Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/G-pSc2GfZAe2Cv8BFVoi_llwABY.roa
File: G-pSc2GfZAe2Cv8BFVoi_llwABY.roa (raw, json)
Hash identifier: /7Z+9K3xhy+MwBsaOn4K/qhwmhDwNSO3C+IKdxiNzxI=
Subject key identifier: 1B:EA:52:73:61:9F:64:07:B6:0A:FF:01:15:5A:22:FE:59:70:00:16
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 019F83ADD101E2BC5E750FEC6F59F7879489
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/G-pSc2GfZAe2Cv8BFVoi_llwABY.roa
Signing time: Tue 21 Jul 2026 07:57:14 +0000
ROA not before: Tue 21 Jul 2026 07:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 43.226.224.0/24 maxlen: 24
43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:ad:d1:01:e2:bc:5e:75:0f:ec:6f:59:f7:87:94:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Jul 21 07:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bea5273619f6407b60aff01155a22fe59700016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:14:ec:6b:8b:c9:49:88:e6:aa:aa:b2:80:c2:
7e:5f:ad:84:64:59:fb:08:36:48:1b:83:f2:1e:96:
3e:48:d9:5a:2a:d3:37:fe:b4:c3:ee:90:5e:10:7b:
bf:69:ba:3c:69:49:7a:ef:73:7f:4d:fa:cb:72:5a:
58:a2:c2:dc:28:ba:f0:2e:c3:ba:00:d3:43:6c:18:
36:33:d9:cd:9a:3b:e0:90:a1:db:06:8a:5a:7a:25:
0a:54:3c:e5:af:f7:22:6b:b3:63:2f:b5:0f:32:96:
0b:50:81:03:f3:3b:1e:99:2a:e2:a2:e9:e8:6e:32:
15:80:ad:20:65:70:b4:ca:8f:d0:10:0d:d9:04:cd:
0d:32:d8:4b:15:cf:98:ff:53:57:1f:46:8f:ce:d4:
e9:16:0a:d3:49:e7:f3:6e:dc:f4:f7:da:ff:eb:dc:
c7:ae:d4:0a:06:e2:2a:20:11:bd:5f:b3:db:be:9b:
a0:d0:59:d5:56:b1:96:37:60:f4:7d:ea:22:17:5e:
1f:e0:3b:a9:96:36:d3:24:f9:34:8e:8f:60:86:96:
77:92:38:44:76:03:e6:40:7e:a7:1d:fa:6b:fb:2d:
c1:64:ff:5c:18:f4:8b:68:87:6b:b9:37:60:c2:8d:
ae:2d:b8:a6:cb:eb:05:94:b8:38:80:7d:d5:b6:c7:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EA:52:73:61:9F:64:07:B6:0A:FF:01:15:5A:22:FE:59:70:00:16
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/G-pSc2GfZAe2Cv8BFVoi_llwABY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:04:ae:0f:50:67:b4:91:a7:fe:b9:4c:cd:24:85:aa:57:f5:
35:b2:7f:fb:30:cd:22:e4:6c:00:0c:18:0a:5f:36:81:88:41:
a5:98:3d:79:5c:83:b5:50:0d:fa:74:2e:b6:3d:ae:ca:ab:33:
29:be:89:bc:f7:e9:73:61:3b:6c:69:d1:37:4e:61:63:54:e9:
ca:c8:c3:b3:5c:6a:f8:9b:a1:6e:b8:68:cb:37:39:1b:f7:72:
ed:0b:d3:d7:f6:20:c6:30:6d:b0:54:fe:96:cd:2e:ea:5b:ad:
c1:3a:4a:4d:de:28:a5:c2:b8:5d:91:8d:3f:6b:a8:5b:54:98:
50:bf:6d:e0:0f:98:d8:c9:e4:cd:96:e2:24:76:0e:91:b6:45:
0c:a7:e1:66:52:49:15:59:27:6e:89:7b:b5:27:8d:4e:e5:9a:
f3:df:76:b3:ec:e4:9f:f1:aa:ed:3a:ae:ce:04:62:ac:ab:9f:
c4:e1:6a:a7:56:82:8f:74:62:a5:49:3a:80:7f:e4:6e:9a:03:
1c:ff:a5:52:2f:d5:43:16:e7:c6:00:2f:41:29:6e:65:b6:3f:
26:06:91:6e:a2:e0:bf:e0:50:f9:cd:fd:e6:8d:65:4b:18:5e:
98:63:76:d0:73:f2:62:a2:92:34:fe:b7:5f:9d:f3:38:ed:bf:
f4:f1:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:25 2026 by rpki-client