Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/OwOin32AoXhBJ_iuSSZtdUpdHEA.roa
File: OwOin32AoXhBJ_iuSSZtdUpdHEA.roa (raw, json)
Hash identifier: r6AonYcdKDjFrDRqsif54MlJGphnOtEytVNCx0qvCio=
Subject key identifier: 3B:03:A2:9F:7D:80:A1:78:41:27:F8:AE:49:26:6D:75:4A:5D:1C:40
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 019F03A55BEB31BDB15ACBA7A2C27B9D1FD4
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/OwOin32AoXhBJ_iuSSZtdUpdHEA.roa
Signing time: Fri 26 Jun 2026 11:16:36 +0000
ROA not before: Fri 26 Jun 2026 11:16:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274852
IP address blocks: 158.172.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:a5:5b:eb:31:bd:b1:5a:cb:a7:a2:c2:7b:9d:1f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jun 26 11:16:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b03a29f7d80a1784127f8ae49266d754a5d1c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:ce:08:89:bf:92:a4:61:c5:32:03:8b:29:
67:58:5b:30:87:19:5b:bb:ca:8d:ac:84:7b:04:f8:
76:e3:bf:f5:d2:3e:a3:a3:8f:82:49:4c:9f:95:17:
63:16:ad:ce:65:00:2a:b1:a8:19:51:fd:d7:e2:6a:
b8:11:ff:02:62:5f:c8:f4:55:02:5a:ff:51:86:58:
8e:0c:58:92:2f:9b:98:ee:26:c2:18:ea:25:4d:9b:
12:69:ac:99:72:68:fe:ee:90:68:54:4a:2e:7e:be:
f9:99:67:0e:1d:3d:72:5f:32:83:ad:96:9d:6a:1f:
67:da:f3:5e:ae:e4:1f:75:cf:b1:72:55:f0:43:5c:
a8:e4:37:55:9c:df:4f:74:07:09:53:0c:95:5a:a5:
12:00:5f:66:67:76:16:89:9d:0d:db:2c:67:32:f2:
50:30:5c:c2:9f:0f:e8:e3:f3:44:79:a1:3d:bb:be:
0c:fa:71:eb:4a:4f:50:91:1d:36:d1:3f:ca:0a:13:
e3:a3:bb:21:8b:0d:e6:0b:45:ae:95:c0:9f:ad:bc:
f5:4f:b8:de:49:84:2d:7b:4f:f5:44:fd:88:1c:8b:
31:5a:3b:7f:12:9a:6b:8e:5f:cb:4d:a9:c9:d7:19:
55:a2:b1:e5:d3:12:41:94:f8:c6:6e:ea:0d:8c:b5:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:03:A2:9F:7D:80:A1:78:41:27:F8:AE:49:26:6D:75:4A:5D:1C:40
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/OwOin32AoXhBJ_iuSSZtdUpdHEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.176.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:51:da:04:8f:26:ef:70:81:01:6d:fa:30:80:26:22:1a:c0:
74:0b:ac:4e:20:cd:f3:94:30:bc:f7:e4:8c:6b:80:16:0d:4e:
d5:eb:52:91:d1:83:ca:da:d7:a0:f3:6c:46:ad:56:40:fb:ca:
38:30:a0:db:f2:8a:ed:62:34:26:31:3b:9d:a9:7c:fd:64:89:
5d:4f:ed:ef:b5:5d:51:30:85:4c:88:a7:e0:09:e6:e9:bd:db:
65:53:9b:e9:ee:3d:a8:07:4e:99:e2:a8:f4:fb:7d:ad:41:92:
ca:db:7b:56:3e:46:fb:a6:c8:d6:7d:d3:07:c0:bf:41:a1:f1:
51:c7:34:fc:1a:a2:03:a8:c1:6e:4f:b9:1c:98:13:99:a7:08:
af:43:e2:b4:6f:45:ad:11:81:1d:c8:57:c5:40:c0:c6:5a:57:
40:8e:53:28:5f:79:6a:08:96:bf:77:19:5f:e9:03:e0:c2:c3:
24:b7:46:0c:c5:57:12:b4:4b:ba:e1:75:4d:b6:1b:ef:71:c9:
02:68:98:33:33:3a:ff:55:f2:50:ac:c9:fc:eb:85:91:1d:fd:
ec:ce:3c:8b:a4:d4:47:a9:ad:c6:66:60:3a:fd:13:2e:c9:bc:
8b:ff:95:46:28:e3:53:0a:1c:81:01:21:90:e2:e9:87:ff:25:
93:f2:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:11 2026 by rpki-client