Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/RRuTgob8nWF_H0-2A1kaE1z7gDM.roa
File: RRuTgob8nWF_H0-2A1kaE1z7gDM.roa (raw, json)
Hash identifier: 1JL+wPq9FDdgxrK5s7w8LuDxomHYJw19S/iTZj0V9/A=
Subject key identifier: 45:1B:93:82:86:FC:9D:61:7F:1F:4F:B6:03:59:1A:13:5C:FB:80:33
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019FA93732ED821E89C17A371BD6190E3EF3
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/RRuTgob8nWF_H0-2A1kaE1z7gDM.roa
Signing time: Tue 28 Jul 2026 14:53:14 +0000
ROA not before: Tue 28 Jul 2026 14:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198410
IP address blocks: 153.56.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:37:32:ed:82:1e:89:c1:7a:37:1b:d6:19:0e:3e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Jul 28 14:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=451b938286fc9d617f1f4fb603591a135cfb8033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:0a:01:cc:30:7b:85:e4:3f:cd:47:e1:14:
65:db:7b:66:e8:5f:1b:ed:97:73:4f:ff:1e:43:dc:
93:5c:64:c9:88:dc:e7:f3:06:7f:25:95:ff:1d:7f:
e8:66:bc:61:2d:90:aa:c2:f7:96:14:44:80:de:0b:
ca:f7:93:78:eb:f1:09:ab:83:99:70:d1:f8:78:e2:
3f:6c:1a:92:75:08:04:60:fc:91:0b:02:02:4f:43:
25:ff:f1:70:09:2d:02:db:27:48:b3:d9:2e:cb:9d:
7a:ef:6e:00:c2:79:8c:0c:70:6a:34:a5:64:84:f5:
62:3b:5b:90:55:64:4c:63:69:be:d5:2b:17:d9:db:
b4:09:cb:44:ad:94:70:1b:25:13:64:59:c4:15:12:
22:f2:55:f6:c5:21:06:b1:8a:40:c0:2d:d9:4f:9d:
d4:75:1b:35:68:7c:dd:f4:50:80:24:00:cd:fa:ef:
e7:b9:86:6e:c4:0f:39:47:7c:35:03:19:2a:04:2f:
d5:d8:c5:39:95:54:2d:95:a6:42:bb:44:48:55:78:
7f:80:8d:e9:c7:55:7b:16:9a:eb:fe:dd:5e:96:21:
26:8b:89:36:6f:c7:e8:38:e9:28:51:01:88:54:bf:
a6:db:ea:e2:06:bc:1c:73:4f:ab:d2:f6:60:b0:26:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1B:93:82:86:FC:9D:61:7F:1F:4F:B6:03:59:1A:13:5C:FB:80:33
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/RRuTgob8nWF_H0-2A1kaE1z7gDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ef:27:fe:78:65:7b:b1:be:98:de:9b:95:7d:f9:39:ff:0c:
60:35:3c:aa:b8:8a:70:19:c7:95:fe:d8:cd:c3:e1:d9:c3:73:
67:e2:1d:f9:89:33:e7:96:25:1f:6b:b0:4e:c0:e5:96:c2:7b:
51:41:a9:6b:fe:66:7e:a0:19:55:4c:4d:5b:00:28:d7:50:bd:
3f:29:e1:c6:92:c9:c6:e3:1c:4b:23:b9:c6:29:8a:3b:da:d6:
4e:46:b1:43:a4:33:3f:d5:cd:69:8a:c1:28:60:50:3f:3e:f5:
08:67:93:be:00:59:ac:a3:8a:7c:3c:68:97:65:ca:c0:12:89:
4b:c2:35:2c:f1:0c:e0:f5:a3:de:86:36:40:4f:91:0e:c9:27:
ff:cc:81:20:c0:2a:d8:e4:b9:bf:9a:22:71:ad:bb:28:44:6e:
a1:ca:27:66:ad:6d:6a:25:7b:d9:1b:24:f4:ed:8d:85:01:e1:
de:60:6e:5b:1b:8a:10:59:2e:82:d0:5f:52:dc:41:f3:cd:a2:
cf:fe:15:3b:bb:61:47:22:0c:aa:7f:89:f4:b2:6d:bf:26:c0:
e5:13:2e:a7:90:8f:68:e4:de:df:33:31:8f:55:39:20:b5:71:
b2:cd:e5:cf:a4:fc:c3:74:5c:bf:57:df:35:f3:cc:76:61:16:
e1:5e:45:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+pNzLtgh6JwXo3G9YZDj7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWMxNmY3ZWE3MTBhZjQ1ZTJiM2ExMWU2MjhhMzhjZTY3
YmM3YTUwHhcNMjYwNzI4MTQ1MzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTFiOTM4Mjg2ZmM5ZDYxN2YxZjRmYjYwMzU5MWExMzVjZmI4MDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTIKAcwwe4XkP81H4RRl23tm6F8b
7ZdzT/8eQ9yTXGTJiNzn8wZ/JZX/HX/oZrxhLZCqwveWFESA3gvK95N46/EJq4OZ
cNH4eOI/bBqSdQgEYPyRCwICT0Ml//FwCS0C2ydIs9kuy516724AwnmMDHBqNKVk
hPViO1uQVWRMY2m+1SsX2du0CctErZRwGyUTZFnEFRIi8lX2xSEGsYpAwC3ZT53U
dRs1aHzd9FCAJADN+u/nuYZuxA85R3w1AxkqBC/V2MU5lVQtlaZCu0RIVXh/gI3p
x1V7Fprr/t1eliEmi4k2b8foOOkoUQGIVL+m2+riBrwcc0+r0vZgsCa3FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEUbk4KG/J1hfx9PtgNZGhNc+4AzMB8GA1UdIwQY
MBaAFC0cFvfqcQr0Xis6EeYoo4zme8elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzIt
MWZhNzgwMThhNmU5LzEvUlJ1VGdvYjhuV0ZfSDAtMkExa2FFMXo3Z0RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzItMWZhNzgwMThhNmU5
LzEvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmTiDMA0G
CSqGSIb3DQEBCwUAA4IBAQA87yf+eGV7sb6Y3puVffk5/wxgNTyquIpwGceV/tjN
w+HZw3Nn4h35iTPnliUfa7BOwOWWwntRQalr/mZ+oBlVTE1bACjXUL0/KeHGksnG
4xxLI7nGKYo72tZORrFDpDM/1c1pisEoYFA/PvUIZ5O+AFmso4p8PGiXZcrAEolL
wjUs8Qzg9aPehjZAT5EOySf/zIEgwCrY5Lm/miJxrbsoRG6hyidmrW1qJXvZGyT0
7Y2FAeHeYG5bG4oQWS6C0F9S3EHzzaLP/hU7u2FHIgyqf4n0sm2/JsDlEy6nkI9o
5N7fMzGPVTkgtXGyzeXPpPzDdFy/V98188x2YRbhXkU7
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:24:01 2026 by rpki-client