Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/H1FxR3lsZeaaxaUL76X_AXEsmFw.roa
File: H1FxR3lsZeaaxaUL76X_AXEsmFw.roa (raw, json)
Hash identifier: Dx2fttv2xm/avvPL3cDG4ptacElYPtPXnn8b4aHQDDQ=
Subject key identifier: 1F:51:71:47:79:6C:65:E6:9A:C5:A5:0B:EF:A5:FF:01:71:2C:98:5C
Certificate issuer: /CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Certificate serial: 019E97AFEE95014C2508A51ED053BF9605BA
Authority key identifier: 4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/H1FxR3lsZeaaxaUL76X_AXEsmFw.roa
Signing time: Fri 05 Jun 2026 12:09:09 +0000
ROA not before: Fri 05 Jun 2026 12:09:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 185.130.5.0/24 maxlen: 24
2a07:db01:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:af:ee:95:01:4c:25:08:a5:1e:d0:53:bf:96:05:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Validity
Not Before: Jun 5 12:09:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f517147796c65e69ac5a50befa5ff01712c985c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:5b:c2:2a:69:55:46:bb:6b:d8:be:38:bc:
ab:41:a8:ec:71:5a:01:ac:f5:e4:ec:05:48:f4:f9:
3f:34:34:67:05:50:af:ad:6b:80:c0:fd:0a:9a:f1:
0c:90:ab:ef:d2:2d:a0:77:84:f8:98:3e:f9:50:8a:
75:c2:95:98:5a:23:5f:36:4e:58:41:c8:a4:03:5d:
07:d2:12:9c:37:7e:34:bc:88:c6:ef:cd:d9:25:bc:
ca:da:c9:4a:a4:e6:b4:19:b9:d3:de:8b:53:97:1c:
09:05:31:2b:b3:29:fe:59:db:6d:b8:2f:52:5d:b8:
8a:ce:ec:8f:ea:c5:48:ab:c4:ed:44:b9:8a:4f:7c:
62:4b:8f:78:90:84:ec:77:ea:b8:8c:ba:21:0e:f9:
7d:33:3c:ee:95:58:75:c4:ba:ce:d2:31:f1:fc:1d:
8c:ae:ee:a3:86:37:d1:b8:1a:79:98:45:6c:96:f4:
43:2f:35:18:12:00:2b:96:ad:19:86:a9:34:b5:3d:
ad:49:c6:9d:f7:3f:b7:e9:7e:d7:6e:a5:70:4f:68:
72:a3:60:64:9f:08:f3:d8:e7:43:9b:58:6a:fb:e0:
a7:c7:6a:c2:85:5a:3e:86:e3:4c:4d:07:b5:53:f5:
25:66:b8:4e:42:3d:27:48:8b:2a:1a:2e:be:fa:c5:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:71:47:79:6C:65:E6:9A:C5:A5:0B:EF:A5:FF:01:71:2C:98:5C
X509v3 Authority Key Identifier:
keyid:4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/H1FxR3lsZeaaxaUL76X_AXEsmFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.5.0/24
IPv6:
2a07:db01:5::/48
Signature Algorithm: sha256WithRSAEncryption
a3:5f:39:96:21:2e:55:74:9b:2d:8a:07:69:20:cf:57:f2:08:
06:b8:79:7d:89:f2:21:b6:17:6a:f3:4f:d8:31:9c:7f:41:5e:
2f:90:2d:00:c3:9f:60:35:86:33:e2:e5:9a:fd:fd:c2:ce:23:
d6:96:90:24:c4:37:81:9a:89:d6:ea:54:2e:93:56:e9:9f:24:
d6:f8:50:5e:a3:2e:91:72:c1:a4:d3:8c:d5:67:aa:dd:52:29:
cf:ff:5c:5b:ee:dd:82:c4:2c:57:3c:91:0b:3e:73:cc:97:f4:
86:9a:f1:2e:33:bb:b5:e6:ab:af:62:27:e4:5c:35:7e:eb:cd:
fd:43:ac:85:74:f2:6d:79:b9:80:1b:e4:4c:84:ea:c7:e2:b0:
de:de:d7:35:58:e8:b5:62:f1:91:de:3a:75:05:28:98:dc:44:
8b:ca:25:f2:f1:59:1b:e4:a6:0a:3e:bd:c9:53:f3:12:c0:8c:
97:1c:f5:0c:22:12:41:40:b8:27:b5:45:63:f8:5f:50:56:05:
96:1d:32:e7:b4:1b:38:4f:94:3d:e3:5e:9e:56:75:18:46:87:
99:d2:c2:7c:8e:84:46:4d:9c:15:3b:d8:90:a5:d9:ee:cd:9a:
b3:37:d3:f4:21:aa:b5:6b:e2:07:4a:cd:91:1e:02:ed:0b:5e:
dd:9b:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:35 2026 by rpki-client