Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/IO15SNu1KdH0Fluw5gFqPS_W0ZY.roa
File: IO15SNu1KdH0Fluw5gFqPS_W0ZY.roa (raw, json)
Hash identifier: xjf1y4dH2Lfu2wEM+lf/Jl2NIK5PHT0k6i2LebKLrpE=
Subject key identifier: 20:ED:79:48:DB:B5:29:D1:F4:16:5B:B0:E6:01:6A:3D:2F:D6:D1:96
Certificate issuer: /CN=13da8f1f761d6f8e14ff061cfab5050b873f4a07
Certificate serial: 019E016625AE6789E9BBD226B6C26EEF59C0
Authority key identifier: 13:DA:8F:1F:76:1D:6F:8E:14:FF:06:1C:FA:B5:05:0B:87:3F:4A:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/IO15SNu1KdH0Fluw5gFqPS_W0ZY.roa
Signing time: Thu 07 May 2026 07:45:31 +0000
ROA not before: Thu 07 May 2026 07:45:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60132
IP address blocks: 2.58.120.0/22 maxlen: 22
2a09:e540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:66:25:ae:67:89:e9:bb:d2:26:b6:c2:6e:ef:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13da8f1f761d6f8e14ff061cfab5050b873f4a07
Validity
Not Before: May 7 07:45:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20ed7948dbb529d1f4165bb0e6016a3d2fd6d196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e9:f8:93:c8:74:b8:4d:12:0a:94:49:98:a5:
23:50:a8:00:5d:3e:12:d2:60:88:c2:c8:69:1d:b5:
97:aa:0a:f6:34:8c:15:55:48:4a:5c:3f:16:45:ae:
4d:f9:d1:ce:45:cf:f7:32:a8:cf:30:46:29:e6:d1:
00:d5:9f:58:7f:90:3f:84:db:f4:9a:9a:65:a1:18:
62:af:f1:76:cc:a9:1a:18:d7:da:2b:23:b5:c1:7c:
09:a8:f1:42:91:06:00:ad:63:a2:60:ad:ba:d5:15:
ab:69:7a:78:b5:8d:bb:66:00:5d:b8:5a:bf:da:d8:
55:42:49:1f:25:21:e9:fe:b1:77:3c:0e:03:12:10:
20:dc:c4:90:72:7c:00:9f:36:62:37:9e:64:f0:9e:
79:86:95:9a:69:2f:75:40:90:36:db:3c:0a:e1:9c:
99:b4:d0:11:4f:c7:a5:5d:65:53:28:76:8c:5c:57:
d5:64:78:30:bf:a8:48:c7:05:2c:b8:23:56:11:ae:
77:3c:7f:10:e8:39:f6:2a:17:7d:17:e9:97:f2:59:
d8:d1:b4:5a:c9:5f:18:b9:c4:75:09:c6:85:e6:ee:
12:6a:87:30:7b:ba:84:52:e3:3a:9f:2f:72:ae:1d:
3d:85:2e:9d:b3:b5:d3:50:9e:bb:77:43:72:88:24:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:ED:79:48:DB:B5:29:D1:F4:16:5B:B0:E6:01:6A:3D:2F:D6:D1:96
X509v3 Authority Key Identifier:
keyid:13:DA:8F:1F:76:1D:6F:8E:14:FF:06:1C:FA:B5:05:0B:87:3F:4A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/IO15SNu1KdH0Fluw5gFqPS_W0ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.120.0/22
IPv6:
2a09:e540::/29
Signature Algorithm: sha256WithRSAEncryption
68:c3:01:8d:88:8d:87:d4:c8:ed:55:e3:28:aa:8a:3c:43:a1:
ad:72:4d:35:33:39:45:28:b6:09:ff:41:d7:d1:49:77:45:f5:
b4:3b:71:14:c4:c2:cc:65:52:8c:a3:d4:19:de:d8:96:b7:80:
5f:da:ba:9a:e6:cd:f2:c3:73:37:17:b2:ed:94:62:47:c2:be:
1e:55:f8:91:64:ed:93:c3:85:63:96:09:f5:fa:34:1c:ad:6d:
1e:eb:6b:e8:d9:93:44:16:e9:d0:57:c2:26:b7:c5:83:ed:eb:
08:cf:61:44:1a:38:bc:75:41:dc:54:35:cf:e0:73:43:63:59:
4f:a5:5f:40:ec:07:40:c5:bd:19:54:35:26:c1:bb:8e:73:9a:
a5:9c:3e:45:89:fc:57:3c:cc:45:9c:28:42:cb:d2:14:be:88:
59:59:c4:54:ab:70:c3:b1:7d:a1:2f:7e:b4:21:32:83:00:3d:
22:d7:c2:4d:df:d0:43:32:f3:72:55:fb:04:41:1a:ce:49:64:
16:69:0e:c0:d1:8f:14:16:3b:c5:ac:fa:d4:b4:e6:26:1d:26:
7e:16:65:6a:66:2d:02:1e:89:05:5d:64:1e:91:b5:ac:e5:52:
75:17:32:f0:0c:0e:2c:f1:dd:9a:68:8f:ee:23:a8:03:2b:de:
be:2b:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:15:18 2026 by rpki-client