Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/pg6bOeS_pULCbWrF8x8V4Rs2ZHw.roa
File: pg6bOeS_pULCbWrF8x8V4Rs2ZHw.roa (raw, json)
Hash identifier: +2tNKvGcCLANosV1u5zkvXemE5ip/Oj7vqWsHidx0W8=
Subject key identifier: A6:0E:9B:39:E4:BF:A5:42:C2:6D:6A:C5:F3:1F:15:E1:1B:36:64:7C
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019FA81B6252454F05A3012587B04D47F278
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/pg6bOeS_pULCbWrF8x8V4Rs2ZHw.roa
Signing time: Tue 28 Jul 2026 09:43:14 +0000
ROA not before: Tue 28 Jul 2026 09:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197384
IP address blocks: 157.173.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:1b:62:52:45:4f:05:a3:01:25:87:b0:4d:47:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Jul 28 09:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a60e9b39e4bfa542c26d6ac5f31f15e11b36647c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:69:6f:af:ed:53:41:fe:3b:03:bf:7d:ca:
14:b5:fa:b9:c0:4d:64:8a:65:0d:28:1c:b9:ce:08:
7f:c4:82:de:94:b3:69:cd:15:ff:c7:c3:27:bd:b0:
e6:91:d2:f9:cb:9e:1d:24:a3:b8:cd:f3:cb:57:85:
11:81:00:31:aa:a2:0b:f4:9f:3f:ab:96:cc:53:9a:
cd:eb:2f:58:ab:fc:eb:f0:25:bb:96:4b:7a:8b:f6:
e8:5f:17:a2:d6:5f:83:c5:c8:05:02:d8:7e:00:78:
23:dc:40:37:28:a9:33:87:db:7f:8c:d1:5d:9e:cf:
e7:05:ff:2e:09:a9:a6:26:c5:5a:a2:0b:82:9a:43:
ed:4e:5a:55:c6:6b:cb:21:47:63:02:53:10:6a:c5:
af:52:9b:1a:cc:db:34:ab:09:35:67:5b:d1:36:c3:
e5:6b:69:51:5a:7e:b2:f6:3d:2f:17:c8:c4:bf:b0:
b1:93:19:60:29:89:3c:72:c3:6f:eb:76:ff:f7:af:
c6:34:ae:46:92:72:17:ea:de:03:dd:28:c8:a7:ff:
cc:de:b6:8a:77:f8:f2:94:91:9f:d3:c3:6b:9a:33:
99:19:d6:4b:6c:67:69:41:a7:26:a4:ba:b2:ed:18:
49:80:ca:0a:f9:5a:7d:86:f0:59:82:92:73:f3:2e:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0E:9B:39:E4:BF:A5:42:C2:6D:6A:C5:F3:1F:15:E1:1B:36:64:7C
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/pg6bOeS_pULCbWrF8x8V4Rs2ZHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.17.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ad:5a:49:87:29:18:6d:33:47:4b:d1:ef:77:01:7a:c7:f5:
c0:96:39:67:d0:24:8c:1c:36:98:41:bd:2b:cf:6d:7f:20:44:
df:8f:c9:e0:e3:5b:6f:78:05:a2:1c:43:29:13:0b:84:a3:c3:
12:5c:f5:ee:f1:e1:16:25:fa:bb:11:59:97:50:f9:22:1b:db:
b7:10:af:60:7a:b1:b3:02:8a:ac:ab:ad:ae:ab:65:d5:df:9d:
fd:f3:67:ea:e8:e6:d4:00:b1:48:b4:4d:9d:8b:f2:c3:52:1a:
41:84:2b:ad:ad:7e:c3:1b:e7:e7:48:99:6d:c4:30:85:0a:36:
f3:46:50:61:ce:90:70:9c:9c:e0:25:f7:e7:e8:15:5a:f0:0e:
fd:80:e1:f9:05:a9:c3:5c:67:7e:55:4c:ce:5c:ee:7e:c4:59:
46:2a:45:03:42:18:0b:4f:fd:fe:63:1e:46:b8:fb:9c:1d:21:
8d:f3:f2:bd:17:6e:01:9b:87:76:e8:f3:e7:c9:4e:31:58:d2:
c4:3d:7a:c4:aa:2a:11:27:fe:ff:54:41:01:1a:e7:4f:3f:3b:
e7:9f:63:46:e9:1f:b6:37:60:5f:8d:f3:d9:e8:79:fe:68:93:
60:58:b4:34:d2:39:1e:8a:3f:a5:e8:10:ae:be:96:44:cf:53:
be:0e:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:20 2026 by rpki-client