Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/PSdpOEBdgxsHkm6KCNPnWSFB49k.roa
File: PSdpOEBdgxsHkm6KCNPnWSFB49k.roa (raw, json)
Hash identifier: pGGtowfo8qIB3GjUapqlvFttqBJK9pMUluPFJe49Hos=
Subject key identifier: 3D:27:69:38:40:5D:83:1B:07:92:6E:8A:08:D3:E7:59:21:41:E3:D9
Certificate issuer: /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial: 019CD265C5358D9FCB935F4DD70A2BA03D75
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/PSdpOEBdgxsHkm6KCNPnWSFB49k.roa
Signing time: Mon 09 Mar 2026 11:40:10 +0000
ROA not before: Mon 09 Mar 2026 11:40:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25370
IP address blocks: 158.94.180.0/23 maxlen: 23
158.94.180.0/24 maxlen: 24
158.94.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:65:c5:35:8d:9f:cb:93:5f:4d:d7:0a:2b:a0:3d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
Validity
Not Before: Mar 9 11:40:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d276938405d831b07926e8a08d3e7592141e3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7b:e2:de:e8:13:1a:ea:0d:c0:f3:15:a4:86:
a8:3d:80:5b:c5:6c:6b:ac:29:b6:d8:fd:29:58:82:
94:ce:e0:84:e1:88:00:e1:7d:e7:fc:75:a2:d8:11:
63:5f:5b:a7:e4:1f:2b:3d:24:f5:69:bb:aa:08:5f:
33:f5:42:43:0e:3d:29:73:eb:f6:3f:f4:12:a3:ae:
69:37:fc:4f:93:e4:85:79:99:a7:4d:02:3f:b8:eb:
3a:28:4d:ea:c1:fa:c7:5b:c6:c7:3e:36:ea:56:12:
8d:03:06:1c:dd:75:81:18:3a:f2:f6:a2:9d:0e:f8:
25:24:05:34:46:81:e8:39:fe:5e:d3:c0:98:64:c5:
a9:e7:93:7d:92:f2:c7:79:b8:c3:78:32:d9:ee:a7:
76:71:53:96:5c:dd:51:00:bb:be:d8:60:02:fe:15:
b0:34:68:5b:74:b1:83:7d:a2:69:fd:7d:4e:6a:16:
54:9e:b6:fc:91:f6:47:f3:8c:74:c5:ba:f7:da:7d:
69:27:13:bb:df:89:ce:cd:c6:0c:0d:fe:d4:08:70:
93:df:62:e9:5a:c3:7c:41:95:30:29:f2:74:ea:92:
0b:ff:8e:96:44:9a:d3:2c:11:e8:0c:66:2b:18:21:
9e:0d:22:a3:ef:d7:68:a3:51:c1:6e:40:cc:d5:1b:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:27:69:38:40:5D:83:1B:07:92:6E:8A:08:D3:E7:59:21:41:E3:D9
X509v3 Authority Key Identifier:
keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/PSdpOEBdgxsHkm6KCNPnWSFB49k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.180.0/23
Signature Algorithm: sha256WithRSAEncryption
13:f4:6e:be:8f:b3:c1:ae:ef:a0:83:68:9c:2c:ea:f3:2e:6f:
84:e7:be:a2:69:63:a8:3e:93:7d:08:96:13:1f:94:49:98:1a:
2b:b2:10:ce:3f:56:6b:12:c6:ac:a1:89:23:94:c6:fb:b1:a0:
21:8d:b6:70:82:ce:b2:8a:80:88:a0:27:fd:2d:a9:21:db:15:
26:54:dc:a5:b9:f1:8f:c5:76:fb:51:b5:a9:c0:83:23:07:f1:
d6:f0:e8:24:0d:14:56:3f:c4:08:7f:aa:62:95:8e:cf:78:c9:
24:38:e4:81:ca:f8:35:d5:3e:b9:3b:0d:22:e2:2d:30:6c:a4:
d9:23:3d:a4:63:bd:17:be:b6:fc:58:4f:18:b1:e2:dd:14:90:
92:1c:6c:fa:5e:1a:4a:7e:44:be:5e:b3:f9:30:3c:2b:bf:55:
28:42:63:82:57:87:48:f1:e3:28:00:a4:11:5a:37:91:bb:18:
2f:80:4f:b7:a0:bd:42:37:e0:8d:25:1a:e3:fc:da:19:4c:38:
4b:c0:cb:6a:aa:37:0e:3c:da:04:c1:eb:21:2d:77:8a:63:18:
5e:a7:1b:1c:71:37:b4:22:5f:b7:31:95:2f:c6:59:c4:48:30:
6d:3b:e0:f2:3b:8c:5e:eb:21:0d:88:00:70:48:53:1d:aa:da:
39:a2:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:51:57 2026 by rpki-client