Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/L0J3hmeEQQMeEK4Wee2b8e2Xw80.roa
File: L0J3hmeEQQMeEK4Wee2b8e2Xw80.roa (raw, json)
Hash identifier: ss/UTthyAhRDX5Y7/kJbJ1eRfrc9dRsZ16CTluYs5rI=
Subject key identifier: 2F:42:77:86:67:84:41:03:1E:10:AE:16:79:ED:9B:F1:ED:97:C3:CD
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 01A1BF82A3B5BD037E25035060A268FEA37F
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/L0J3hmeEQQMeEK4Wee2b8e2Xw80.roa
Signing time: Mon 09 Nov 2026 08:52:52 +0000
ROA not before: Mon 09 Nov 2026 08:52:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 57.250.40.0/24 maxlen: 24
57.250.42.0/23 maxlen: 23
57.250.42.0/24 maxlen: 24
57.250.48.0/24 maxlen: 24
57.250.50.0/24 maxlen: 24
57.250.56.0/24 maxlen: 24
57.250.58.0/23 maxlen: 23
57.250.58.0/24 maxlen: 24
57.250.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:82:a3:b5:bd:03:7e:25:03:50:60:a2:68:fe:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Nov 9 08:52:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f427786678441031e10ae1679ed9bf1ed97c3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:b5:f3:4d:64:4b:b2:df:1a:c3:78:f0:12:
ce:dd:c1:aa:5c:f5:37:68:51:a9:38:21:1e:6f:c5:
05:aa:fc:33:38:2d:e9:3b:42:9f:e9:7d:13:30:1f:
ca:81:3e:b5:5f:cc:05:42:b2:93:28:17:2f:5c:08:
11:db:7d:0d:4d:39:3f:fe:c1:58:79:90:f4:97:48:
84:53:3c:24:4e:c4:b1:05:f7:32:f9:42:0e:ff:1c:
12:e1:cf:fa:d4:b3:03:f1:ff:73:61:1d:8f:2b:c4:
ef:7f:8f:0e:d0:bf:34:d0:8f:b8:d2:c0:ac:9c:87:
42:a3:f6:72:c0:01:92:ef:85:21:6b:1a:88:09:82:
56:53:80:58:59:7b:a8:a1:fe:a3:f9:57:0b:82:e8:
47:38:d0:22:fd:b5:69:f8:58:ab:b2:39:a4:78:29:
ee:0d:9b:24:42:44:88:ef:de:15:6a:74:b2:ca:1e:
a0:bb:43:83:08:e9:a1:a1:0b:28:5c:c6:9e:3d:64:
e5:84:bf:bb:9d:4a:eb:b8:3b:59:ce:e3:b6:ee:a7:
51:de:fe:38:f6:5f:ee:36:4e:3e:53:76:ad:e1:83:
ce:ac:be:06:7c:bf:6c:bb:82:7a:c1:1a:e4:96:a5:
5d:bb:66:06:da:8f:8a:5f:46:d6:e7:3d:6f:28:d5:
51:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:42:77:86:67:84:41:03:1E:10:AE:16:79:ED:9B:F1:ED:97:C3:CD
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/L0J3hmeEQQMeEK4Wee2b8e2Xw80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.40.0/24
57.250.42.0/23
57.250.48.0/24
57.250.50.0/24
57.250.56.0/24
57.250.58.0/23
57.250.255.0/24
Signature Algorithm: sha256WithRSAEncryption
22:89:f1:98:85:06:23:a8:3c:91:1d:e1:6d:54:38:cf:cf:24:
91:08:db:36:14:66:e9:26:c8:04:4b:6c:39:8e:b9:5b:74:32:
af:21:68:52:a6:2f:97:5d:61:3b:58:85:6f:76:d4:1b:29:b1:
f0:86:87:a8:5a:6b:e1:98:69:40:ba:a2:f8:0b:60:d8:11:09:
51:b0:9c:23:ee:95:5c:1a:c8:fc:0d:97:ba:98:23:a5:be:48:
a8:5a:e4:4e:66:a1:63:1b:78:ff:b7:c6:f5:43:77:88:9a:94:
3b:2c:5e:82:99:ab:1b:b1:0c:ca:8d:3d:5f:b6:b5:57:be:98:
20:c3:c9:a0:66:e4:f1:d2:3d:3e:e4:01:7e:3b:89:56:01:25:
15:df:c2:65:59:94:66:3b:9a:d7:28:df:ae:cc:61:7b:08:fe:
ea:1f:c6:99:16:a3:9b:3e:c9:c3:ac:a7:42:7b:e2:77:6b:c3:
68:4e:b7:8a:b5:fa:1e:9a:2c:23:2f:e0:a7:a7:81:b8:13:ae:
7d:29:d8:21:49:6c:1a:a0:2e:71:41:ad:81:8e:e2:47:d4:b4:
e6:99:63:6e:c8:0e:96:f4:f6:2a:f5:90:54:a7:71:a5:f8:9d:
95:93:ba:83:68:00:e7:b9:22:61:a6:44:1b:a7:16:7d:e3:f4:
95:05:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:25:13 2026 by rpki-client