Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/iTEBApGbXIQld6L8Gn4Udz3xB-U.roa
File: iTEBApGbXIQld6L8Gn4Udz3xB-U.roa (raw, json)
Hash identifier: HMQe1B8krTvbu6yUHhju4zyKwvmO6+uDtYtQV221HaQ=
Subject key identifier: 89:31:01:02:91:9B:5C:84:25:77:A2:FC:1A:7E:14:77:3D:F1:07:E5
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 019FA43834F6AE1A6640D32478A182251687
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/iTEBApGbXIQld6L8Gn4Udz3xB-U.roa
Signing time: Mon 27 Jul 2026 15:36:14 +0000
ROA not before: Mon 27 Jul 2026 15:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203917
IP address blocks: 5.181.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:38:34:f6:ae:1a:66:40:d3:24:78:a1:82:25:16:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jul 27 15:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89310102919b5c842577a2fc1a7e14773df107e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:31:4e:7d:b6:6a:cb:9f:3c:b4:2f:8b:b5:
11:b7:30:4a:35:3e:af:4d:23:fa:41:69:8c:61:78:
e4:a3:0b:a8:bb:d6:72:b1:73:33:69:02:05:26:d9:
a0:e5:6b:70:9a:42:11:6f:24:92:2d:92:ac:fc:b2:
c8:bf:e8:0e:e7:5f:24:e4:b2:98:8a:f3:48:ac:35:
09:99:b1:ed:29:08:c2:cb:28:dd:7c:0c:c1:54:e2:
28:d9:02:26:77:51:06:b0:95:87:b1:96:c8:c3:cf:
ce:c8:f2:11:12:6b:b1:b7:d8:b6:a7:b5:a1:8d:e9:
27:88:20:fc:ef:44:9c:2a:73:1d:47:2f:62:1d:89:
8f:ce:df:d5:0b:12:64:5e:0d:3b:b1:92:02:59:14:
c5:40:90:a6:03:d1:1a:05:c2:93:97:5d:ed:83:75:
e0:f7:6c:24:1a:02:7e:0d:ff:65:fd:dc:00:e3:c5:
9d:e2:95:66:68:0a:18:b9:66:04:d2:c2:82:e9:d8:
e8:2a:3a:d6:5f:66:42:4f:f5:d1:b2:9a:0f:40:b1:
cf:57:02:2f:79:cb:97:24:57:0f:c1:82:f7:33:3a:
53:c8:df:90:b6:a7:8e:0b:2d:35:74:da:70:ed:37:
77:af:f4:3e:04:fd:65:19:8b:39:b8:f2:90:2a:cc:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:31:01:02:91:9B:5C:84:25:77:A2:FC:1A:7E:14:77:3D:F1:07:E5
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/iTEBApGbXIQld6L8Gn4Udz3xB-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:5a:ec:89:1b:86:f1:f9:63:d4:1b:09:5e:1d:37:9a:ad:e7:
fc:4d:3b:f5:6f:c8:52:b0:ef:81:4f:53:3d:85:96:bc:eb:ec:
c2:31:71:71:62:88:d7:7b:73:59:6c:52:e9:4e:e6:95:8f:60:
c8:0d:93:6b:49:96:fb:3a:2a:73:31:0e:7c:a0:cf:5c:ff:89:
94:71:17:41:f3:0e:80:e0:20:a1:e7:19:67:ae:83:5f:54:2c:
c7:09:b8:a2:e9:86:62:db:e4:b7:9b:02:69:40:24:69:b0:ac:
35:85:14:bf:c5:7c:4b:47:ff:9a:f2:a5:41:a3:54:a5:36:5a:
10:4b:6d:6e:c1:ee:a6:b3:4e:de:b0:42:74:d5:d4:51:34:3a:
ca:9f:e2:56:fe:21:f9:41:06:61:64:5b:8a:33:98:23:3f:a5:
e2:8a:b4:39:2f:6f:74:24:11:7a:61:b7:5a:f3:e9:7c:db:6d:
f2:fe:fb:32:76:0e:73:2f:a8:a9:e3:1d:70:b1:ea:4f:4e:34:
57:75:8b:60:85:ed:df:5c:f5:b6:a8:fa:74:7d:53:a3:8a:b1:
d6:38:2c:77:c3:db:2a:c9:49:81:c6:15:a1:ca:21:7f:9c:9a:
15:aa:b3:2a:76:98:38:18:17:b2:9e:bf:94:df:6c:48:92:79:
0b:34:c1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:34:48 2026 by rpki-client