Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/W8sim6WybBdd2AqmcZ_BjlYEWdQ.roa
File: W8sim6WybBdd2AqmcZ_BjlYEWdQ.roa (raw, json)
Hash identifier: 8IyVSVlKsdC9JA175MzSQY0spPJi3hGVeKvbVdA5UH0=
Subject key identifier: 5B:CB:22:9B:A5:B2:6C:17:5D:D8:0A:A6:71:9F:C1:8E:56:04:59:D4
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019E408AC52E9C79210EB5A17000D72661D8
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/W8sim6WybBdd2AqmcZ_BjlYEWdQ.roa
Signing time: Tue 19 May 2026 14:01:36 +0000
ROA not before: Tue 19 May 2026 14:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48988
IP address blocks: 153.80.192.0/20 maxlen: 20
153.80.198.0/24 maxlen: 24
153.80.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:8a:c5:2e:9c:79:21:0e:b5:a1:70:00:d7:26:61:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: May 19 14:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bcb229ba5b26c175dd80aa6719fc18e560459d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:20:88:76:49:38:f4:e1:cb:3f:96:e1:cf:
e7:7c:73:ae:77:a8:42:ef:48:a8:d0:64:24:22:03:
52:e7:fa:21:ab:7c:3f:fe:2b:c4:87:00:42:24:5c:
4c:56:46:dc:93:cf:23:d0:35:e3:1d:18:f8:83:68:
c4:b6:a7:7e:55:e4:61:8e:ea:2c:db:9d:1d:2f:3d:
4d:11:fb:a0:16:44:76:c4:76:a1:e7:62:70:e2:da:
a7:75:55:39:a9:c5:d2:70:b3:c4:2a:a9:6d:9b:4c:
13:f6:85:04:30:1d:2e:72:11:e3:2a:1b:b6:56:52:
9b:b5:ce:d8:80:54:22:31:6e:06:bb:25:fd:d5:67:
b0:05:0b:d7:4d:e4:2c:02:ef:70:32:1e:61:69:25:
59:e4:f9:8d:ef:e4:54:08:6f:a7:be:9c:57:72:c1:
c0:70:7f:1d:00:23:f7:3f:e7:7b:cc:cf:89:b2:8f:
e3:62:be:82:de:98:e1:21:a1:75:f4:d6:fc:2d:1e:
9e:f7:45:81:7c:ec:cf:ba:2d:79:4b:24:00:e0:a0:
1c:b8:2d:52:f1:91:9c:13:35:4c:3f:83:d3:4f:e0:
d3:b8:7e:d8:a6:63:cc:4d:a2:85:de:ce:31:2c:5b:
d2:06:79:a9:2c:01:b3:f7:49:37:ff:74:c4:39:7e:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CB:22:9B:A5:B2:6C:17:5D:D8:0A:A6:71:9F:C1:8E:56:04:59:D4
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/W8sim6WybBdd2AqmcZ_BjlYEWdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.80.192.0/19
Signature Algorithm: sha256WithRSAEncryption
39:76:5c:0d:16:f3:0d:b3:77:9b:ba:b1:1e:51:a0:b5:44:37:
60:7a:c1:ac:4f:c1:95:4f:3b:45:00:a2:41:27:f8:2d:0a:e7:
98:e5:79:a3:5a:2b:83:b8:4f:c0:12:6d:ab:86:51:a9:f3:ac:
c3:e2:62:08:9d:05:31:83:b1:32:e7:ed:c4:1e:c0:9c:67:40:
4d:46:b9:93:1b:a4:b9:74:e2:7e:68:a0:cd:0c:ff:71:15:37:
74:f0:ec:7a:ac:2c:72:a1:a6:a9:40:6f:79:3c:1a:a0:1b:d0:
f3:2d:90:3f:23:e4:28:5f:6b:d7:72:84:e0:65:3b:30:94:0b:
cb:d3:02:b7:f9:0b:dc:fa:fc:a4:2a:ef:96:f1:52:ff:0b:9a:
31:41:14:7c:a6:3e:11:8e:ce:2b:75:c0:0e:d0:69:17:ac:3c:
e8:2b:29:8e:2b:b8:b3:6e:b1:7c:a4:f5:37:d0:71:f5:bb:f1:
3f:07:b0:7c:0f:6c:c8:af:16:94:70:fa:ec:09:94:f0:48:0e:
40:08:29:9e:66:09:4e:1b:f1:a5:6e:42:ec:b6:23:ca:59:34:
16:83:02:1e:d2:78:6b:f8:84:78:56:20:ee:f5:bc:aa:84:4e:
4b:a7:ae:51:87:e0:65:23:79:90:32:fc:d3:ab:f9:1d:0d:91:
05:78:14:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:10 2026 by rpki-client