Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/1-gK4FaKQ6vCAd3HD5KMC9zT6LvU.roa
File: 1-gK4FaKQ6vCAd3HD5KMC9zT6LvU.roa (raw, json)
Hash identifier: D6YtWc2enJG4JcbTf9d9A2vAeRzN30+OR3FCjqsua4Q=
Subject key identifier: FA:02:B8:15:A2:90:EA:F0:80:77:71:C3:E4:A3:02:F7:34:FA:2E:F5
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 01A0958B445D2ED71F98CFE1B73E92377596
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/1-gK4FaKQ6vCAd3HD5KMC9zT6LvU.roa
Signing time: Sat 12 Sep 2026 12:15:27 +0000
ROA not before: Sat 12 Sep 2026 12:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204203
IP address blocks: 158.58.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:95:8b:44:5d:2e:d7:1f:98:cf:e1:b7:3e:92:37:75:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Sep 12 12:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa02b815a290eaf0807771c3e4a302f734fa2ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:cc:ad:40:21:b0:84:2d:02:44:ea:fa:31:
2d:c4:0b:95:0e:ea:a4:7c:66:f3:fc:58:83:af:bd:
7b:89:54:b8:91:10:e0:64:ca:6d:b2:a5:32:d4:94:
65:0d:9f:19:c5:ee:68:e4:f4:4d:7d:2d:e1:a2:20:
af:08:47:cc:53:9f:35:49:59:4d:63:f3:da:cd:64:
2f:61:87:93:d3:63:b0:c0:76:5a:9f:37:ea:ed:a2:
b1:2c:5f:38:ea:0b:7a:39:fd:cd:b7:72:d1:c2:a9:
67:bf:aa:78:48:5e:ac:a5:1c:bb:0c:a5:08:2e:e8:
76:80:04:01:ef:0d:59:06:bf:f8:ee:0f:35:4d:24:
d9:82:13:59:af:76:eb:0a:7e:8d:a1:56:cc:fc:75:
1b:62:f1:91:07:e4:f9:4d:1f:33:f7:97:d7:72:06:
65:c2:08:fc:4e:f7:9b:4a:bc:13:59:7e:5e:ff:f0:
47:dd:02:5e:e7:33:97:48:97:50:eb:4d:45:02:e5:
30:06:39:96:5e:c0:1b:1c:a0:5c:7c:be:f4:be:cf:
16:95:fd:d9:a4:ef:47:6d:99:d5:bf:09:a7:33:aa:
6e:f0:43:8e:1d:77:26:e7:f9:e5:07:0a:f7:9f:91:
7f:51:d5:fa:6e:7b:cf:4c:1a:00:12:4b:c7:92:8d:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:02:B8:15:A2:90:EA:F0:80:77:71:C3:E4:A3:02:F7:34:FA:2E:F5
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/1-gK4FaKQ6vCAd3HD5KMC9zT6LvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.58.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5f:cd:f7:eb:cd:ca:29:7d:fe:06:a3:ac:c1:60:bd:a6:25:
4f:fe:6b:da:4d:f6:73:5d:0d:94:e5:aa:a9:b0:ae:17:0f:de:
49:5b:2e:bc:d3:8b:25:e3:bd:03:29:55:ba:4c:ce:d1:8f:ea:
ea:53:e2:4e:89:8f:55:ae:4c:fe:d0:04:c4:27:ed:da:87:3f:
b5:61:31:5a:a7:c4:e8:15:30:42:d4:bd:20:c5:65:8f:7b:38:
57:c0:1b:c9:6b:11:ac:b5:46:17:70:90:e8:3e:2e:4e:32:6f:
52:f5:4f:b3:16:85:c2:0f:fb:b8:38:be:c7:28:35:93:59:01:
d8:8b:99:2b:8f:91:eb:21:37:43:ad:88:8e:6d:aa:58:2c:a4:
9b:b6:83:3b:46:b2:61:c5:6e:f6:d5:78:2f:83:bd:6a:f2:1a:
92:2a:e8:b9:70:26:d2:63:56:26:57:ca:4a:35:3e:ce:93:2e:
7f:b6:1f:04:b6:9e:ac:8e:38:1d:0b:04:ba:7f:5b:5c:7d:73:
76:c8:0f:05:b5:ed:3d:a7:79:08:bd:b3:e0:b8:55:ed:e8:34:
90:8c:86:bc:d1:71:b4:5e:de:5d:71:ab:59:c0:c8:e7:f1:47:
61:5f:e9:8a:bf:6a:22:08:20:2d:86:53:cb:79:bc:7d:f6:c1:
a3:75:d1:5f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaCVi0RdLtcfmM/htz6SN3WWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj
YTQzYzUwHhcNMjYwOTEyMTIxNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTAyYjgxNWEyOTBlYWYwODA3NzcxYzNlNGEzMDJmNzM0ZmEyZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvibMrUAhsIQtAkTq+jEtxAuVDuqk
fGbz/FiDr717iVS4kRDgZMptsqUy1JRlDZ8Zxe5o5PRNfS3hoiCvCEfMU581SVlN
Y/PazWQvYYeT02OwwHZanzfq7aKxLF846gt6Of3Nt3LRwqlnv6p4SF6spRy7DKUI
Luh2gAQB7w1ZBr/47g81TSTZghNZr3brCn6NoVbM/HUbYvGRB+T5TR8z95fXcgZl
wgj8TvebSrwTWX5e//BH3QJe5zOXSJdQ601FAuUwBjmWXsAbHKBcfL70vs8Wlf3Z
pO9HbZnVvwmnM6pu8EOOHXcm5/nlBwr3n5F/UdX6bnvPTBoAEkvHko3VWQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPoCuBWikOrwgHdxw+SjAvc0+i71MB8GA1UdIwQY
MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt
YWNmYzNkMmMyNTIyLzEvMS1nSzRGYUtRNnZDQWQzSEQ1S01DOXpUNkx2VS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmMvNzNiZWViLTZhMDUtNGNjYS04NmJlLWFjZmMzZDJjMjUy
Mi8xL3RzRm4zNm1JS3lxby1FV1Y5WXFYd3dYS1E4VS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ46vTAN
BgkqhkiG9w0BAQsFAAOCAQEATF/N9+vNyil9/gajrMFgvaYlT/5r2k32c10NlOWq
qbCuFw/eSVsuvNOLJeO9AylVukzO0Y/q6lPiTomPVa5M/tAExCft2oc/tWExWqfE
6BUwQtS9IMVlj3s4V8AbyWsRrLVGF3CQ6D4uTjJvUvVPsxaFwg/7uDi+xyg1k1kB
2IuZK4+R6yE3Q62Ijm2qWCykm7aDO0ayYcVu9tV4L4O9avIakirouXAm0mNWJlfK
SjU+zpMuf7YfBLaerI44HQsEun9bXH1zdsgPBbXtPad5CL2z4LhV7eg0kIyGvNFx
tF7eXXGrWcDI5/FHYV/pir9qIgggLYZTy3m8ffbBo3XRXw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:47 2026 by rpki-client