Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/G_oRppvUvWxZ2xlpuj7sPy-zCdU.roa
File: G_oRppvUvWxZ2xlpuj7sPy-zCdU.roa (raw, json)
Hash identifier: scQeWeoCd7QFPDVzrWt+r+QwRe+R3ceG915yGbDuSxo=
Subject key identifier: 1B:FA:11:A6:9B:D4:BD:6C:59:DB:19:69:BA:3E:EC:3F:2F:B3:09:D5
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A1589493635B078B64B936AEBA819F6E11
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/G_oRppvUvWxZ2xlpuj7sPy-zCdU.roa
Signing time: Tue 20 Oct 2026 09:11:34 +0000
ROA not before: Tue 20 Oct 2026 09:11:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209657
IP address blocks: 157.228.158.0/23 maxlen: 23
157.228.158.0/24 maxlen: 24
157.228.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:94:93:63:5b:07:8b:64:b9:36:ae:ba:81:9f:6e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Oct 20 09:11:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bfa11a69bd4bd6c59db1969ba3eec3f2fb309d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:48:b6:9b:56:b5:1b:ca:87:49:e6:50:0f:
03:04:7c:6b:cb:ad:46:d7:ab:84:db:7e:60:20:70:
5a:7c:a9:43:27:e2:82:e8:c4:57:9f:cd:dd:8f:2b:
99:e7:f3:b5:6f:30:39:e8:e6:48:30:19:8b:0d:ed:
34:c3:f2:6e:11:ee:a1:10:27:08:7a:b7:dc:34:7b:
ec:76:68:35:61:64:01:60:97:87:71:f7:46:b6:f6:
40:33:e3:ef:cd:45:c6:39:30:66:48:b3:f5:6a:f3:
9f:85:3a:5b:83:46:1e:90:74:68:b0:d1:86:ef:ab:
9e:ae:af:ca:6f:52:dc:2e:1a:a1:67:af:bb:6f:03:
14:06:50:17:ac:5b:a0:99:4f:6a:cd:f9:e8:05:01:
e9:7c:65:0b:b1:cc:13:8c:f0:3a:eb:d7:65:38:3f:
82:39:0e:c9:c3:07:85:66:f1:5d:9b:9d:86:d6:fb:
03:20:28:a6:f2:1e:37:2d:8f:1a:ee:e5:37:93:f3:
34:e0:9e:ba:1e:78:b1:31:71:0f:60:c4:4a:aa:69:
09:60:f6:90:74:be:a6:02:82:aa:dc:35:e0:b2:1b:
62:f3:f8:84:19:6e:da:48:63:32:6b:a4:30:bb:3d:
6a:4b:59:21:3f:b5:02:f5:07:50:15:ea:c5:2e:39:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FA:11:A6:9B:D4:BD:6C:59:DB:19:69:BA:3E:EC:3F:2F:B3:09:D5
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/G_oRppvUvWxZ2xlpuj7sPy-zCdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.228.158.0/23
Signature Algorithm: sha256WithRSAEncryption
57:6d:42:f1:bb:26:54:db:55:22:d3:6e:70:e2:f7:d1:c1:3c:
39:b5:6b:2f:e5:36:ed:92:b5:cd:ba:c7:ea:a6:be:73:fd:45:
1a:67:9b:7e:64:38:3c:ff:3a:d0:68:8a:b6:0f:65:00:0b:79:
e5:7d:82:26:67:9e:7e:8c:32:9d:b4:7a:72:0e:96:4f:43:35:
ca:97:21:1c:fa:09:ce:7b:76:31:0b:0e:3a:98:ca:8e:e9:c2:
ad:3c:2a:ba:d3:e8:31:18:58:a2:3b:92:01:79:43:6a:ef:59:
b4:54:97:35:7a:4c:94:7b:8f:83:25:99:e0:d4:35:28:56:46:
81:ad:23:f5:35:03:46:2d:3e:78:bb:51:ce:0b:55:fd:11:99:
c4:53:14:e0:eb:54:6e:a4:7b:71:2a:5b:68:29:5e:d9:a1:be:
57:df:2e:37:0b:a3:5c:c9:5c:49:9c:5e:3a:e4:48:d4:88:a1:
9c:4c:8c:7a:d3:e7:7b:ea:bd:8c:87:9a:02:12:e2:3a:c3:e2:
30:71:64:38:8e:b5:08:c4:83:90:19:c0:b3:32:1f:19:c0:36:
a2:05:4f:d6:21:87:9a:5a:06:14:56:14:08:ea:b4:44:d7:60:
f9:27:8f:3f:d7:c6:5f:32:01:30:47:c2:f2:9d:06:db:6c:59:
6c:af:f4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:00:00 2026 by rpki-client