Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/iuSpcrmsV4f1Ysb1cVg-3onOaZA.roa
File: iuSpcrmsV4f1Ysb1cVg-3onOaZA.roa (raw, json)
Hash identifier: c9q3XFMjCEy0sE0Ce3zydIbkqouf4LIzsM2RvAlYwio=
Subject key identifier: 8A:E4:A9:72:B9:AC:57:87:F5:62:C6:F5:71:58:3E:DE:89:CE:69:90
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019E7FF5AB42955998C54742605260A5C101
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/iuSpcrmsV4f1Ysb1cVg-3onOaZA.roa
Signing time: Sun 31 May 2026 21:34:26 +0000
ROA not before: Sun 31 May 2026 21:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206734
IP address blocks: 157.173.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7f:f5:ab:42:95:59:98:c5:47:42:60:52:60:a5:c1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: May 31 21:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ae4a972b9ac5787f562c6f571583ede89ce6990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:93:30:4d:fd:87:04:6d:2d:2b:2f:a6:aa:
60:72:6c:13:c3:6a:23:fe:03:05:29:60:84:ff:f5:
a7:18:f9:6a:34:b1:62:62:47:61:a7:d9:aa:11:11:
2a:cd:7c:f8:82:61:d3:80:fd:91:02:2a:7e:95:ae:
52:43:45:b5:25:e7:26:4b:62:5d:1e:51:c8:98:72:
82:57:f0:8b:aa:86:c7:d6:cd:af:34:16:c0:b9:59:
62:9d:3b:2d:1f:a9:8a:89:5e:04:a9:ff:f7:d8:6a:
f5:7d:ee:cf:c7:18:2c:f4:5b:d1:64:dd:a4:bb:92:
37:d1:84:08:15:e8:f1:26:44:71:55:44:82:95:62:
80:57:4c:76:db:a8:c5:a7:a0:61:d1:b9:0b:6a:c2:
fa:6a:ee:db:e0:ab:90:25:0e:10:ce:c8:fa:b1:e7:
54:15:d1:c6:fd:a7:4c:ca:23:24:b6:76:5f:37:ab:
e6:f6:8c:12:96:d7:04:cf:06:7e:19:c1:36:ae:59:
2c:9a:0a:d8:c2:65:33:6e:56:59:f1:e7:63:e2:18:
26:a6:cc:76:51:a3:ec:db:18:08:bc:86:62:80:35:
16:21:a9:11:df:8c:5f:46:6a:49:6d:90:84:36:4e:
7d:47:26:02:1d:9c:7e:5a:f9:fd:0c:10:f4:5c:c2:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:A9:72:B9:AC:57:87:F5:62:C6:F5:71:58:3E:DE:89:CE:69:90
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/iuSpcrmsV4f1Ysb1cVg-3onOaZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.31.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f3:8d:a2:1e:19:00:06:eb:e9:fd:95:eb:0a:a1:ae:2e:e1:
2f:60:d1:b6:50:7a:9d:12:b1:48:c5:1e:d7:7c:46:bd:31:9b:
2d:71:e9:07:6e:56:ac:ec:44:a9:f2:9f:05:e1:93:cc:91:ac:
5d:f9:5e:d8:d0:d2:67:7e:91:4b:b1:f6:cc:c2:e0:40:f7:33:
f7:fa:cb:0b:ee:cf:55:15:7f:2b:a0:0c:01:18:b0:e3:c0:00:
bf:d9:86:b6:40:97:96:70:af:b3:4b:24:88:60:63:72:1e:5f:
ab:63:ba:8a:32:12:2a:7c:40:c9:03:e1:87:32:0e:a0:9d:25:
29:c9:74:e2:27:3e:b8:e8:c5:01:83:1a:bf:6c:ef:33:a9:6e:
dd:d3:8a:e5:a0:a2:cb:35:df:61:05:ec:a8:fb:63:37:cf:12:
1a:da:dc:ba:37:1b:d9:72:89:5f:63:53:89:5d:5c:56:74:ce:
d2:0e:16:53:16:2d:a3:3b:72:99:6a:c3:84:7e:f4:44:0d:51:
5d:2f:81:fd:d3:6d:63:71:dc:8a:70:67:af:82:8f:ed:b6:fc:
85:19:69:7e:a4:38:0b:cb:b1:16:c8:3d:36:ad:ac:77:88:76:
22:37:70:ad:2d:5c:d1:cb:95:57:0c:7c:36:e5:e7:23:d7:5f:
9f:41:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:40:59 2026 by rpki-client