Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Iel3Ea-3rxsZQQ6iJD4-HfTuhhw.roa
File: Iel3Ea-3rxsZQQ6iJD4-HfTuhhw.roa (raw, json)
Hash identifier: TU3oVPvyWOIEJstN9ZVVdTsiXgUUc4Vlg6zQUCF02SE=
Subject key identifier: 21:E9:77:11:AF:B7:AF:1B:19:41:0E:A2:24:3E:3E:1D:F4:EE:86:1C
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01A06B80878D20F94B5A78EC23E01C3333CB
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Iel3Ea-3rxsZQQ6iJD4-HfTuhhw.roa
Signing time: Fri 04 Sep 2026 08:19:40 +0000
ROA not before: Fri 04 Sep 2026 08:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48624
IP address blocks: 176.56.64.0/19 maxlen: 19
176.56.80.0/22 maxlen: 22
176.56.88.0/22 maxlen: 22
176.56.91.0/24 maxlen: 24
176.56.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:80:87:8d:20:f9:4b:5a:78:ec:23:e0:1c:33:33:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Sep 4 08:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21e97711afb7af1b19410ea2243e3e1df4ee861c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:d5:60:b3:a3:a6:12:30:e9:d2:2a:ab:ff:
52:a6:90:40:af:95:5a:fe:4e:ee:80:bf:0f:19:96:
05:0e:fd:fe:5b:cf:6b:a3:ee:f7:29:4d:06:04:f6:
a2:57:16:da:4b:d6:4e:4b:22:d4:72:6e:9d:df:00:
ed:4b:f0:67:33:ed:db:17:13:fc:22:28:5a:02:3b:
89:2a:eb:ed:5f:f6:d1:fb:d8:25:81:30:71:e4:a6:
f4:a2:b0:14:a7:91:83:3b:eb:76:87:33:f4:c1:dc:
ba:68:6f:a2:61:c7:ef:c5:dd:43:c3:f7:50:da:3d:
bf:b2:56:3c:c6:41:8d:29:7a:83:c7:16:df:0e:1e:
2c:b7:23:40:5e:b7:8d:48:6e:61:11:2a:db:fb:0e:
42:1e:58:bd:78:2e:8d:95:cb:18:66:31:5f:09:4e:
f0:3d:14:ea:e1:89:42:c6:a3:ea:aa:eb:4d:62:2f:
c7:a3:5d:73:a9:9c:23:fa:b3:1e:eb:f0:b7:77:96:
50:b5:1f:0a:ac:2a:a5:e4:5d:48:61:70:94:62:8f:
64:0a:69:0c:06:73:e8:21:b5:e8:0c:23:9b:b3:1b:
5e:1a:6f:56:25:e6:1c:69:f7:71:7b:d0:b5:99:a8:
c6:49:18:9d:d1:9c:9d:40:33:fd:9e:bd:0d:5e:c1:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E9:77:11:AF:B7:AF:1B:19:41:0E:A2:24:3E:3E:1D:F4:EE:86:1C
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Iel3Ea-3rxsZQQ6iJD4-HfTuhhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.64.0/19
Signature Algorithm: sha256WithRSAEncryption
58:dd:16:e8:8f:7b:7a:c4:5e:ae:7a:b9:13:60:55:69:8a:5c:
b3:a4:15:13:8c:f0:d7:d4:b7:35:fe:77:7d:d1:d0:d9:bc:12:
c0:f0:bd:98:fc:41:d3:4c:fc:38:96:13:22:77:ea:88:5f:57:
b5:db:05:dd:cd:25:5b:e7:4c:9b:a3:93:0f:e5:d7:72:66:91:
0c:eb:ef:68:cf:f5:c7:82:37:ef:ea:15:81:aa:1c:69:cb:4d:
4a:5b:95:21:e8:d0:bd:d0:f7:5c:12:53:dd:20:fe:4f:3c:0a:
15:e1:62:cc:c3:39:79:c3:00:8c:ba:d6:66:39:21:16:38:90:
45:a0:ca:13:15:d1:fe:90:5e:e3:35:ad:fe:28:da:7a:5d:41:
9b:96:36:5f:08:ea:4d:d7:99:d4:ba:60:f9:2f:e8:e5:7d:56:
14:19:28:00:67:2b:79:ef:4c:18:59:d4:44:03:9a:36:6e:fc:
a6:bf:dc:20:6d:ad:a0:21:92:f1:0b:92:ff:d7:85:d7:11:b6:
74:0f:4c:ad:f7:d5:64:a9:30:70:2d:32:a8:01:7e:02:1f:e5:
72:06:b0:28:61:fa:cf:83:67:8b:21:3f:b9:4f:90:9e:2f:b3:
4f:a3:58:3e:dd:bb:c0:cc:99:89:6d:d2:02:f5:8e:6b:5f:cf:
11:fb:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:11:35 2026 by rpki-client