Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/KSzhsb12L_SbJ8SiiZFHKItz1D4.roa
File: KSzhsb12L_SbJ8SiiZFHKItz1D4.roa (raw, json)
Hash identifier: wLz0bxuU+olF8q1ou9HeUwxaDuGJ8KOtDT5T7I9gLi8=
Subject key identifier: 29:2C:E1:B1:BD:76:2F:F4:9B:27:C4:A2:89:91:47:28:8B:73:D4:3E
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019EAE4583D7F075402CA13CC3A1B6806EEA
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/KSzhsb12L_SbJ8SiiZFHKItz1D4.roa
Signing time: Tue 09 Jun 2026 21:24:11 +0000
ROA not before: Tue 09 Jun 2026 21:24:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 5.56.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:45:83:d7:f0:75:40:2c:a1:3c:c3:a1:b6:80:6e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jun 9 21:24:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=292ce1b1bd762ff49b27c4a2899147288b73d43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:0b:ed:33:01:2b:a1:95:ea:e4:05:9b:4a:
09:35:23:86:79:58:68:c3:95:02:71:86:1b:b8:dd:
99:5b:6d:59:aa:a7:21:77:f7:0d:90:83:48:6f:f7:
3f:66:b6:78:cd:bd:bd:55:9f:49:9b:28:3c:81:b5:
dc:83:93:5e:52:ee:ef:75:6f:45:8e:88:e9:1c:3f:
2a:0e:9e:37:8c:02:71:6e:b7:29:e7:91:fb:fd:10:
18:8b:2a:9c:9a:05:07:8b:8b:f3:5d:06:9b:6a:e0:
8d:9b:d7:72:35:0f:ec:0c:f5:74:db:9c:93:10:42:
c4:19:5d:b3:47:e1:e5:94:98:9d:07:81:77:01:bc:
ac:6f:13:9b:f7:6d:92:d3:8e:60:17:ba:db:98:24:
ea:71:16:5c:d0:d3:1c:80:0e:40:98:0d:53:c2:14:
4b:cf:17:cc:4a:30:ab:27:65:70:78:e6:fb:44:98:
39:6e:81:bc:72:4d:80:62:23:11:21:b2:8c:d5:d1:
e0:84:d5:87:63:ad:3f:c5:1e:02:92:cb:a3:b6:86:
e4:29:7d:60:9d:94:ca:bc:a4:76:ad:c1:00:05:13:
d3:c8:00:9f:bb:95:67:9d:a7:29:ba:e4:6b:20:87:
c5:92:2f:9c:e5:57:9b:1d:1e:c5:f5:ea:82:8b:29:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2C:E1:B1:BD:76:2F:F4:9B:27:C4:A2:89:91:47:28:8B:73:D4:3E
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/KSzhsb12L_SbJ8SiiZFHKItz1D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.29.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0d:aa:0e:6e:a6:ef:78:11:82:bd:70:34:b9:18:7c:00:f0:
92:bd:66:40:b7:ef:98:47:d9:79:e8:5f:fc:4e:07:a0:44:ed:
90:51:b2:37:5b:7b:c2:56:e5:12:65:87:bd:5b:22:83:78:05:
a0:de:93:08:ba:87:ed:61:a4:7f:ad:f8:3e:fd:df:bc:a9:68:
4a:3c:02:06:92:28:d1:e7:d8:b4:21:84:0b:27:db:34:18:1a:
d4:f8:dc:c2:14:67:ed:0f:2b:56:2f:f3:7c:fe:a4:87:52:6b:
45:d2:7d:c8:a4:df:93:c4:d1:2e:bd:8c:f3:0d:9c:aa:38:a8:
1f:8f:f6:a4:95:6f:71:16:a6:dc:01:03:a2:a3:ae:5a:52:22:
a6:a5:10:bb:f8:96:eb:1e:cf:f1:47:da:b0:90:7b:ed:4b:02:
44:18:06:08:b2:47:f8:4f:1c:2d:b1:d5:68:0b:91:bb:cc:43:
a7:31:8f:71:44:bf:c5:8f:e1:30:51:53:50:1c:34:a3:3f:2a:
b8:17:fb:53:cf:da:f2:6f:ea:11:12:28:9e:4a:09:a8:08:e3:
c0:ff:98:1e:1c:99:98:19:23:bf:14:b1:9b:ee:ea:cb:1d:d6:
ac:16:86:62:86:08:eb:35:b8:09:da:77:12:4e:cf:3f:1a:42:
83:bb:c5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:21 2026 by rpki-client