Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/q_5h2J2szvTHu7w0j365OsNO_28.roa
File: q_5h2J2szvTHu7w0j365OsNO_28.roa (raw, json)
Hash identifier: ehVA9ZwcbxiL71TE9OayRWFVow00rmle7PO/BmkhQbU=
Subject key identifier: AB:FE:61:D8:9D:AC:CE:F4:C7:BB:BC:34:8F:7E:B9:3A:C3:4E:FF:6F
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01A08A6BFAFF360E90C0D6E45AC4DE673397
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/q_5h2J2szvTHu7w0j365OsNO_28.roa
Signing time: Thu 10 Sep 2026 08:25:27 +0000
ROA not before: Thu 10 Sep 2026 08:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 152.89.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:6b:fa:ff:36:0e:90:c0:d6:e4:5a:c4:de:67:33:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Sep 10 08:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abfe61d89daccef4c7bbbc348f7eb93ac34eff6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:dc:2b:38:c8:0d:12:55:78:ab:57:94:3d:
e7:9d:f3:e6:32:7d:4b:ba:f4:b3:ac:f4:6f:b9:ef:
af:53:81:ff:cc:3c:18:b0:02:29:78:59:f5:92:9d:
d8:5a:b3:4c:f8:af:57:a5:c9:c2:1e:9a:1e:04:a4:
35:81:1d:13:66:e8:b3:c9:23:3c:5a:bf:cf:ea:f2:
71:96:24:cc:19:c1:43:63:11:ec:36:01:ab:0d:2b:
ec:f6:c3:15:fa:c0:09:7c:8d:ba:2f:f7:60:08:65:
28:f6:33:c2:fa:ea:d2:89:78:3d:ce:e9:28:2b:26:
f5:99:70:78:ff:d9:ca:47:c0:04:02:e1:d5:63:88:
63:25:4e:20:88:56:80:59:11:46:5c:c2:6a:25:c1:
a6:f1:23:f2:27:dd:7e:47:ab:3e:7b:52:31:e9:a0:
c8:df:0a:0b:a9:c2:f9:26:b4:ec:52:48:3b:ba:6d:
d1:1b:08:31:05:89:bc:02:f2:52:c0:94:84:d3:f4:
42:c5:aa:2a:59:ed:23:f8:65:e6:34:86:95:b4:92:
22:5f:1b:aa:0f:ae:d8:d7:59:14:76:29:a6:92:42:
0b:4f:2f:1f:c2:2f:9a:f5:28:64:31:20:55:43:39:
19:7b:ea:74:60:19:0b:32:74:15:05:13:f2:66:56:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FE:61:D8:9D:AC:CE:F4:C7:BB:BC:34:8F:7E:B9:3A:C3:4E:FF:6F
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/q_5h2J2szvTHu7w0j365OsNO_28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.192.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8a:68:ea:c0:f3:01:4f:44:fd:dc:89:6f:69:b4:b8:be:84:
65:81:d8:95:99:c4:0f:fc:90:4e:71:a3:13:f0:97:de:d4:38:
ca:a7:20:44:da:b0:ce:a8:be:a9:cb:a0:47:d0:36:99:fa:83:
c1:76:13:77:36:f4:ae:ff:ed:27:b2:4d:31:b1:a0:26:ef:7b:
a4:4c:1c:50:b4:9a:c3:e2:83:af:19:89:44:8d:c7:62:13:84:
b4:53:bb:28:1f:d1:21:4d:34:3e:de:39:99:37:d3:05:b1:59:
be:19:9e:0e:f3:a0:df:70:52:b2:c6:46:de:28:9e:bd:4c:e2:
9b:8f:8f:25:7f:ea:71:95:b5:99:e0:b8:8a:9d:72:97:44:4c:
18:1e:50:38:ac:3e:1a:df:c0:82:5f:e2:c7:95:cf:7b:e3:2b:
0d:74:b2:e1:8e:90:7b:42:83:d4:99:e8:cb:68:6e:b2:a9:4f:
fd:b2:03:38:59:3e:49:10:64:56:a1:9c:7d:28:35:5d:15:52:
14:8c:78:bd:03:9b:15:ed:a6:79:18:cf:51:76:cc:1b:bb:e9:
25:cf:b0:2a:45:05:4a:e6:81:ba:b1:83:b5:97:ee:96:3a:02:
ca:b5:61:c9:7e:35:b7:22:21:14:4f:de:13:bb:be:f0:55:a9:
7c:46:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:43 2026 by rpki-client