Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/g_PyCUpAble_Frkue1ECC9s53SA.roa
File: g_PyCUpAble_Frkue1ECC9s53SA.roa (raw, json)
Hash identifier: DmeGk3EPgfK+hVV1u4wSr2HUQKPZpzeq3dwwxn5trkQ=
Subject key identifier: 83:F3:F2:09:4A:40:6E:57:BF:16:B9:2E:7B:51:02:0B:DB:39:DD:20
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019D07799E20FE5A274AE035FA82CFEC9B2C
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/g_PyCUpAble_Frkue1ECC9s53SA.roa
Signing time: Thu 19 Mar 2026 19:01:43 +0000
ROA not before: Thu 19 Mar 2026 19:01:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.29.24.0/24 maxlen: 24
160.20.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:79:9e:20:fe:5a:27:4a:e0:35:fa:82:cf:ec:9b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 19 19:01:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83f3f2094a406e57bf16b92e7b51020bdb39dd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:f9:bc:ba:0c:cc:2c:79:39:ab:3d:66:5d:
4e:6e:d7:e9:0b:89:00:43:85:94:ef:80:b2:09:2d:
70:64:0c:a4:aa:56:1b:af:8e:00:1f:e6:6a:60:61:
d3:f2:3f:73:b5:88:6f:e7:b4:82:f2:c1:cc:8f:fa:
41:c4:1c:a4:26:35:a5:bb:a2:c6:30:03:75:82:ac:
80:d2:5e:71:05:6c:b9:5e:af:d1:48:95:8b:f6:e3:
c4:df:d1:5f:2e:aa:17:2d:aa:08:c5:39:49:10:6a:
09:7b:86:88:e0:5c:22:93:66:b7:ed:9b:36:2a:b8:
e1:ef:37:c0:14:26:4a:81:ba:d1:09:03:6c:e5:87:
2f:c8:f6:67:be:69:a1:84:dd:90:4d:d8:da:df:bb:
df:ba:a3:97:28:2a:bf:ee:77:ad:70:33:8b:2a:5f:
93:ab:76:ec:56:c3:15:44:c2:e6:ad:43:ce:d4:a2:
ba:ab:61:d9:9b:be:5f:37:b4:73:63:73:de:3d:ae:
40:2a:c3:f1:c1:2c:5a:c1:94:68:47:b7:21:d7:24:
80:cd:da:12:3d:bd:b8:91:4f:bc:e3:b7:0f:07:d4:
ed:b6:77:5b:d1:60:db:e6:f2:73:ed:37:f1:8a:a1:
04:8d:e6:53:61:4e:aa:7e:96:8a:bb:ea:94:02:8d:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:F2:09:4A:40:6E:57:BF:16:B9:2E:7B:51:02:0B:DB:39:DD:20
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/g_PyCUpAble_Frkue1ECC9s53SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/24
160.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8a:31:e0:ba:c0:c0:48:e3:d4:3b:7d:1e:78:d3:1f:d2:66:
86:ee:db:47:a5:79:54:d8:7b:b6:27:b1:29:a2:f4:0b:8a:01:
4c:e9:96:d2:78:e2:e7:af:6b:92:b8:f6:32:db:92:4f:f0:37:
59:7f:44:7b:e8:9b:e0:c7:72:e4:1e:cf:6b:9b:d2:d3:e8:b9:
d5:73:07:d1:8a:23:48:cf:42:a9:7c:81:c5:52:46:c1:f2:fa:
2a:11:2f:ae:45:23:92:14:50:3d:33:7c:04:02:a1:c3:cb:26:
78:e5:9f:e4:a9:12:85:9e:73:f9:c5:01:76:ef:ba:86:f2:e7:
26:f8:54:4c:81:de:4b:b4:fd:6d:ff:fc:5d:0a:62:41:92:3c:
bd:14:17:50:ce:b8:f2:aa:f4:eb:72:d7:3c:b5:30:35:64:e2:
1f:40:f0:5b:32:20:03:3b:4f:31:5a:46:ef:6b:9b:bc:ca:a7:
7d:79:62:6d:95:ff:59:01:79:cc:4b:36:2f:6e:58:f6:fa:3e:
b7:29:89:ba:b7:1b:e9:d9:61:14:22:74:fd:3e:11:f2:86:7a:
8e:15:d3:22:df:11:e5:09:56:47:ab:c7:23:2c:81:7c:58:12:
b4:b4:f9:5a:96:7e:3b:3c:3c:80:06:9e:90:6e:b0:bd:7f:93:
4c:56:b7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:20:29 2026 by rpki-client