Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/5GRL2xTwlhtB45CKu5VYBHVeCs8.roa
File: 5GRL2xTwlhtB45CKu5VYBHVeCs8.roa (raw, json)
Hash identifier: xHs3aoTc2u94fp2p4GMEh09FXKLHJU4FJ23Xwrl2mb8=
Subject key identifier: E4:64:4B:DB:14:F0:96:1B:41:E3:90:8A:BB:95:58:04:75:5E:0A:CF
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019E3FF4A0B0BEC8BD02AFA30F900EC11AFE
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/5GRL2xTwlhtB45CKu5VYBHVeCs8.roa
Signing time: Tue 19 May 2026 11:17:36 +0000
ROA not before: Tue 19 May 2026 11:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398772
IP address blocks: 185.168.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:f4:a0:b0:be:c8:bd:02:af:a3:0f:90:0e:c1:1a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: May 19 11:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4644bdb14f0961b41e3908abb955804755e0acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:86:b3:9e:bb:ad:bf:d6:73:6d:72:f0:dc:
0b:cf:a9:a4:90:21:23:0e:27:db:e9:3d:9a:49:1d:
3f:ee:10:27:1c:1c:b7:c2:dd:47:15:34:cb:25:d1:
a2:78:1a:85:a2:46:d2:a6:24:95:37:58:01:92:c4:
b1:ec:cd:fa:4f:c1:69:69:11:5f:51:61:dc:eb:14:
4d:b0:e2:1f:8c:c5:ac:1f:6d:e1:c4:03:f1:8a:92:
91:b1:19:35:f2:5a:f1:fc:e5:b4:6b:58:ce:1e:da:
bb:db:c0:f2:1e:34:b2:3c:d5:68:fa:77:f7:7a:4d:
0f:a7:f8:d9:cb:0d:e6:41:e8:6e:96:70:14:f0:fc:
42:21:b1:3d:48:90:0d:0f:d8:27:b3:cc:0e:89:9e:
93:10:84:fa:d5:10:dd:af:b4:26:d2:83:d2:2b:73:
9a:27:90:35:84:a8:24:b4:48:68:6a:fb:7b:83:9a:
2b:a0:a3:66:f7:8c:c6:96:9f:ba:5e:4d:d7:dd:b2:
0e:4f:36:ce:9f:02:c9:4d:3b:49:f8:7a:17:cb:de:
87:b7:36:59:73:f4:52:e1:68:0e:68:b0:36:16:f2:
3a:a0:f1:9b:10:e7:5d:23:ed:80:e6:e5:21:4c:1d:
77:04:85:99:c8:6f:e8:0d:47:d8:5a:b0:59:af:bf:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:4B:DB:14:F0:96:1B:41:E3:90:8A:BB:95:58:04:75:5E:0A:CF
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/5GRL2xTwlhtB45CKu5VYBHVeCs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.156.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cf:fd:2a:97:7b:12:45:74:54:bd:bd:84:f2:00:b0:9e:88:
27:d5:c0:ab:9f:fe:d6:28:3a:60:a0:5e:76:51:9e:d3:60:0a:
e1:f4:a1:fd:6b:8b:fd:d1:b9:59:7f:e5:c9:0d:53:62:e9:cc:
c6:79:85:ab:b3:21:97:f8:1c:c9:72:6b:8d:8d:8e:32:ef:67:
da:f4:fd:bf:01:77:51:34:ff:91:12:ec:54:22:cc:98:f6:68:
b2:32:c5:91:ed:a1:44:f3:51:00:f8:91:fa:44:99:b9:ea:c3:
7d:8f:1c:e9:b3:c3:75:cf:3f:58:f6:9d:c2:0d:18:79:61:d2:
a1:1d:07:f3:0b:75:ef:16:3d:7b:0d:27:c0:81:04:55:6a:7d:
e9:a0:73:d3:27:76:3f:ea:aa:73:2f:dd:26:b0:9f:5e:36:d8:
0c:fc:64:5b:e9:70:7a:53:45:27:f2:c7:75:24:97:41:70:c1:
34:9d:5e:41:c1:0f:f9:94:0b:a3:63:59:da:f0:81:7a:a8:fc:
1c:2e:2f:12:75:bd:05:94:69:38:3f:c7:c0:e2:78:c7:27:b8:
fa:65:5c:f8:74:b9:14:16:db:69:70:aa:51:50:17:73:96:de:
58:f0:ed:22:2c:61:bc:40:22:c7:f0:d9:14:04:b6:c2:e2:fc:
ef:54:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:04:05 2026 by rpki-client