Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/G54-R7WmdUoRvbWLoSHw5SRj0DY.roa
File: G54-R7WmdUoRvbWLoSHw5SRj0DY.roa (raw, json)
Hash identifier: tmwbfY1MGuKmGtvPwKDJTvSgMriCb3xtulN6lt4C9gM=
Subject key identifier: 1B:9E:3E:47:B5:A6:75:4A:11:BD:B5:8B:A1:21:F0:E5:24:63:D0:36
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019DD3BCF64FDBA85F7AB2C7752D0915336F
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/G54-R7WmdUoRvbWLoSHw5SRj0DY.roa
Signing time: Tue 28 Apr 2026 10:57:49 +0000
ROA not before: Tue 28 Apr 2026 10:57:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58062
IP address blocks: 216.235.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:bc:f6:4f:db:a8:5f:7a:b2:c7:75:2d:09:15:33:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Apr 28 10:57:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b9e3e47b5a6754a11bdb58ba121f0e52463d036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:61:95:1f:9d:ba:fa:00:c9:df:f9:33:63:
8a:57:06:bf:03:c4:3e:4f:c3:5a:88:b8:23:57:9a:
c0:f6:0f:fe:08:38:0f:4c:04:ff:16:c4:63:3d:50:
c7:f1:31:33:3e:f6:77:e3:4d:79:14:16:57:8f:d8:
d1:7f:3b:d0:ee:c6:85:15:f5:71:76:2d:89:3f:bf:
96:ac:96:5a:ff:30:83:52:ab:42:9e:bf:ee:47:44:
4f:72:6b:e2:69:5c:18:83:0d:0f:51:48:0d:f0:78:
7a:43:8f:21:45:63:86:fe:a8:c4:5d:4f:85:7e:7c:
f3:f7:97:5c:69:00:a3:59:ca:33:82:52:b6:34:a4:
09:69:a3:d0:b4:49:de:67:9f:07:4b:0b:41:ee:d8:
56:5e:4d:1f:4a:eb:89:5f:ec:33:83:89:67:b4:c7:
0f:8a:05:45:ed:d9:8b:5b:2b:96:7a:ea:e7:5d:b4:
cd:4d:a8:01:19:81:99:2f:25:6f:e8:40:c2:e6:57:
67:5a:84:03:f9:8e:18:79:2a:aa:2f:98:67:2d:a0:
0f:11:c8:d6:43:33:45:96:ff:2f:86:71:e6:5e:74:
08:bb:ae:9a:c6:d0:32:a4:71:44:aa:06:cc:98:6a:
9c:19:3b:c9:27:95:b7:61:38:22:f4:e8:4e:3a:4d:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9E:3E:47:B5:A6:75:4A:11:BD:B5:8B:A1:21:F0:E5:24:63:D0:36
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/G54-R7WmdUoRvbWLoSHw5SRj0DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.235.240.0/22
Signature Algorithm: sha256WithRSAEncryption
36:fc:77:32:83:a0:42:7d:b7:96:6f:24:7a:1a:46:05:f1:a3:
3e:57:12:86:3f:12:d2:a2:49:20:74:dd:e4:59:15:aa:37:d2:
80:24:ab:6c:2f:42:a8:e8:0a:91:1e:ba:32:d9:15:9f:fe:04:
0b:e7:62:35:c4:06:b7:51:55:c0:78:b2:18:f9:09:ad:ee:bb:
a5:59:b3:75:a3:e6:ef:07:d9:d1:f0:13:72:a6:8e:f2:64:ce:
a1:4f:aa:ca:db:1a:93:9c:bc:b8:a8:ff:23:7d:ea:57:02:af:
34:99:db:2d:88:f9:b2:6e:31:0c:ca:9a:2d:7e:60:61:80:84:
6b:14:ba:61:ff:c7:01:22:a9:5f:63:a6:69:ea:35:42:fc:67:
0c:ba:2f:f7:8d:44:f8:1b:bb:96:b5:4d:6d:5e:03:aa:ad:93:
15:8d:d2:a2:c3:8c:78:59:fb:7b:52:72:b4:6f:52:e8:47:46:
19:6c:40:e2:d2:2f:0c:88:e8:90:af:5a:dd:20:26:6d:cf:04:
56:14:0d:b8:ea:fc:c8:f3:05:08:84:b7:0b:0e:14:d5:e5:96:
18:d8:72:60:82:0c:02:f2:78:01:9d:5c:45:e8:64:d9:e2:83:
ed:90:cb:1e:11:2c:d5:3f:85:89:33:f7:78:6e:e2:8c:99:28:
0f:5e:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:38:42 2026 by rpki-client