Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/5B3LLSZ7naeli92QlarsYMnxJVU.roa
File: 5B3LLSZ7naeli92QlarsYMnxJVU.roa (raw, json)
Hash identifier: 40UIro7snHT7p3seuN/w5PnwGhemWycKbCKCtK9zo3M=
Subject key identifier: E4:1D:CB:2D:26:7B:9D:A7:A5:8B:DD:90:95:AA:EC:60:C9:F1:25:55
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A13FAD38FE70EFBA646D72EEC25AD0B50B
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/5B3LLSZ7naeli92QlarsYMnxJVU.roa
Signing time: Thu 15 Oct 2026 13:07:59 +0000
ROA not before: Thu 15 Oct 2026 13:07:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215443
IP address blocks: 2a0d:d940:2000::/48 maxlen: 48
2a0d:d940:9005::/48 maxlen: 48
2a0d:d940:90aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:ad:38:fe:70:ef:ba:64:6d:72:ee:c2:5a:d0:b5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Oct 15 13:07:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e41dcb2d267b9da7a58bdd9095aaec60c9f12555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:31:b2:fc:06:ed:78:0c:ca:a2:0d:8a:50:
a2:87:f0:d0:b0:2b:53:9c:4e:aa:2c:16:93:01:6f:
e2:70:e8:e6:88:c9:c1:bd:56:c7:9d:de:8b:a9:71:
67:01:7e:11:e6:50:31:a3:c0:ab:a8:7d:cb:87:a5:
7f:d7:b4:93:e9:8f:c6:9e:00:90:25:44:6c:80:5c:
a4:1d:86:b6:7b:1c:17:01:2d:11:ce:b0:4f:d1:fa:
6b:16:ab:1d:a2:e7:ef:15:76:de:7b:4e:25:ac:d5:
05:97:10:24:7a:72:ec:ad:fa:1c:75:b4:de:4a:07:
67:38:d1:34:a4:4a:18:21:fa:91:e2:b7:68:3b:84:
a9:7c:1f:fe:0c:9f:f8:e6:d5:bd:0a:9c:8c:a1:3c:
4c:3c:ff:88:3a:08:65:93:46:76:87:ee:89:07:52:
af:3c:ff:d0:8c:3a:6f:37:28:3f:7f:e6:f7:51:e6:
fc:31:fc:6a:ee:68:d9:63:53:3a:7c:e9:2e:e6:f1:
40:36:8a:4b:3e:e5:ff:a0:93:c7:f0:ae:11:0a:11:
83:5c:83:05:60:2b:1d:a7:13:4b:06:ca:cf:41:5f:
8b:07:35:92:29:9f:06:55:16:1b:b8:1a:66:c0:7b:
52:bd:1d:dd:0f:26:80:64:d0:bb:a1:fd:a3:c7:2f:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1D:CB:2D:26:7B:9D:A7:A5:8B:DD:90:95:AA:EC:60:C9:F1:25:55
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/5B3LLSZ7naeli92QlarsYMnxJVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2000::/48
2a0d:d940:9005::/48
2a0d:d940:90aa::/48
Signature Algorithm: sha256WithRSAEncryption
56:1c:7a:ec:83:21:d0:af:8b:0a:6d:99:21:30:08:5e:c3:22:
77:66:60:94:a6:d0:22:8e:56:d8:17:85:6b:da:65:3b:54:ff:
6a:8b:db:3b:7e:90:20:d2:c7:82:82:65:78:95:1f:fa:9d:50:
a9:34:79:d5:0c:6d:83:6b:71:64:38:3c:99:16:c8:81:02:29:
f1:83:4d:26:78:f6:aa:03:70:b2:0b:12:9f:57:ce:8f:4f:ec:
67:f4:c7:7b:93:57:52:5b:cd:3c:a3:bc:95:65:4c:e0:0a:ad:
21:84:45:d1:3f:6e:2e:d6:3d:c5:37:11:f6:43:00:81:04:b5:
12:46:e2:ca:5d:a4:fa:61:78:aa:83:f1:d7:9b:ee:7b:97:48:
92:9b:fe:30:b2:2c:42:a5:d2:cd:00:f5:41:fb:bc:3b:70:3a:
b3:43:04:61:15:c5:65:3b:36:4a:00:fa:55:f5:a9:ed:77:9b:
b9:6a:d6:c4:a2:87:f5:1c:23:06:b9:66:ba:23:f1:be:ff:68:
3a:fd:94:c4:f3:4a:d8:6c:b3:de:07:6e:f6:9e:12:20:e0:e3:
1b:08:5e:59:2e:bc:2c:d3:6c:96:a2:96:06:46:3f:ea:43:b4:
8f:4b:5d:75:28:47:98:b0:1d:58:02:13:ca:e6:63:ad:97:8e:
e5:77:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:25:41 2026 by rpki-client