Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/IFDEhJ7WdnMP_iOIFV_PEMyMTFY.roa
File: IFDEhJ7WdnMP_iOIFV_PEMyMTFY.roa (raw, json)
Hash identifier: 3abxPKBoQtYdBt0dEdvRfKPwIMD697ubAlSThgqLZRY=
Subject key identifier: 20:50:C4:84:9E:D6:76:73:0F:FE:23:88:15:5F:CF:10:CC:8C:4C:56
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01A0BE501FC3D27452577FD1C51759023624
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/IFDEhJ7WdnMP_iOIFV_PEMyMTFY.roa
Signing time: Sun 20 Sep 2026 10:15:17 +0000
ROA not before: Sun 20 Sep 2026 10:15:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 178.17.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:50:1f:c3:d2:74:52:57:7f:d1:c5:17:59:02:36:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Sep 20 10:15:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2050c4849ed676730ffe2388155fcf10cc8c4c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:8a:a6:38:57:8e:fb:6b:16:70:5d:d0:3c:
b7:c9:59:d2:97:4c:15:ec:b3:50:14:d0:a9:16:92:
1b:c3:9d:5a:a0:e2:7b:04:fe:2a:ed:3d:64:9b:2e:
69:78:98:9a:94:4c:06:0d:4b:0d:13:85:94:4c:03:
49:90:75:14:d6:d9:8e:59:27:04:b1:4b:4c:3e:bc:
10:b8:4d:7d:19:a3:ab:52:95:17:7b:6e:b2:17:98:
06:9c:7e:3b:6f:ff:fa:5f:cf:76:a7:05:17:23:af:
6b:44:cf:d5:5a:23:c7:56:ad:ad:0a:a0:67:c9:9e:
91:7d:1f:f2:e7:a1:8c:5a:da:63:8a:72:c6:35:6e:
f7:bf:87:a0:b8:fa:8d:c6:c1:cd:63:fd:c4:06:84:
18:a2:34:51:2e:55:a8:01:32:82:83:13:46:2c:43:
d1:88:67:54:fd:cd:66:8e:29:1c:1d:67:47:56:e1:
d6:db:ac:53:48:fe:02:6b:ba:94:b9:cf:ec:45:c5:
7a:20:42:65:71:49:b8:6e:7e:85:04:8f:f5:22:47:
c8:b7:e1:1b:28:66:f4:46:7d:0f:7a:0c:9d:3b:3e:
95:a6:f0:0e:c6:33:4c:e8:ec:ea:69:0e:80:bd:d9:
12:49:cd:91:4e:c8:c7:09:56:73:43:be:01:a0:7b:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:50:C4:84:9E:D6:76:73:0F:FE:23:88:15:5F:CF:10:CC:8C:4C:56
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/IFDEhJ7WdnMP_iOIFV_PEMyMTFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.59.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f3:cc:1d:4b:d9:ca:23:2b:04:bb:95:f3:14:18:3e:c7:34:
a2:29:87:a1:7e:f2:66:ac:7f:0b:b5:bc:4c:ef:0c:c8:c3:41:
31:ef:95:62:dc:89:ef:a7:a5:af:ee:c1:9d:06:44:8e:ae:b5:
0f:65:4d:86:55:b5:92:fa:7f:d5:a9:49:86:cf:b2:75:be:2e:
36:c3:3e:18:75:ff:66:48:f9:4a:01:c9:8e:5b:a4:7e:6b:4a:
09:ea:7a:91:a5:38:fc:e2:3b:62:8c:0f:e0:54:25:65:c3:6c:
d0:5a:f5:8c:94:f1:bc:13:b7:25:6a:89:92:c8:14:30:c7:54:
ee:33:27:a2:19:8f:a9:9e:51:aa:a4:9a:ce:c0:4c:8a:e5:75:
99:ae:47:de:aa:80:07:55:5a:9c:55:d7:c9:3a:c0:6b:a3:f0:
fd:f8:f3:fb:ce:65:4a:40:c9:41:8f:f0:6b:5b:d1:3f:27:39:
d5:81:d7:25:69:af:f9:c9:ea:c7:13:c8:c7:40:09:0a:14:40:
d3:17:d3:6c:77:c5:33:cb:32:5b:da:68:da:77:c3:88:d2:dc:
db:a1:3d:b8:47:fa:6c:65:ba:e6:2c:24:9a:9a:90:f1:4d:ef:
34:64:77:2d:c5:e3:55:cf:dc:f5:4b:af:ed:5f:74:ff:20:72:
2b:51:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:11 2026 by rpki-client