Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Rb5WxdniWZJi2uKGt5iSE3imuKY.roa
File: Rb5WxdniWZJi2uKGt5iSE3imuKY.roa (raw, json)
Hash identifier: cEzxV1Ej8qEgHXObAYowb4t+T2HG7fYTPhD2mGI4Ywc=
Subject key identifier: 45:BE:56:C5:D9:E2:59:92:62:DA:E2:86:B7:98:92:13:78:A6:B8:A6
Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Certificate serial: 01A11138520609F2E4192E6AD2BAE5DF7621
Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Rb5WxdniWZJi2uKGt5iSE3imuKY.roa
Signing time: Tue 06 Oct 2026 12:37:46 +0000
ROA not before: Tue 06 Oct 2026 12:37:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203667
IP address blocks: 155.133.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:38:52:06:09:f2:e4:19:2e:6a:d2:ba:e5:df:76:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Validity
Not Before: Oct 6 12:37:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45be56c5d9e2599262dae286b798921378a6b8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:c9:72:78:e6:5a:54:8f:c0:9d:de:e1:ef:
ac:1c:a5:e7:49:77:db:bb:51:07:77:68:e1:f0:ac:
c5:d0:c6:9d:27:7b:55:9c:97:47:9b:e3:f5:4a:89:
cc:a6:a7:1e:e1:e5:61:8b:00:e9:08:d9:af:ac:3c:
54:68:c7:4f:45:77:d2:17:4b:bf:5a:a3:b1:07:9f:
a1:ec:0a:0f:5c:0d:82:2e:1f:c3:96:bf:79:2b:77:
2a:6d:cb:2c:25:34:98:1c:56:c8:03:b8:a6:e2:b7:
44:55:31:51:d7:31:06:7a:50:7f:fb:1a:95:15:fb:
c3:15:61:c7:8a:6a:c6:a8:c3:d4:31:c3:de:04:6f:
2c:32:5f:7e:c4:18:b7:ee:4a:64:2e:15:79:93:7e:
74:c2:e5:08:b9:4b:80:1b:a0:49:c3:a0:9c:6b:1b:
e3:ae:9f:08:50:94:98:63:1a:95:7f:43:23:bf:b8:
e9:10:ae:cf:87:f8:dc:aa:c1:f2:1d:ea:a7:1d:32:
96:1e:f2:b9:4e:a7:19:58:48:74:2a:aa:75:c9:10:
ce:6e:ef:5a:0b:04:04:11:34:35:0a:9f:e2:68:cb:
67:99:2a:ac:b9:ae:47:56:88:30:e6:78:13:57:a7:
1f:9d:8b:aa:1a:5c:23:55:9d:e5:9d:5b:12:19:ff:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BE:56:C5:D9:E2:59:92:62:DA:E2:86:B7:98:92:13:78:A6:B8:A6
X509v3 Authority Key Identifier:
keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Rb5WxdniWZJi2uKGt5iSE3imuKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.40.0/21
Signature Algorithm: sha256WithRSAEncryption
24:3d:75:44:8c:5b:8f:b9:dd:0f:b5:c6:a0:26:fd:f5:4f:e7:
3b:55:93:82:8d:44:16:f9:50:6a:c8:97:46:df:1c:0f:bf:da:
f3:59:c5:ab:ca:e5:4f:18:f1:c1:fd:fd:8f:09:4d:b5:4e:de:
8e:a8:cc:71:47:09:67:28:71:83:9e:c7:3c:6f:1d:93:42:9e:
36:b7:1f:8a:55:85:9f:11:da:8e:b6:c5:d4:df:ce:e6:ab:c7:
95:92:92:ee:b6:e6:e4:65:a2:c8:69:6d:b9:d7:72:2f:7f:32:
45:8c:74:b0:49:11:e1:b2:28:ff:b3:e3:9c:a1:21:73:dd:24:
49:f6:29:d0:fe:cc:27:39:1a:f7:2c:8e:87:46:35:cb:e1:a1:
61:9c:a1:89:36:d4:17:d1:f9:48:e1:40:ca:4f:f7:9c:69:04:
f4:16:de:19:88:10:7d:e5:a8:48:a3:3d:cd:45:c1:85:7f:e8:
15:25:84:8b:dc:a4:51:3f:27:f5:bb:87:f4:d9:5a:25:85:b7:
8b:d6:7f:ac:d4:33:3e:ee:24:95:6b:93:70:e7:5e:04:c5:71:
2f:ad:54:2c:c4:9b:bd:a5:54:35:cf:91:10:bd:67:39:48:38:
15:1e:a4:af:63:22:15:92:40:27:90:f9:21:70:5c:66:21:f2:
9e:a6:6a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:31:37 2026 by rpki-client