Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/orew-SZoJvPcTJUnedjnSBKBfbM.roa
File: orew-SZoJvPcTJUnedjnSBKBfbM.roa (raw, json)
Hash identifier: 8roQZwcvJWWnQRl6cSbABAI9tipciWJXmPX/Azw+0F8=
Subject key identifier: A2:B7:B0:F9:26:68:26:F3:DC:4C:95:27:79:D8:E7:48:12:81:7D:B3
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019A24A8F1FAE852E2F51AE6C43F25B6E69E
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/orew-SZoJvPcTJUnedjnSBKBfbM.roa
Signing time: Mon 27 Oct 2025 07:54:02 +0000
ROA not before: Mon 27 Oct 2025 07:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 5.56.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:a8:f1:fa:e8:52:e2:f5:1a:e6:c4:3f:25:b6:e6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Oct 27 07:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2b7b0f9266826f3dc4c952779d8e74812817db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:b9:bf:14:a4:41:47:b1:da:0f:90:29:5b:
4f:b6:1a:01:30:c5:51:bd:cc:e2:2f:3f:07:af:9e:
f5:13:ca:4c:fd:c7:7d:b3:2a:50:39:02:ac:d8:b4:
2e:67:9d:bd:2e:23:13:4d:3a:ac:1d:33:54:a1:dd:
21:37:4a:95:14:2b:62:f1:5a:1b:3b:aa:6e:ec:d8:
6b:2e:ac:a1:7c:aa:1c:fa:9e:27:7d:c6:a1:95:6e:
96:d9:31:07:a6:a0:86:4e:4f:82:82:71:e4:92:bc:
1d:57:9b:54:8c:fc:71:4a:e0:a4:4e:14:f2:36:1f:
be:17:4a:84:23:c7:8d:03:35:9d:da:8d:65:4e:fe:
b9:9a:2b:06:a6:21:b7:ba:f1:bd:94:b1:08:c5:25:
8f:1d:77:1c:f0:e8:fb:51:46:a1:f8:6c:46:4e:5b:
50:9d:50:f3:ee:d1:86:41:8e:63:81:02:af:5d:13:
36:66:3c:9d:d8:e2:55:1f:03:af:18:a3:da:a7:30:
7a:86:7a:44:cb:be:06:bf:0a:e2:5a:b0:28:d2:7e:
74:45:26:97:3b:b6:36:87:39:68:c4:a3:85:b1:8a:
c0:74:01:83:3b:0a:37:b7:cc:1c:25:58:13:28:fd:
70:7d:50:40:5b:d2:ed:36:f0:df:e5:5b:f0:5b:ec:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B7:B0:F9:26:68:26:F3:DC:4C:95:27:79:D8:E7:48:12:81:7D:B3
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/orew-SZoJvPcTJUnedjnSBKBfbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:11:3a:a2:67:f5:ef:04:ad:54:bc:30:f7:c5:a9:23:19:ba:
f7:8e:45:68:ef:78:97:f7:fc:9c:9c:a2:d7:2a:ad:3d:07:ae:
76:3b:0e:f2:f6:ff:fe:3d:d2:85:9e:e3:2a:6e:4e:93:30:85:
6a:e3:24:04:8f:89:33:2e:fd:a9:c4:e9:11:d4:47:fb:04:13:
49:d5:38:3a:ea:02:43:78:fe:9c:55:6c:3b:92:77:ff:94:91:
8c:a6:23:dc:de:e2:60:4f:e8:61:00:de:15:b3:91:1e:5e:d0:
cf:9d:27:da:b6:f0:7e:c5:28:08:4e:ca:3e:02:f9:96:96:82:
02:24:09:ee:80:5e:ea:ed:61:ff:e0:ca:7e:b4:c7:d3:bf:2e:
c7:41:3e:2b:6c:3c:8e:0e:02:cf:1a:5f:e1:1f:07:4c:e5:37:
37:7d:2b:d6:7e:da:e2:c7:1e:e3:15:60:5b:da:d6:4d:f9:35:
35:d0:1d:a1:77:fb:c5:8d:2e:5f:15:cc:21:3f:93:33:43:a7:
7d:24:e5:d9:a2:49:88:55:72:0d:2c:7e:ef:34:6f:5a:80:ac:
63:78:3e:71:bf:a5:9f:e2:19:5f:8d:4f:6a:f0:7d:12:78:fe:
53:66:32:d2:4d:4d:bb:64:4d:f7:79:e2:ea:ba:54:54:c5:3f:
08:20:59:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:39:50 2025 by rpki-client