Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/FlR-3O4MLz6R-2xxyQaCITPyEwI.roa
File: FlR-3O4MLz6R-2xxyQaCITPyEwI.roa (raw, json)
Hash identifier: tqyKa1TocYXGDl2yAFckAYT6L8eCGu1DkqsbRG/hKaw=
Subject key identifier: 16:54:7E:DC:EE:0C:2F:3E:91:FB:6C:71:C9:06:82:21:33:F2:13:02
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019C4C5DAAD294647F0FAB03215CD09EB353
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/FlR-3O4MLz6R-2xxyQaCITPyEwI.roa
Signing time: Wed 11 Feb 2026 11:02:12 +0000
ROA not before: Wed 11 Feb 2026 11:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30848
IP address blocks: 158.173.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:5d:aa:d2:94:64:7f:0f:ab:03:21:5c:d0:9e:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Feb 11 11:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16547edcee0c2f3e91fb6c71c906822133f21302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:2f:89:cb:8f:52:4e:a3:99:f6:e2:8d:ec:
92:ad:8d:23:63:9a:f2:0f:a9:31:e7:2b:86:a4:88:
4d:ae:a8:c0:52:6e:ec:7d:ac:a6:a2:06:64:15:59:
44:f3:46:bc:6c:e5:29:18:a7:44:8f:87:91:f1:43:
9f:96:93:92:e1:db:1a:0c:5c:ee:e0:cf:17:94:b8:
5b:90:2c:c8:60:70:7a:53:1b:f5:32:bf:48:92:ca:
0c:d5:1b:13:5b:d4:4b:27:2a:82:fe:76:2d:a8:46:
c2:11:15:e8:94:21:93:48:cd:c7:2c:37:60:9a:cb:
f0:9f:e5:71:14:9a:27:fa:c9:4d:c1:5a:03:22:e0:
3d:8b:04:86:3e:fe:58:91:db:36:fe:c0:a2:5f:01:
b0:a0:ed:5e:21:ae:4b:15:8d:a9:95:08:00:28:af:
29:4b:e7:f8:d3:55:c4:9c:80:e1:ec:84:b4:c1:5f:
de:58:8e:b7:81:69:0a:46:25:49:df:ed:57:10:cc:
86:e1:f9:c9:a2:7c:9f:74:f4:78:b3:85:ec:ec:92:
0f:55:cf:7a:21:25:47:7a:12:35:24:d3:22:35:ab:
fa:74:3d:21:2a:98:fe:dd:13:3c:1d:a1:57:32:5d:
1d:6c:0b:49:39:bb:ef:0b:cb:38:75:81:09:0e:79:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:54:7E:DC:EE:0C:2F:3E:91:FB:6C:71:C9:06:82:21:33:F2:13:02
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/FlR-3O4MLz6R-2xxyQaCITPyEwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.58.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d3:90:4b:9f:b1:22:48:a5:95:f3:40:58:c5:16:8f:d6:72:
c9:a7:5b:0a:bc:4e:28:81:1b:0f:cd:cd:76:20:f9:5e:d8:c8:
d9:ae:c5:3b:14:24:0e:df:5b:2e:ca:bd:4a:87:af:c9:4e:2b:
86:f8:8c:0a:3e:1b:dc:0d:f4:c0:2f:37:bf:b3:13:ee:0b:72:
ce:af:38:57:63:13:31:d6:b1:69:30:ed:84:14:e9:01:21:ce:
5a:82:17:da:78:2f:7e:e0:14:54:e5:69:22:a4:79:6f:f2:f8:
9d:3e:6f:b2:40:da:df:bc:3b:2b:50:27:91:f1:ea:b1:db:55:
d2:64:dc:34:51:95:2e:92:9c:37:7a:f8:df:ae:93:14:3e:23:
a3:ad:4e:eb:05:f4:47:5c:2d:5c:99:e1:33:b6:88:4e:ea:5f:
49:7c:ec:53:b8:d7:d9:24:72:4c:9e:04:6b:4a:a7:54:b7:2d:
b0:73:a5:bb:42:87:7e:ac:97:dd:b9:f7:75:47:f5:7e:ea:b4:
9d:3c:8d:f7:14:61:8f:01:67:b5:11:82:e4:f6:b8:a7:4e:96:
d4:2a:17:57:18:8f:1f:bc:db:69:65:23:93:b0:99:41:e2:10:
ba:75:17:e8:9e:c9:ad:bb:dc:88:07:c6:0a:de:9d:40:42:9e:
fd:46:05:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxMXarSlGR/D6sDIVzQnrNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjYwMjExMTEwMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjU0N2VkY2VlMGMyZjNlOTFmYjZjNzFjOTA2ODIyMTMzZjIxMzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3gvicuPUk6jmfbijeySrY0jY5ry
D6kx5yuGpIhNrqjAUm7sfaymogZkFVlE80a8bOUpGKdEj4eR8UOflpOS4dsaDFzu
4M8XlLhbkCzIYHB6Uxv1Mr9IksoM1RsTW9RLJyqC/nYtqEbCERXolCGTSM3HLDdg
msvwn+VxFJon+slNwVoDIuA9iwSGPv5Ykds2/sCiXwGwoO1eIa5LFY2plQgAKK8p
S+f401XEnIDh7IS0wV/eWI63gWkKRiVJ3+1XEMyG4fnJonyfdPR4s4Xs7JIPVc96
ISVHehI1JNMiNav6dD0hKpj+3RM8HaFXMl0dbAtJObvvC8s4dYEJDnm28wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZUftzuDC8+kftscckGgiEz8hMCMB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEvRmxSLTNPNE1MejZSLTJ4eHlRYUNJVFB5RXdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx
LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq06MA0G
CSqGSIb3DQEBCwUAA4IBAQCC05BLn7EiSKWV80BYxRaP1nLJp1sKvE4ogRsPzc12
IPle2MjZrsU7FCQO31suyr1Kh6/JTiuG+IwKPhvcDfTALze/sxPuC3LOrzhXYxMx
1rFpMO2EFOkBIc5aghfaeC9+4BRU5WkipHlv8vidPm+yQNrfvDsrUCeR8eqx21XS
ZNw0UZUukpw3evjfrpMUPiOjrU7rBfRHXC1cmeEztohO6l9JfOxTuNfZJHJMngRr
SqdUty2wc6W7Qod+rJfdufd1R/V+6rSdPI33FGGPAWe1EYLk9rinTpbUKhdXGI8f
vNtpZSOTsJlB4hC6dRfonsmtu9yIB8YK3p1AQp79RgX6
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:47 2026 by rpki-client