Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/GIKziXI0ze0FwPya3PhgfF3f_tA.roa
File: GIKziXI0ze0FwPya3PhgfF3f_tA.roa (raw, json)
Hash identifier: Q4/p9Bv6o+xxhdGbCok8TG1MXiBudXjraYt9L2zzurs=
Subject key identifier: 18:82:B3:89:72:34:CD:ED:05:C0:FC:9A:DC:F8:60:7C:5D:DF:FE:D0
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01A146C28101E0C9667910605AF3E8472266
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/GIKziXI0ze0FwPya3PhgfF3f_tA.roa
Signing time: Fri 16 Oct 2026 22:08:34 +0000
ROA not before: Fri 16 Oct 2026 22:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 153.58.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:c2:81:01:e0:c9:66:79:10:60:5a:f3:e8:47:22:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Oct 16 22:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1882b3897234cded05c0fc9adcf8607c5ddffed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:ba:76:7d:9d:80:fe:3e:d3:7b:da:19:ee:
0f:fd:58:46:1c:ef:2a:c0:46:f6:3f:8d:88:7a:98:
1a:ae:fe:d9:4b:5d:c8:47:da:98:10:d2:3f:1e:a0:
55:cc:d6:7f:47:51:ab:1e:76:e2:34:c7:2d:5c:9b:
d7:f5:6b:1f:27:a0:6e:25:d2:1f:15:2b:b9:4e:e9:
d9:9e:23:a8:1b:1a:e5:9f:89:a5:39:cd:07:29:fe:
1e:f0:a3:5c:2b:68:09:24:d9:a9:61:56:32:df:c8:
e4:be:b2:50:d2:a5:e4:40:05:9a:49:2f:3d:75:10:
6b:c0:35:1d:86:cd:a5:d3:22:9d:cb:1d:74:82:b6:
38:85:0b:8d:78:36:b5:16:9c:db:13:af:96:8a:a0:
b7:2e:cb:0f:7e:6c:73:b8:12:d9:e4:1e:8c:ac:45:
59:5e:18:7c:47:70:d0:f1:9c:bb:d5:bb:b0:02:b9:
ef:33:4b:fe:24:26:b6:15:42:6f:a4:9a:3d:d2:f3:
18:5e:e7:4a:31:4e:b3:8f:d8:bd:84:cc:c6:57:68:
72:c8:51:d3:f9:27:11:68:90:5c:84:1c:5a:88:76:
a7:a4:32:da:70:67:cd:cd:95:03:2e:ac:97:6c:9e:
52:d1:03:6b:5a:9f:35:ce:27:49:03:af:d6:79:90:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:B3:89:72:34:CD:ED:05:C0:FC:9A:DC:F8:60:7C:5D:DF:FE:D0
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/GIKziXI0ze0FwPya3PhgfF3f_tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.58.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:4b:1f:ce:11:10:22:0d:10:aa:18:28:fc:da:31:55:b4:ec:
2a:aa:c9:f9:51:0c:b6:9c:7a:9d:d5:31:3a:e1:9c:a4:0c:d8:
0b:82:ef:bb:94:01:e3:11:02:de:e5:95:72:e5:7c:43:db:14:
e4:2e:de:26:aa:be:44:fc:cd:bb:1f:a5:9a:d0:18:f3:ff:01:
66:f0:3f:d3:ea:ab:b0:f1:5b:ed:b1:63:d8:57:3e:0d:68:97:
c0:06:42:21:a1:68:6e:29:3f:8d:55:04:0c:d2:06:c4:a2:b1:
fe:63:ac:2e:99:d4:e4:38:e3:4e:72:9b:f5:b5:71:4b:48:6e:
fa:72:c4:ef:3b:8f:29:68:fc:30:d1:2a:73:b1:8b:2d:65:ae:
20:a0:09:e2:47:cd:4b:5d:21:ed:12:f1:24:db:c8:2e:d9:55:
72:c2:f7:3b:d4:99:a5:be:91:17:24:55:c2:5a:07:40:33:d5:
ca:93:19:5b:27:b0:f9:cd:86:dd:90:5a:22:2c:61:c0:1b:3e:
d6:40:04:66:81:0d:2f:79:f8:bf:fb:9c:d6:5f:38:59:c3:c9:
a3:31:a5:d4:7c:33:72:7b:52:c5:f0:54:eb:cb:3c:58:5e:55:
5f:5c:ca:e7:99:86:4c:36:cf:f4:fa:77:08:74:27:92:e6:b2:
47:71:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:12:00 2026 by rpki-client