Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/neBBgA0odZn9GDyZaXqqlQXbshQ.roa
File: neBBgA0odZn9GDyZaXqqlQXbshQ.roa (raw, json)
Hash identifier: SS0fdHDxh+zKYI6XDqiq1C8iUD2E0IhJks3vTraThww=
Subject key identifier: 9D:E0:41:80:0D:28:75:99:FD:18:3C:99:69:7A:AA:95:05:DB:B2:14
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019D2BE407929F9B3A075FD7316343918954
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/neBBgA0odZn9GDyZaXqqlQXbshQ.roa
Signing time: Thu 26 Mar 2026 20:44:17 +0000
ROA not before: Thu 26 Mar 2026 20:44:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53850
IP address blocks: 5.56.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:e4:07:92:9f:9b:3a:07:5f:d7:31:63:43:91:89:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 26 20:44:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9de041800d287599fd183c99697aaa9505dbb214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:d5:ad:2f:7e:18:02:5d:c5:ce:76:68:6d:
6b:05:bd:73:c1:49:23:89:09:1c:0a:6c:7e:bb:b3:
cb:3a:15:d7:a3:7e:3f:c8:57:7b:4a:78:0c:22:6e:
74:60:d7:f4:8c:2f:5a:ff:31:60:e8:cc:8c:9a:ad:
3d:e0:62:11:18:70:36:a2:72:0e:39:15:54:79:ad:
e2:4e:62:fb:25:90:63:dd:2f:d3:54:c7:50:9f:ce:
bd:f3:e3:c3:fc:2a:b2:f6:96:a8:0b:cb:e0:b8:e6:
c5:75:59:35:f0:ff:9f:e9:53:fd:a7:6b:5d:38:1f:
cb:da:2e:52:6d:20:59:8e:5b:a7:b8:ab:c0:47:0a:
1d:79:a0:1a:24:44:9a:3b:71:ea:47:ab:b0:c7:31:
31:1a:53:08:29:6f:83:27:90:7b:7a:c6:36:db:61:
90:38:48:2e:1c:ba:77:c5:c2:51:2d:ec:0a:97:df:
89:ba:33:4c:90:34:10:9a:11:fb:2c:47:7b:93:39:
85:e5:49:60:e0:10:46:62:bc:40:b6:80:2c:92:34:
4d:00:4a:e3:dc:83:52:f5:f8:97:67:d3:f2:a8:e3:
f8:b4:ab:f1:cb:ee:6f:1f:2c:26:e3:b5:3d:52:48:
6b:30:1b:72:1a:ca:e7:15:c7:23:cf:5a:7d:a7:8d:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E0:41:80:0D:28:75:99:FD:18:3C:99:69:7A:AA:95:05:DB:B2:14
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/neBBgA0odZn9GDyZaXqqlQXbshQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.25.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:e4:e6:7c:4b:39:28:35:19:29:83:e9:4d:ac:10:e3:76:e3:
f5:1b:09:b5:7c:6b:18:9a:2e:b1:82:1d:1e:72:62:23:8a:02:
e5:42:e7:6c:da:a2:42:8f:ac:a0:fa:c1:44:e2:0f:6f:44:33:
a9:89:96:72:02:09:61:71:4a:74:8d:63:49:b5:67:5a:d2:2b:
57:d8:a4:ec:80:f6:ad:7b:c3:d8:a4:69:fc:d8:80:67:03:98:
85:02:e6:82:13:88:54:5a:06:4e:90:21:0b:e7:80:6f:ec:59:
f6:20:d7:ea:b9:9a:38:c6:f0:f0:b4:b5:50:50:54:da:1f:34:
0a:b8:0c:c3:22:54:a3:35:f1:a6:2b:0b:ee:ee:5c:43:0a:af:
ee:25:91:3c:77:bf:90:a7:a2:78:2c:47:10:27:4b:a0:be:fb:
c2:a4:f3:04:8c:e2:b2:63:eb:68:83:64:6c:38:82:98:2a:16:
fc:55:18:d9:76:2e:0c:ae:4f:a5:2e:13:e7:4c:1f:bd:99:31:
ae:0f:d3:84:62:49:bc:ac:4c:a9:a1:80:1d:a6:95:24:88:01:
6f:7a:c3:1d:d2:78:84:cf:36:e5:fe:72:1b:42:45:eb:df:b0:
d4:46:6a:d3:88:45:81:a8:da:dc:b7:cf:6a:66:47:42:f7:2f:
c1:99:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:30 2026 by rpki-client