Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/Ug1lNBbHE4fz2xePiUgPbuh6ssw.roa
File: Ug1lNBbHE4fz2xePiUgPbuh6ssw.roa (raw, json)
Hash identifier: 960uVffx6LNQo9hft7/QQIBeVB+0tegCAre0P6iLSjE=
Subject key identifier: 52:0D:65:34:16:C7:13:87:F3:DB:17:8F:89:48:0F:6E:E8:7A:B2:CC
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 01A06B8A99995AEC4FDB67547390702406CD
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/Ug1lNBbHE4fz2xePiUgPbuh6ssw.roa
Signing time: Fri 04 Sep 2026 08:30:40 +0000
ROA not before: Fri 04 Sep 2026 08:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 157.228.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:8a:99:99:5a:ec:4f:db:67:54:73:90:70:24:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Sep 4 08:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=520d653416c71387f3db178f89480f6ee87ab2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:87:29:a6:0e:74:ad:7a:ab:22:03:7b:e0:
ce:19:f7:bd:6c:0d:e3:b9:53:72:03:4c:ab:e9:7c:
e1:94:af:dc:94:fc:ae:56:dd:c6:73:09:22:3f:b2:
a2:15:3c:37:60:be:58:4e:af:18:53:fd:30:f0:c7:
06:ed:fc:62:49:7b:cb:bc:94:86:3c:dc:79:fb:fb:
53:82:c3:7f:7f:05:c8:82:63:de:0e:01:a7:ae:c4:
a7:d0:41:0c:d3:e3:30:b5:fa:2d:ea:88:83:13:c4:
89:d9:af:18:9f:0d:29:a5:98:ec:71:d6:a5:76:6d:
62:26:a7:88:79:9c:43:20:fe:62:09:fa:cb:f1:25:
9f:e4:8b:fe:25:6f:19:1f:6c:fc:82:99:67:c9:83:
15:48:8c:c1:60:8d:6c:39:d1:ea:01:68:60:22:fb:
53:4a:7e:b6:46:39:eb:40:67:61:2e:42:9a:ea:67:
45:6b:1b:b1:e0:a1:5d:cc:5b:95:40:c1:84:d4:fa:
44:4c:fa:07:b2:55:c9:0d:1c:3e:8d:e5:be:92:db:
62:51:82:23:f3:c6:8c:01:19:8f:6d:a0:01:e1:5d:
e2:e7:a9:8a:99:8a:ab:0a:03:57:92:7a:63:f7:82:
87:bc:24:2e:ee:8e:c8:6d:eb:24:a3:23:89:8a:13:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0D:65:34:16:C7:13:87:F3:DB:17:8F:89:48:0F:6E:E8:7A:B2:CC
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/Ug1lNBbHE4fz2xePiUgPbuh6ssw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.228.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:73:03:5e:b0:a9:6b:ca:e3:ca:95:86:e8:f6:de:b0:be:07:
32:e5:65:2d:76:11:b3:f7:63:90:cb:91:c7:7e:57:a0:59:6f:
07:3d:30:b6:b1:b8:6b:e5:8a:b2:d3:36:99:b3:c5:3c:43:01:
3c:29:02:8b:9b:68:04:a8:72:45:22:87:3a:51:7c:e4:69:bf:
43:dd:9f:a8:f1:49:2d:5d:d8:03:81:18:86:2d:e3:0d:cc:f0:
5e:ab:55:12:92:f7:ca:cf:0a:7b:3e:f8:6b:f0:12:9a:10:4d:
a0:0a:f0:d4:84:f6:11:1a:b8:3e:53:6d:04:20:c0:c3:67:d5:
8d:77:b0:c0:38:34:1b:3a:9e:35:e6:77:11:4b:32:ff:75:84:
73:89:5b:95:3b:ec:6b:ba:48:fc:ea:06:ad:1f:e5:4d:28:46:
54:ce:06:58:17:82:9b:fb:c8:1c:6d:b0:14:57:18:1b:43:0e:
fd:78:9f:ba:51:0e:47:23:1f:a8:c5:68:a7:07:2d:36:3a:e4:
8a:1f:07:09:11:e4:27:6c:77:9c:07:e1:73:e0:d3:03:1c:d6:
df:72:f8:bc:ab:6a:01:12:18:9e:11:1f:da:9e:ec:5c:b3:e8:
03:1c:a0:76:d6:3c:b6:78:f2:cb:d4:80:9d:21:80:97:bd:e4:
09:58:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:10 2026 by rpki-client