Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/CPtBDGsQf-aQuP1LcOwxASVwzXs.roa
File: CPtBDGsQf-aQuP1LcOwxASVwzXs.roa (raw, json)
Hash identifier: VxLFgxYLF2WU9abYfeRzCU/DnRSUQjcI9z+qUkxLd1g=
Subject key identifier: 08:FB:41:0C:6B:10:7F:E6:90:B8:FD:4B:70:EC:31:01:25:70:CD:7B
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019D0082DE082133CA14641201987F2AF066
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/CPtBDGsQf-aQuP1LcOwxASVwzXs.roa
Signing time: Wed 18 Mar 2026 10:34:29 +0000
ROA not before: Wed 18 Mar 2026 10:34:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 158.173.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:82:de:08:21:33:ca:14:64:12:01:98:7f:2a:f0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Mar 18 10:34:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08fb410c6b107fe690b8fd4b70ec31012570cd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:eb:87:73:2a:d3:9a:17:f4:f0:0b:9c:12:de:
a9:c2:43:8f:ab:a2:30:41:97:16:2e:03:27:2c:09:
0a:46:15:e5:0e:08:a5:04:6f:8a:79:1a:be:39:f6:
b3:bc:ef:f2:07:d2:51:7b:c5:6e:c8:c6:97:83:c7:
2e:fc:63:be:ac:d3:d8:62:e5:da:37:05:cb:5d:ea:
29:cf:21:d2:a1:89:fa:53:97:39:17:a0:34:72:e8:
f9:ac:20:05:27:42:0f:c6:66:37:53:80:da:fb:61:
7f:d7:ae:0b:00:c9:35:1e:a1:97:61:98:4f:a3:7f:
d5:df:6e:f8:00:bc:cd:d0:52:cc:52:3e:1d:2f:39:
09:25:a2:c3:be:33:0b:eb:2f:05:1f:ae:fd:b1:d6:
d2:92:65:aa:cc:f8:8a:51:26:f5:a6:6b:de:d8:09:
2d:a2:22:84:51:a2:a3:68:d2:55:bc:41:0e:f6:db:
53:97:e2:2f:85:90:de:a9:40:5f:2f:b9:5d:71:61:
e0:2a:f9:2f:8a:24:5a:79:6e:e3:33:96:e1:4b:f2:
11:fa:e6:90:a3:77:5e:50:09:b7:50:fb:73:3d:c9:
9c:1d:1c:17:ef:f4:fd:c1:e4:9a:dd:bb:94:fd:07:
21:08:50:6d:ec:69:ef:0b:49:34:f9:cb:60:09:d0:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FB:41:0C:6B:10:7F:E6:90:B8:FD:4B:70:EC:31:01:25:70:CD:7B
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/CPtBDGsQf-aQuP1LcOwxASVwzXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.78.0/24
Signature Algorithm: sha256WithRSAEncryption
69:70:50:bf:80:12:71:f3:96:7a:48:ce:fb:f4:42:76:e2:25:
46:01:6b:46:65:47:1a:6b:cc:ff:f6:24:17:0f:b6:35:62:bd:
bb:2b:3e:b7:c3:59:52:be:de:76:b6:50:7a:42:e0:50:64:e0:
62:e2:ab:05:f3:4e:be:0c:76:18:27:fa:7e:64:2f:40:7b:c3:
28:7a:25:22:87:4e:e9:9f:0a:23:87:06:0a:4b:dd:66:db:75:
26:4b:b3:be:42:98:e3:3f:66:c3:97:73:89:3c:b1:f3:4b:1e:
0f:b4:45:20:9d:ea:44:92:4d:c1:2c:c4:2b:9e:c6:5e:76:7f:
6f:57:2d:9d:9c:67:4b:a0:00:93:f7:17:c6:df:9b:e1:5f:f5:
57:98:80:69:d4:38:4c:07:72:87:15:66:05:66:dd:34:a1:f1:
d9:c2:91:8e:18:50:d5:03:49:46:cf:49:c2:85:dd:1e:a3:2e:
de:d3:0b:c6:82:d1:e0:75:a9:f2:c2:0a:68:19:99:d1:04:26:
74:60:37:58:e9:f7:3c:71:cd:bb:a9:e1:2d:18:b3:e2:d9:0d:
50:ea:84:b2:51:a6:2c:a4:35:82:6f:c5:2d:e1:87:9d:bc:7c:
a4:27:d6:1c:f7:8f:fa:7f:5d:50:cc:cf:6c:80:06:ef:de:9a:
3c:a8:15:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:45:01 2026 by rpki-client