Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/LOip2gC88s_tszLEcshnRvxltO0.roa
File: LOip2gC88s_tszLEcshnRvxltO0.roa (raw, json)
Hash identifier: 81dK2nGzE4f7jnbPtGSDEj8xP2j7b5N0yF2RTqK8VcI=
Subject key identifier: 2C:E8:A9:DA:00:BC:F2:CF:ED:B3:32:C4:72:C8:67:46:FC:65:B4:ED
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A1A7B6D060977C775524C4A3CE58EC02C4
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/LOip2gC88s_tszLEcshnRvxltO0.roa
Signing time: Wed 04 Nov 2026 17:58:58 +0000
ROA not before: Wed 04 Nov 2026 17:58:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402429
IP address blocks: 163.245.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:b6:d0:60:97:7c:77:55:24:c4:a3:ce:58:ec:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Nov 4 17:58:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ce8a9da00bcf2cfedb332c472c86746fc65b4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:d2:3d:20:f4:60:60:10:3e:cc:c6:d9:63:
78:7b:ec:ee:38:da:31:bb:10:17:e0:82:b3:be:f8:
c4:0a:63:20:95:51:5d:cd:b9:97:ea:e8:e4:50:2d:
4e:ee:1a:74:b0:63:ce:1c:22:19:6f:8e:11:24:db:
75:99:ac:a0:ee:30:26:b2:35:f6:a1:6f:5a:67:c0:
af:cb:dc:19:61:1c:f2:76:29:b6:cb:57:9a:ea:50:
a0:7a:61:73:1d:8a:97:b8:0f:90:88:44:06:3b:c3:
0a:de:c4:05:1a:b4:02:af:44:5c:59:80:74:c2:6f:
a1:c0:31:42:89:7a:97:b4:89:16:cd:0f:93:76:95:
e6:ea:83:2d:84:4c:28:2c:92:b9:31:e3:76:54:7d:
16:9d:02:c3:3b:71:b5:c2:f7:f8:aa:35:c4:68:1e:
86:f8:01:01:6f:29:e4:a9:2b:c5:f1:15:6f:49:ed:
41:e2:89:cc:dd:81:6e:fa:1d:c3:d5:7c:6c:b0:c0:
b7:96:24:3e:e5:d7:a3:02:3b:dd:23:2f:06:92:ea:
46:d6:2c:58:a0:b8:ed:d9:6e:aa:16:ef:40:bb:30:
80:5c:6b:49:28:b8:cc:d5:7b:c6:75:21:d7:c3:f0:
53:73:fc:ad:aa:63:9c:0b:c2:5c:08:1c:e7:cb:b5:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E8:A9:DA:00:BC:F2:CF:ED:B3:32:C4:72:C8:67:46:FC:65:B4:ED
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/LOip2gC88s_tszLEcshnRvxltO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:47:eb:fa:a3:c3:9b:a5:ad:73:50:d0:37:db:57:2a:08:d2:
ee:d8:ad:54:32:3e:0e:55:d5:47:11:2d:9f:82:d8:01:94:52:
5b:44:6c:1f:88:43:b7:e7:b2:b5:c0:b4:c6:d2:ce:01:b6:2d:
79:86:90:79:f1:5c:57:83:b4:8d:11:fb:03:3c:ef:bf:2f:9c:
e5:04:3d:71:09:0e:5b:16:d5:23:df:3d:fa:26:b3:e4:94:f7:
64:ed:ec:e0:88:98:5b:e3:06:b1:4f:83:b3:bf:a0:da:49:58:
a7:86:c8:34:9f:06:d8:50:fd:e5:2e:15:44:c5:f6:39:01:34:
de:00:00:31:72:25:5b:c1:0d:65:63:01:51:11:37:86:df:ac:
57:ae:d2:ea:3c:33:88:46:97:e9:e0:06:96:df:10:2c:65:75:
4e:ca:54:77:e5:7c:db:a5:c1:20:22:86:0b:14:6d:00:94:a2:
ab:5d:7e:ad:2c:fe:f7:91:a9:a0:98:e1:ca:36:6e:41:e1:a6:
76:08:86:98:ae:4f:40:e1:50:7f:db:94:25:9e:fb:5c:57:a2:
ac:3c:ae:0d:68:a9:00:58:a6:64:9c:0a:45:bb:12:9f:94:42:
65:22:da:9f:33:40:ae:65:de:47:4e:2b:43:8f:60:b8:14:30:
87:c3:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:25:36 2026 by rpki-client