Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/CRn13FuDaI6rAxqYgUiIz_JOwUk.roa
File: CRn13FuDaI6rAxqYgUiIz_JOwUk.roa (raw, json)
Hash identifier: Gf7HUxn7ULBogsXM0Li+Og9PUfDZVpVYEZOMLo2oGVU=
Subject key identifier: 09:19:F5:DC:5B:83:68:8E:AB:03:1A:98:81:48:88:CF:F2:4E:C1:49
Certificate issuer: /CN=476ebc279fc94e5bc40f25819e81339dc299a16f
Certificate serial: 01A018CCFCB73947F2F9F88DF245FA3E733D
Authority key identifier: 47:6E:BC:27:9F:C9:4E:5B:C4:0F:25:81:9E:81:33:9D:C2:99:A1:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R268J5_JTlvEDyWBnoEzncKZoW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/CRn13FuDaI6rAxqYgUiIz_JOwUk.roa
Signing time: Wed 19 Aug 2026 06:54:42 +0000
ROA not before: Wed 19 Aug 2026 06:54:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 158.42.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R268J5_JTlvEDyWBnoEzncKZoW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:cc:fc:b7:39:47:f2:f9:f8:8d:f2:45:fa:3e:73:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476ebc279fc94e5bc40f25819e81339dc299a16f
Validity
Not Before: Aug 19 06:54:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0919f5dc5b83688eab031a98814888cff24ec149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:8b:56:fb:4e:1d:b6:fa:5d:a7:9c:cc:99:
f0:b2:28:ff:71:42:bf:cd:f1:6e:4f:5e:bb:78:fc:
e1:11:34:b6:ad:7f:93:b0:47:0c:b9:3a:b0:22:90:
6f:58:8f:9a:b9:22:27:c9:a7:bd:c6:37:a9:08:80:
6c:73:3f:00:60:0b:17:71:d8:d7:8e:11:bf:00:0e:
b4:47:5a:94:e9:a6:5a:00:73:67:5a:fb:c5:76:80:
47:1c:61:69:3b:04:2a:7f:26:d7:63:4c:cc:10:da:
72:05:e8:5b:c1:60:0a:a1:3d:d6:57:c7:70:c3:65:
f8:9c:77:23:37:31:64:3e:e5:5a:cf:4e:2f:6e:c1:
28:7b:9e:6a:fa:d4:fe:6d:da:ed:42:82:7f:fc:a1:
ad:e2:54:d8:b5:27:f5:d6:08:f1:ad:73:ca:b3:a6:
7a:37:47:24:0f:b6:c5:2f:06:ba:94:d0:48:c9:9a:
9d:8c:8e:6a:37:c9:c3:20:51:95:2d:c8:63:9b:92:
c1:52:5c:a2:d1:8e:db:60:7f:d7:9f:3f:91:6a:43:
9e:76:84:d6:b8:e8:c0:06:57:8c:ca:9d:e9:19:ea:
5b:b4:d4:9b:de:8d:c0:0d:8a:ec:e0:e1:d0:bc:e3:
4f:d8:80:9e:2b:60:a9:9d:3a:9b:01:3a:53:5a:dc:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:19:F5:DC:5B:83:68:8E:AB:03:1A:98:81:48:88:CF:F2:4E:C1:49
X509v3 Authority Key Identifier:
keyid:47:6E:BC:27:9F:C9:4E:5B:C4:0F:25:81:9E:81:33:9D:C2:99:A1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R268J5_JTlvEDyWBnoEzncKZoW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/CRn13FuDaI6rAxqYgUiIz_JOwUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.42.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:8e:de:e1:3c:ff:cc:e1:92:dd:c5:b4:aa:b9:52:2a:69:59:
e8:1e:98:2f:8d:f7:9a:c3:61:38:16:66:99:ea:ee:91:62:e7:
f2:5b:b7:b2:5e:ba:6e:42:79:4e:ac:7f:7b:b8:12:9e:51:f8:
86:2a:3c:8f:38:88:7f:21:e8:40:74:ba:c2:59:e9:27:b9:3b:
3c:fc:2a:38:0e:06:57:4e:16:ce:0d:8c:83:34:c4:02:29:db:
8e:3c:33:fc:a0:4e:5b:76:66:1e:e3:1c:18:41:6d:8c:3e:3d:
6e:af:5a:5e:6a:c8:80:c2:9f:3e:ef:e1:cb:31:68:b8:6a:10:
02:c9:57:e8:31:17:56:32:d2:f0:77:29:26:d0:ed:ab:53:67:
8d:3b:cf:88:ee:d7:51:28:08:b9:0f:77:ef:72:43:f9:5c:3f:
27:45:75:9c:22:6a:89:f8:01:bc:ab:16:fb:48:b7:bf:11:9f:
5e:f9:96:c1:8a:92:f0:5d:86:9f:e8:f1:a0:f3:69:ae:f3:6c:
43:5a:a8:37:96:fc:a4:dd:e8:45:91:00:e0:6d:2b:08:01:e0:
a4:e3:d9:53:fe:79:50:94:53:22:e2:aa:df:1e:eb:84:b7:e4:
0f:8e:3a:a4:ce:59:76:63:35:87:6d:3c:81:f1:b3:31:ff:d7:
6b:97:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:18 2026 by rpki-client