Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/s4MXyoEwG-08l7mCex8n1oZlKNg.roa
File: s4MXyoEwG-08l7mCex8n1oZlKNg.roa (raw, json)
Hash identifier: TjcQrgRhczeAsupZUJPvwDW+irjRAPP5FOM3bVoCysg=
Subject key identifier: B3:83:17:CA:81:30:1B:ED:3C:97:B9:82:7B:1F:27:D6:86:65:28:D8
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 019B775931E1B16DE494F685392B25C463F9
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/s4MXyoEwG-08l7mCex8n1oZlKNg.roa
Signing time: Thu 01 Jan 2026 02:18:12 +0000
ROA not before: Thu 01 Jan 2026 02:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204057
IP address blocks: 116.204.153.0/24 maxlen: 24
178.23.189.0/24 maxlen: 24
185.255.96.0/23 maxlen: 23
217.28.140.0/24 maxlen: 24
2a0d:6240::/32 maxlen: 32
2a0d:6241::/32 maxlen: 32
2a0d:6242::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:31:e1:b1:6d:e4:94:f6:85:39:2b:25:c4:63:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Jan 1 02:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b38317ca81301bed3c97b9827b1f27d6866528d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:4c:49:42:6d:c2:2a:a0:5b:86:be:13:bb:
59:b6:c3:27:72:34:f6:57:b1:d2:44:ca:0d:bc:ae:
5d:0c:ba:c0:81:db:8e:cb:7a:ca:23:90:9e:bf:c3:
78:f3:f6:2a:6e:9d:4e:1f:18:78:c7:3c:8b:83:42:
41:ed:b1:3b:e9:ff:0b:01:59:14:d6:bf:04:d7:e8:
e7:00:0a:72:2e:67:05:15:d4:65:09:22:a5:5e:ea:
05:2f:cb:bb:3d:45:b5:88:80:24:6e:18:85:50:a9:
85:f2:63:b3:24:b6:72:f4:1b:cc:9b:5f:0e:b4:bf:
06:5c:d8:24:ac:64:3f:58:4b:12:2a:6c:e9:21:d9:
05:fe:20:67:e4:8a:ef:db:8f:4f:04:9c:d1:3e:dc:
69:80:6e:f2:a9:89:9a:b7:7f:fe:4f:5e:b6:f2:82:
c1:cf:a8:9b:3d:a3:a9:fb:61:5b:7b:56:7c:59:78:
52:19:ac:b5:f6:3a:ec:1d:8d:bb:88:a0:57:5a:29:
24:b0:d0:82:ce:0c:73:74:50:d2:82:1b:67:24:57:
8e:11:0e:6b:84:9f:c6:7a:15:ed:37:e7:41:46:0f:
fe:29:ab:62:b9:a6:a1:f8:8d:65:bd:ec:31:b7:b0:
27:cd:c8:5c:26:4f:61:e9:61:f6:73:ca:f2:ff:1d:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:83:17:CA:81:30:1B:ED:3C:97:B9:82:7B:1F:27:D6:86:65:28:D8
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/s4MXyoEwG-08l7mCex8n1oZlKNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.204.153.0/24
178.23.189.0/24
185.255.96.0/23
217.28.140.0/24
IPv6:
2a0d:6240::-2a0d:6242:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7b:52:91:ae:2a:19:11:c2:c0:d7:56:37:d3:83:51:f6:d5:54:
ba:f1:de:d6:a9:54:65:a8:33:25:6e:ac:ba:e2:d8:d2:ca:b1:
5f:dd:e8:89:e9:f4:5e:56:e4:01:e9:74:13:a5:91:db:e7:0e:
bd:d1:35:4b:9c:21:4f:bb:d3:c5:bc:2c:30:ac:c1:da:cc:53:
9c:f0:ce:db:2d:89:78:df:76:79:73:2d:eb:6d:14:30:96:b6:
ae:9f:48:f7:54:5c:3d:29:1d:1f:b3:2e:ef:a4:27:7b:02:47:
30:52:c0:07:d0:23:7e:aa:d1:fb:1a:b0:59:f1:8d:6d:b2:9a:
60:ca:c4:3a:e8:f5:f5:7f:d7:cb:b9:dc:27:2e:ff:d9:79:11:
a4:5f:65:35:ce:f2:4e:51:1b:2c:4e:c5:56:4d:5f:72:35:69:
25:43:35:f7:44:be:8f:6c:c9:57:94:f7:b4:0e:78:02:00:0d:
28:d9:ed:ed:14:63:8d:da:08:96:c6:a1:6f:f2:0c:38:de:49:
51:ac:02:fb:b9:a3:7a:7a:15:3c:05:8e:11:e0:94:1a:83:08:
90:be:b5:6a:48:44:f3:8c:a9:d4:76:89:2c:cc:d0:a2:d7:82:
07:30:ce:7c:a0:13:03:78:7b:35:d1:5c:0c:84:d5:4c:5c:f3:
2d:59:48:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:44:48 2026 by rpki-client