Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/_GXs5D3IvlrXACIDGV1jenI0WNE.roa
File: _GXs5D3IvlrXACIDGV1jenI0WNE.roa (raw, json)
Hash identifier: YXv+qavyugnUTBH4aVvxk6AhP8epVFfWY0KRl4DJGts=
Subject key identifier: FC:65:EC:E4:3D:C8:BE:5A:D7:00:22:03:19:5D:63:7A:72:34:58:D1
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 019E16106D26E44ABFAC5C902F816C2102BD
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/_GXs5D3IvlrXACIDGV1jenI0WNE.roa
Signing time: Mon 11 May 2026 08:03:55 +0000
ROA not before: Mon 11 May 2026 08:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212540
IP address blocks: 2.57.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:10:6d:26:e4:4a:bf:ac:5c:90:2f:81:6c:21:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: May 11 08:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc65ece43dc8be5ad7002203195d637a723458d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:e5:c9:e0:58:45:84:41:c9:44:5d:a1:b8:
12:6f:3e:fa:4b:51:6f:bd:e2:82:e1:b3:a9:38:b9:
fb:e4:9c:07:77:4d:a1:87:a9:c7:fe:a9:ba:36:f0:
9e:5c:07:53:5f:dd:76:f0:4e:35:a1:6a:9d:db:5c:
7f:c1:aa:b1:08:6d:fe:79:cf:0c:70:7d:dd:f9:fb:
75:a8:d4:21:08:3b:53:73:46:9a:89:aa:a8:27:15:
40:3a:ef:5d:bb:de:aa:b0:85:f4:7b:f1:14:63:63:
7b:1f:f6:39:19:2e:eb:40:bb:23:97:a5:f8:26:8b:
d3:87:fc:5f:e8:a4:f9:cd:14:2a:9f:77:6f:e0:35:
b1:8d:36:61:cc:ec:e0:c7:54:0d:15:d0:6b:72:bc:
9b:2f:e9:ae:77:03:2a:ea:d6:32:10:fe:87:a0:7e:
25:84:99:fa:17:db:49:25:98:2d:fb:ea:73:2e:95:
16:0e:f9:66:55:9b:f2:64:f4:a3:e7:6e:9e:b8:f4:
57:21:21:9f:ba:b8:2e:96:d2:b4:d5:97:66:72:21:
70:9e:06:fa:25:52:c0:04:5b:df:d7:b5:10:3c:be:
6a:97:a0:45:91:c0:33:dd:64:e2:6e:86:3e:95:d7:
3e:de:5a:6b:10:c1:87:03:48:fc:d3:be:3b:0f:90:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:65:EC:E4:3D:C8:BE:5A:D7:00:22:03:19:5D:63:7A:72:34:58:D1
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/_GXs5D3IvlrXACIDGV1jenI0WNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.57.0/24
Signature Algorithm: sha256WithRSAEncryption
03:83:ad:be:93:74:5d:9c:ec:74:b9:77:6f:d4:37:2f:b8:8e:
50:83:7b:12:ac:84:84:e9:df:33:1c:6f:fc:eb:5f:c7:d5:8c:
d3:f3:94:3f:dc:0b:32:28:4a:98:30:34:a4:37:e9:25:d1:39:
b3:fc:30:85:db:2d:c4:7e:dd:d4:a7:e2:1a:79:96:5e:25:9f:
ce:ca:3c:02:bd:7a:b8:76:7b:8a:71:db:8c:c1:93:5d:ee:88:
7d:84:39:8f:e4:c6:c0:46:b1:42:da:6a:6f:cf:82:fb:1a:96:
ab:66:92:73:7b:9d:04:7c:dd:bb:ac:d8:f9:f4:a0:34:43:19:
28:78:37:db:ea:31:35:f5:db:17:c7:0e:b7:de:73:d1:77:d3:
48:d1:4c:a9:f6:ed:cb:75:68:93:05:f5:42:62:6f:c6:d1:00:
eb:e1:06:21:ce:cd:56:75:bf:12:f4:67:58:12:3e:3e:fd:32:
6b:10:0b:e7:7b:93:95:f2:0f:e8:74:76:37:54:2f:0b:34:a0:
74:a5:f6:36:ab:97:73:4a:06:3b:e4:7d:5f:4c:ef:af:68:04:
92:ae:c8:4b:30:bf:18:0f:d2:44:e1:50:51:e8:04:a5:0f:b5:
14:b7:d3:19:50:d3:39:61:25:35:bf:91:ba:ad:59:db:cb:8e:
29:d6:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:08 2026 by rpki-client