Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/1-jE_yC4NiEpx0K3S7PXk8AXKW_Y.roa
File: 1-jE_yC4NiEpx0K3S7PXk8AXKW_Y.roa (raw, json)
Hash identifier: 8052VqgxoQXtGMoT/9mInb/P+q/GQzoHQcwJ95n8TXs=
Subject key identifier: FA:31:3F:C8:2E:0D:88:4A:71:D0:AD:D2:EC:F5:E4:F0:05:CA:5B:F6
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 01A07B3FB69AB42C46079295C4467C256B73
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/1-jE_yC4NiEpx0K3S7PXk8AXKW_Y.roa
Signing time: Mon 07 Sep 2026 09:42:47 +0000
ROA not before: Mon 07 Sep 2026 09:42:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25717
IP address blocks: 171.25.128.0/22 maxlen: 22
171.25.132.0/24 maxlen: 24
171.25.133.0/24 maxlen: 24
171.25.134.0/24 maxlen: 24
171.25.135.0/24 maxlen: 24
171.25.138.0/24 maxlen: 24
171.25.139.0/24 maxlen: 24
171.25.140.0/24 maxlen: 24
171.25.141.0/24 maxlen: 24
171.25.142.0/24 maxlen: 24
171.25.143.0/24 maxlen: 24
193.221.16.0/24 maxlen: 24
193.221.17.0/24 maxlen: 24
193.221.18.0/24 maxlen: 24
193.221.19.0/24 maxlen: 24
193.221.20.0/24 maxlen: 24
193.221.21.0/24 maxlen: 24
193.221.22.0/24 maxlen: 24
193.221.23.0/24 maxlen: 24
193.221.28.0/24 maxlen: 24
193.221.32.0/24 maxlen: 24
193.221.33.0/24 maxlen: 24
193.221.34.0/24 maxlen: 24
193.221.35.0/24 maxlen: 24
193.221.36.0/24 maxlen: 24
193.221.37.0/24 maxlen: 24
193.221.38.0/24 maxlen: 24
193.221.47.0/24 maxlen: 24
193.221.52.0/24 maxlen: 24
193.221.53.0/24 maxlen: 24
193.221.54.0/23 maxlen: 23
193.221.56.0/24 maxlen: 24
193.221.57.0/24 maxlen: 24
193.221.60.0/24 maxlen: 24
193.221.66.0/24 maxlen: 24
193.221.68.0/24 maxlen: 24
193.221.69.0/24 maxlen: 24
193.221.70.0/23 maxlen: 23
193.221.72.0/24 maxlen: 24
193.221.74.0/24 maxlen: 24
193.221.75.0/24 maxlen: 24
193.221.76.0/24 maxlen: 24
193.221.77.0/24 maxlen: 24
193.221.78.0/24 maxlen: 24
193.221.79.0/24 maxlen: 24
193.221.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:3f:b6:9a:b4:2c:46:07:92:95:c4:46:7c:25:6b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Sep 7 09:42:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa313fc82e0d884a71d0add2ecf5e4f005ca5bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:c6:39:23:33:be:95:08:90:8e:59:bb:48:
54:74:7c:cf:e5:a9:4e:fe:c2:97:7f:ba:5f:d3:90:
ce:28:3d:1b:9a:f5:93:6f:9b:9a:8d:dd:0a:99:4f:
ae:71:cc:59:75:04:f6:fc:31:b8:1a:6b:fd:a8:da:
00:6d:07:80:6c:3c:76:aa:71:92:b8:56:fe:ba:c8:
91:7b:19:e3:6d:cb:54:6e:8f:11:1b:84:f2:4a:71:
9d:e7:d9:51:9f:bc:a0:00:08:ed:20:19:d4:e9:85:
47:fe:41:96:97:cb:b6:1c:5e:04:8f:f2:09:85:d3:
61:d8:e2:ec:f0:2b:d3:cb:91:21:e7:b7:c4:07:05:
a6:19:e6:19:16:0e:3f:f0:c3:74:41:04:4b:18:94:
1f:a9:4f:a5:b7:bf:15:7e:16:19:0f:1d:94:69:21:
6b:40:fb:a6:2d:f7:52:3d:b3:97:4d:f5:44:48:5d:
eb:43:8d:83:74:c2:11:3a:ce:c2:9d:6c:9e:1b:04:
ed:43:7c:9c:a4:f2:fe:20:7e:c0:f1:35:5e:5d:ee:
aa:d9:25:2e:98:34:ef:ed:19:0d:c8:ee:8c:6b:72:
44:23:0b:ca:0b:ce:00:14:ae:1c:ea:e0:bc:81:dc:
c9:e5:ec:8e:04:ad:c1:f9:0a:d6:ef:5b:b5:80:6f:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:31:3F:C8:2E:0D:88:4A:71:D0:AD:D2:EC:F5:E4:F0:05:CA:5B:F6
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/1-jE_yC4NiEpx0K3S7PXk8AXKW_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.128.0/21
171.25.138.0-171.25.143.255
193.221.16.0/21
193.221.28.0/24
193.221.32.0-193.221.38.255
193.221.47.0/24
193.221.52.0-193.221.57.255
193.221.60.0/24
193.221.66.0/24
193.221.68.0-193.221.72.255
193.221.74.0-193.221.80.255
Signature Algorithm: sha256WithRSAEncryption
2f:c5:77:21:4f:bf:b4:ef:6e:6e:31:9a:50:dc:88:bd:8b:08:
ea:4c:e7:62:2f:ec:e2:a8:55:2e:64:24:60:74:ee:34:9e:80:
d3:10:9f:02:c4:3d:e1:08:87:ae:7b:99:0b:62:ab:d1:10:fa:
a7:f9:5a:90:64:d5:8d:fb:d0:21:4f:88:91:4a:c5:ef:73:e8:
66:d3:60:95:e8:50:c4:86:27:1e:f7:c2:58:bb:82:7f:c4:a1:
f0:c1:6d:94:fe:6c:57:59:bb:f0:d6:b0:4d:73:66:de:81:89:
d7:7d:e6:12:f2:33:e0:96:33:d5:66:4a:b5:f6:a5:9a:09:ab:
9b:48:e8:8b:8a:01:f7:22:31:a4:cc:15:2a:ee:c0:e3:02:34:
07:8b:6a:3b:bc:73:05:94:92:f8:b5:a6:d6:29:0d:3a:b0:6f:
5d:6a:e6:cd:aa:34:c7:af:95:74:71:3a:37:38:d4:cf:91:04:
a4:99:eb:2b:c7:25:62:4b:d2:04:9d:4c:17:bb:a4:46:72:18:
65:9c:ee:aa:c7:90:35:c6:45:b0:6f:b1:48:35:be:4a:b5:5e:
3b:3b:7b:9c:f1:88:41:c1:b9:1f:e0:d5:c7:b3:66:ec:ac:8e:
5c:59:8e:4a:62:5b:75:a1:77:f1:bb:e8:bd:9b:09:96:8b:22:
72:a3:d8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:13:41 2026 by rpki-client