Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/SlO2h944uo14tUea7SXIOwzU56A.roa
File: SlO2h944uo14tUea7SXIOwzU56A.roa (raw, json)
Hash identifier: OCkReCXO76xm/oHI6yYmR9rjRWSZv4zsyxGq8xEEm10=
Subject key identifier: 4A:53:B6:87:DE:38:BA:8D:78:B5:47:9A:ED:25:C8:3B:0C:D4:E7:A0
Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial: 019F8B3420CB6DE6FEDC31A2CC1C98DFB184
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/SlO2h944uo14tUea7SXIOwzU56A.roa
Signing time: Wed 22 Jul 2026 19:01:17 +0000
ROA not before: Wed 22 Jul 2026 19:01:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201115
IP address blocks: 158.94.80.0/21 maxlen: 21
158.94.88.0/21 maxlen: 21
158.94.96.0/20 maxlen: 20
158.94.112.0/20 maxlen: 20
158.94.128.0/20 maxlen: 20
158.94.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:34:20:cb:6d:e6:fe:dc:31:a2:cc:1c:98:df:b1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Validity
Not Before: Jul 22 19:01:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a53b687de38ba8d78b5479aed25c83b0cd4e7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:16:8a:e1:5e:5a:60:41:6e:4d:cb:89:cc:
73:e1:52:7e:50:30:a6:9f:80:83:55:6f:87:77:6e:
05:c6:6c:30:b3:9a:1b:8f:b7:16:b0:40:bf:cb:fb:
04:7f:ad:0a:9d:84:b7:a7:e8:dc:b5:ab:16:c6:ae:
fb:43:02:53:f5:32:40:7b:9f:0e:83:2b:c4:d5:b2:
33:ca:90:b7:d9:dc:d5:fe:95:67:7e:84:81:f4:7c:
6b:8a:5c:aa:a2:62:bb:22:8c:2d:c3:d3:b3:32:06:
7c:e9:f0:30:62:0e:08:7f:c1:c6:3a:d8:4a:74:f0:
65:01:04:ac:a4:bf:4e:12:a9:45:80:5d:9c:60:66:
6e:c4:b8:c5:d1:d0:5b:b4:a9:5f:51:33:b7:31:36:
60:f1:73:1d:64:2a:10:97:21:f1:ec:d8:8f:5f:bc:
fd:d2:9c:3a:0d:d6:aa:2e:19:bf:3f:ae:ae:ab:19:
d9:eb:3f:d8:60:8f:bf:37:a1:51:09:2c:1f:e2:72:
a8:3c:f3:e2:65:ca:7f:96:97:c5:67:d5:c2:93:1c:
ba:91:8e:b0:7d:08:6e:72:d9:a5:51:b9:66:ab:93:
16:35:cf:51:42:ec:3f:93:84:5d:22:84:f5:17:40:
66:7e:9c:59:a2:e5:a6:8d:4d:8e:d1:59:e1:2e:2f:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:53:B6:87:DE:38:BA:8D:78:B5:47:9A:ED:25:C8:3B:0C:D4:E7:A0
X509v3 Authority Key Identifier:
keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/SlO2h944uo14tUea7SXIOwzU56A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.80.0-158.94.159.255
Signature Algorithm: sha256WithRSAEncryption
9f:a8:98:f7:37:b2:93:11:ea:11:9e:ef:16:96:b0:b5:f5:03:
22:cd:b5:78:bc:7f:2e:15:eb:d8:5d:e7:e5:a8:bf:dc:e3:fd:
9b:7a:78:e0:47:ad:81:aa:41:2b:68:2a:16:b4:79:63:f8:23:
7b:59:89:e2:9e:ed:cb:9f:be:bb:c0:b0:3b:e7:0a:e7:39:bc:
b7:76:24:72:28:99:61:01:b3:ed:4d:d4:a8:b0:ed:b0:b2:c9:
2c:a5:2b:b0:3d:cf:30:d7:56:a4:9c:a6:a4:e5:2e:7e:d2:8e:
a2:10:85:ea:e0:0e:22:9c:ac:22:c7:a2:d0:c6:15:55:70:8a:
ea:c5:1d:67:69:0f:2c:b3:f5:ef:58:68:0a:15:b9:9b:d0:1f:
47:05:a8:5a:12:9c:87:82:fe:b1:32:fb:b7:b7:ae:ff:80:37:
42:16:81:8a:28:5e:e3:7d:78:94:71:ed:25:00:35:64:82:ed:
d8:29:98:bc:69:57:b7:b2:22:2f:a6:cc:5c:80:ec:b4:f3:06:
53:42:81:ca:2f:fe:a2:12:1f:40:86:1a:82:57:b9:a5:c8:ac:
7c:7e:bf:5a:fc:89:5e:7f:a2:0f:fd:1a:21:93:73:97:9f:f3:
2b:71:1b:90:a9:11:97:5a:83:59:62:1b:70:b2:60:15:f8:de:
a0:6a:1c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:41 2026 by rpki-client