Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/1-nlxsJRBWD8q6HeUx4ToKSOiAE0.roa
File: 1-nlxsJRBWD8q6HeUx4ToKSOiAE0.roa (raw, json)
Hash identifier: IsmDbtGisDKm21kNjBMYIK7IWOYqqUQdtbbddSGtBpk=
Subject key identifier: FA:79:71:B0:94:41:58:3F:2A:E8:77:94:C7:84:E8:29:23:A2:00:4D
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01A19BC72CC16CC716CE92B06EBF0DF12668
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/1-nlxsJRBWD8q6HeUx4ToKSOiAE0.roa
Signing time: Mon 02 Nov 2026 10:21:23 +0000
ROA not before: Mon 02 Nov 2026 10:21:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 178.17.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:c7:2c:c1:6c:c7:16:ce:92:b0:6e:bf:0d:f1:26:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Nov 2 10:21:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa7971b09441583f2ae87794c784e82923a2004d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:44:f1:e9:28:9f:e6:b2:a0:55:ad:62:89:
26:13:5a:0f:98:c2:ef:1e:74:36:5d:56:d4:8d:8a:
81:c1:87:ed:25:7c:7c:5d:c7:e7:b2:34:53:48:23:
60:e1:45:57:05:d4:91:4e:18:b4:f3:6a:7f:81:82:
91:07:cc:5d:35:06:fa:60:30:f1:42:fa:f6:e6:18:
ab:6a:17:df:c6:2b:b1:d5:02:20:2f:d4:a8:08:ab:
d2:69:bc:b3:4e:05:6c:12:a3:1c:b6:c2:37:fe:cb:
3e:62:51:40:7c:3c:86:b8:bc:45:05:fd:03:99:4a:
72:3b:bf:f4:b3:49:f3:68:b9:00:18:dd:c4:5d:2a:
9a:21:a1:ac:ff:b8:6b:fc:7a:f5:86:90:2e:2a:34:
d2:2d:b8:6f:f6:66:e3:44:3f:f9:4f:7f:2a:0f:c8:
32:44:d1:01:59:df:cf:36:d2:17:50:c7:24:4d:ae:
b3:d4:59:ea:4f:04:c1:6a:02:4f:3f:43:2f:d6:9c:
b0:f8:c9:11:fa:af:d9:2d:04:de:53:02:62:6f:6b:
ef:0d:96:b6:7e:73:b2:66:a1:d6:a3:eb:5e:d1:5f:
73:bb:a9:22:28:1e:76:27:a4:5f:b2:74:7a:25:bf:
de:22:a3:be:7b:bc:f8:b0:1a:3b:2c:f7:60:31:89:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:79:71:B0:94:41:58:3F:2A:E8:77:94:C7:84:E8:29:23:A2:00:4D
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/1-nlxsJRBWD8q6HeUx4ToKSOiAE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.59.0/24
Signature Algorithm: sha256WithRSAEncryption
63:84:0b:af:5b:1d:46:51:15:cb:44:ae:a0:f8:ef:ed:7c:ac:
70:8f:c1:61:52:1c:fa:9e:70:cb:a1:ec:ee:ea:55:80:d5:92:
4c:7a:a8:e0:a1:d9:91:36:c7:8a:8d:35:17:3b:97:6e:ac:5d:
4b:50:1d:c0:7a:4a:db:f8:75:43:8b:ee:31:ec:7a:2a:ab:16:
09:aa:5e:c5:27:75:b5:1a:43:4b:7c:28:15:4f:a5:10:19:7e:
9b:6c:53:59:fd:04:2e:df:03:40:8e:ca:cb:f7:3e:b5:b7:13:
2a:9d:cf:a7:58:31:d4:9a:40:4d:26:62:2d:63:56:91:ac:39:
0a:c1:98:e3:96:f2:68:51:92:60:08:b2:91:73:da:28:ee:af:
b6:26:65:d0:58:68:75:d3:03:57:0c:7c:fc:07:32:ba:87:94:
52:0e:ec:6a:36:89:2d:07:42:4d:9f:7b:46:d7:7f:a6:1e:9a:
d4:00:48:87:ce:0e:94:56:c3:96:89:16:90:83:8b:fc:c5:a7:
d4:53:ca:dc:63:4a:11:31:41:82:dc:42:ef:d3:76:90:b5:15:
33:35:b8:63:fa:c5:67:0a:cd:6c:1d:df:45:67:62:e2:5c:5e:
dd:06:a9:fc:f6:90:23:96:5c:8c:ab:d5:05:89:c6:d2:bf:f8:
50:8c:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:30:09 2026 by rpki-client