e:4c:
23:23:5b:ff:34:fa:49:6a:df:f1:6d:8b:ab:dd:43:d3:a6:f8:
09:96:1b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:00:09 2026 by rpki-client