Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/P42-f39Ycj7kFfoC0CuRFEk7bHo.roa
File: P42-f39Ycj7kFfoC0CuRFEk7bHo.roa (raw, json)
Hash identifier: bR+WRJBL4XxjO44QVg6g7VWQLOMM0TbDVOVu0w6844g=
Subject key identifier: 3F:8D:BE:7F:7F:58:72:3E:E4:15:FA:02:D0:2B:91:14:49:3B:6C:7A
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A1A7B6D021F589736B61A89808A075EB24
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/P42-f39Ycj7kFfoC0CuRFEk7bHo.roa
Signing time: Wed 04 Nov 2026 17:58:58 +0000
ROA not before: Wed 04 Nov 2026 17:58:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198855
IP address blocks: 163.245.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:b6:d0:21:f5:89:73:6b:61:a8:98:08:a0:75:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Nov 4 17:58:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f8dbe7f7f58723ee415fa02d02b9114493b6c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:1b:dc:2f:ac:55:fd:c4:dd:83:73:b5:0f:
37:62:22:14:f1:aa:b3:bf:a6:a9:29:4d:21:5c:55:
91:e9:51:8d:23:be:2e:8c:ef:fc:27:e5:01:ca:fd:
46:31:e2:44:08:79:06:aa:a8:3c:0e:da:28:ea:ac:
41:39:ac:22:ae:19:a6:5a:af:bd:f0:8f:05:24:08:
d7:11:df:e7:1a:e6:a4:03:ff:c9:a6:65:2b:23:2d:
ba:5c:cd:3d:7e:8e:e5:19:7b:73:d5:7b:15:86:bf:
0c:bb:7a:20:31:51:b1:1f:79:44:26:16:3f:f2:a6:
e6:88:03:6e:b0:f7:78:05:04:54:76:84:ed:e6:af:
62:29:01:89:b6:2e:06:8c:42:b8:6b:0f:a4:c9:ef:
7e:56:78:88:60:0b:2d:e3:d2:02:81:45:6b:51:90:
e7:50:0d:cb:cc:56:7c:20:c3:98:32:cb:23:e6:08:
c2:6c:e3:91:dc:d0:1f:d2:19:59:de:0c:49:40:94:
d1:c1:8f:ed:a9:7d:a9:54:46:ac:21:ea:1e:1a:33:
18:9f:4f:f1:ac:ac:c1:be:86:53:d5:22:52:ad:49:
13:2f:6d:ce:e4:e8:46:f0:8d:71:f7:4e:0f:e4:0a:
b7:6e:5b:7d:62:93:ee:2d:a3:9c:d4:79:f0:f6:c5:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:BE:7F:7F:58:72:3E:E4:15:FA:02:D0:2B:91:14:49:3B:6C:7A
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/P42-f39Ycj7kFfoC0CuRFEk7bHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.54.0/24
Signature Algorithm: sha256WithRSAEncryption
61:75:a2:eb:c8:e7:f5:02:cb:ad:03:ae:a4:75:34:5e:95:79:
35:e1:0f:91:62:23:2d:ee:7d:43:05:f6:a6:ba:b9:d3:51:a9:
e2:5f:1e:4d:cd:1d:1c:fa:7e:b8:f1:45:1a:5f:0e:6c:58:c6:
55:0e:d1:37:55:e8:5d:8d:df:cc:af:e6:e2:b8:07:4e:ea:22:
20:03:e8:69:b8:9b:68:cd:be:9c:24:ee:09:4a:e3:9a:c7:53:
12:80:12:e0:62:30:ce:a2:0d:a3:fb:fe:46:ad:0a:dd:cc:03:
55:8b:48:02:30:0c:74:9e:89:9d:d0:4f:09:0f:3a:f8:a9:d1:
4d:bd:17:6b:f9:75:0d:43:3c:95:d5:a3:ca:79:a7:77:90:18:
bf:d0:c7:a7:9a:e9:5f:63:82:24:51:22:87:c2:65:1c:75:8b:
68:27:09:3b:a9:55:f7:e3:8d:18:35:0e:ed:26:8b:0b:4e:1e:
a9:86:19:32:ef:8d:79:b0:06:af:c9:be:cb:3b:5d:2a:ce:0a:
b8:78:49:6e:6e:06:ac:24:90:94:24:b6:28:fe:8a:bd:0f:0c:
55:68:16:68:74:75:54:2f:d8:19:a0:6d:9f:35:c0:05:fa:03:
35:7c:7a:e4:c9:bc:5f:e0:d1:4c:2a:57:9a:a2:6b:4d:69:45:
c0:f7:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:44 2026 by rpki-client