Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/f_h5E6BnhRd-F5Nslax9PssKqYk.roa
File: f_h5E6BnhRd-F5Nslax9PssKqYk.roa (raw, json)
Hash identifier: cd0/Q/9MuVzO0nJdogPcWF9VeDcM1h1CGbjeHcWB02w=
Subject key identifier: 7F:F8:79:13:A0:67:85:17:7E:17:93:6C:95:AC:7D:3E:CB:0A:A9:89
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019D920C1B2BC181D46502E083B2D7CC3FC8
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/f_h5E6BnhRd-F5Nslax9PssKqYk.roa
Signing time: Wed 15 Apr 2026 16:49:20 +0000
ROA not before: Wed 15 Apr 2026 16:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51791
IP address blocks: 153.56.128.0/24 maxlen: 24
153.56.129.0/24 maxlen: 24
153.56.130.0/24 maxlen: 24
2a11:1fc0::/48 maxlen: 48
2a11:1fc0:2::/48 maxlen: 48
2a11:1fc0:3::/48 maxlen: 48
2a11:1fc1::/32 maxlen: 32
2a11:1fc2::/32 maxlen: 32
2a11:1fc3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:0c:1b:2b:c1:81:d4:65:02:e0:83:b2:d7:cc:3f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Apr 15 16:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ff87913a06785177e17936c95ac7d3ecb0aa989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:cb:ea:db:8e:db:56:34:1b:3e:dd:b8:4a:
2b:a6:a7:f6:af:75:34:65:c4:b3:50:95:06:f5:94:
50:f9:b3:71:09:3d:e4:26:04:ce:a8:9a:7e:c7:88:
6a:d0:db:f1:87:8d:19:f0:2b:46:c4:0d:05:ba:b6:
4c:96:ba:10:2a:2e:45:9c:d7:ce:78:a1:37:d7:96:
89:87:18:f5:4a:81:51:d4:8a:57:af:1f:f5:bc:93:
19:19:ef:31:70:6b:1f:d8:41:79:6e:41:2d:6a:79:
31:d4:3a:ef:07:20:1e:5b:42:57:95:99:f4:2f:10:
24:4f:c8:22:b2:5f:72:a4:13:7f:10:4e:7d:ae:9e:
67:25:57:07:1f:f3:84:a5:39:bf:80:e1:73:df:9a:
3c:67:00:7e:0c:4a:c5:94:97:a8:61:a5:d3:e9:56:
be:04:24:14:2f:22:48:37:cb:c6:6d:d0:56:56:83:
28:ee:a0:72:91:10:c2:ed:53:83:2b:0a:b9:76:5e:
00:39:5f:7b:af:a3:ce:e4:85:1c:3c:76:e5:2a:af:
5a:7d:0b:89:23:2d:ef:e3:55:20:ac:61:d6:d2:a6:
f0:d7:d3:5d:d2:1d:d7:b1:0a:52:e9:b3:d6:07:92:
6c:57:f6:84:e2:78:0f:a5:b2:fa:f4:e4:e2:7e:57:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:79:13:A0:67:85:17:7E:17:93:6C:95:AC:7D:3E:CB:0A:A9:89
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/f_h5E6BnhRd-F5Nslax9PssKqYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.128.0-153.56.130.255
IPv6:
2a11:1fc0::/48
2a11:1fc0:2::/47
2a11:1fc1::-2a11:1fc3:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:bc:d6:d3:db:bb:99:18:d5:46:48:03:08:c7:55:ce:59:81:
b9:9a:0b:92:ea:81:8c:e8:7c:33:df:9e:98:30:ad:31:72:07:
52:41:f3:0c:0f:62:af:27:14:c8:e6:bf:65:4e:27:fb:1c:e4:
7a:2a:fc:79:dd:44:48:d9:5e:8a:50:97:42:75:38:b2:53:2b:
05:21:e8:f4:98:f4:78:ca:e8:fc:77:00:3e:e7:ca:56:a8:18:
a5:6e:63:46:4d:84:8d:7c:bb:39:0b:2c:61:73:48:b0:0b:46:
d3:0e:a4:99:76:28:4c:69:9c:d5:0c:78:05:89:6a:22:0a:55:
5c:6b:05:52:56:af:b2:67:5a:84:43:99:12:d9:c2:7a:62:95:
b3:c2:49:1e:3f:72:58:30:2d:33:56:67:1b:88:d5:ab:0e:63:
2a:a4:11:50:fc:77:de:f8:4d:ff:fb:9e:d6:b1:4d:2c:73:1c:
b5:03:2c:77:70:37:1d:42:ff:b7:a8:9e:c8:a3:ba:55:6b:3c:
55:fd:b9:d3:61:d3:38:41:04:b1:95:5c:6c:16:9a:95:c8:9d:
a0:fa:4c:d2:35:0b:12:05:1f:91:04:33:da:61:6e:5d:0a:9a:
d7:53:58:0d:c2:81:3c:be:f2:ab:e6:fa:32:3b:24:6e:1e:c4:
0f:92:de:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:55 2026 by rpki-client