Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/lUZbq53-e2beVUnIcCmk_r5xSWE.roa
File: lUZbq53-e2beVUnIcCmk_r5xSWE.roa (raw, json)
Hash identifier: 3zeY9Wov3S/TjWt6YqkrG5O2fC3Yl7hArdx5k+jhibU=
Subject key identifier: 95:46:5B:AB:9D:FE:7B:66:DE:55:49:C8:70:29:A4:FE:BE:71:49:61
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 01A01609F9B0F7ACF763CE2DF5B650ECC29C
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/lUZbq53-e2beVUnIcCmk_r5xSWE.roa
Signing time: Tue 18 Aug 2026 18:02:27 +0000
ROA not before: Tue 18 Aug 2026 18:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199143
IP address blocks: 5.158.216.0/24 maxlen: 24
5.158.217.0/24 maxlen: 24
5.158.218.0/24 maxlen: 24
5.158.219.0/24 maxlen: 24
5.158.220.0/24 maxlen: 24
5.158.221.0/24 maxlen: 24
5.158.222.0/24 maxlen: 24
5.158.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:09:f9:b0:f7:ac:f7:63:ce:2d:f5:b6:50:ec:c2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Aug 18 18:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95465bab9dfe7b66de5549c87029a4febe714961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:92:a9:6e:88:29:c4:8f:2e:0b:a9:94:df:
c6:70:f9:1e:9c:4e:99:ab:68:93:01:4b:be:ae:88:
06:d2:5e:25:04:0e:7d:da:40:91:9f:fb:75:43:ef:
00:05:83:64:d6:75:9e:2d:84:de:67:4a:d1:14:db:
05:d5:2d:92:e5:76:69:97:a1:5e:07:55:03:ba:e3:
5c:cb:da:09:4a:69:0f:ba:ff:1f:5a:bc:76:a0:27:
1e:a2:56:ec:9a:f6:0d:62:07:be:89:b2:ce:d0:98:
94:c2:b1:00:e3:ab:82:f2:8a:e5:ee:d9:ac:c0:60:
ae:91:af:39:6e:ba:39:b4:7c:43:eb:7a:01:fe:9e:
32:e8:8d:9c:b6:e5:a2:f0:33:00:e5:6e:4b:95:a1:
24:49:ec:25:4a:ff:23:6a:5e:b4:67:c0:97:6e:af:
47:d2:f8:7c:cb:8f:8a:ef:b0:a4:31:8f:d1:11:f3:
87:1a:a2:a4:aa:d1:72:80:51:08:09:9f:6c:5b:50:
ad:0d:80:11:32:da:3d:ec:0f:e0:50:48:6d:9f:f7:
15:00:0b:69:eb:1a:79:e7:9b:6b:78:b1:d0:20:e1:
d2:09:cd:bc:ae:88:2c:35:43:a0:58:9e:26:6b:50:
d4:b3:71:0b:8b:51:47:dc:1d:f6:50:eb:70:94:79:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:46:5B:AB:9D:FE:7B:66:DE:55:49:C8:70:29:A4:FE:BE:71:49:61
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/lUZbq53-e2beVUnIcCmk_r5xSWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.216.0/21
Signature Algorithm: sha256WithRSAEncryption
76:77:d2:1c:d4:31:5f:fa:46:3a:1e:31:89:ac:09:36:d9:ee:
22:72:00:6e:2c:15:83:44:7e:07:e2:8d:04:a0:74:32:2a:1d:
80:ce:61:eb:40:f4:b7:ac:c5:b7:51:21:80:39:05:12:32:dd:
4e:c2:71:fb:35:c4:63:6e:7e:4f:41:bf:8e:1a:b2:c8:b8:be:
90:3b:02:12:41:5d:ed:98:e1:c0:0d:34:e6:00:ff:8e:96:35:
1a:ca:51:4e:44:98:4d:5d:a1:61:25:09:c5:83:bb:07:31:4d:
48:37:23:15:6f:85:1b:6b:ba:41:9a:e4:30:6f:f0:df:48:71:
3b:60:59:65:d0:ab:46:d4:02:ce:d4:eb:57:3b:13:0c:7b:2b:
fe:8d:e2:e2:cd:5b:e1:51:0e:03:87:3c:c7:22:cf:00:dd:93:
b0:53:81:84:4a:c1:4b:68:82:2a:1e:15:8c:e2:a0:60:37:4d:
16:60:0b:3e:f6:48:9d:a5:0e:57:64:ee:d4:f8:7b:77:22:3a:
b9:eb:60:b8:d0:c6:14:23:03:fa:d5:42:00:3f:b4:4c:ac:12:
8a:0d:7d:f1:bb:74:cd:99:96:da:c0:de:c1:c8:39:63:7f:4c:
3b:f7:9c:e6:a3:cf:c2:8f:35:84:27:4e:03:9e:69:32:1d:30:
5f:3c:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:46 2026 by rpki-client