Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/5XvtfWgYGxUU8qLnW3Bwfdl6JUs.roa
File: 5XvtfWgYGxUU8qLnW3Bwfdl6JUs.roa (raw, json)
Hash identifier: bPYIhcD0X+Vz1PaqsgpfgFmUc9hFnv4ButsAKQzi5o0=
Subject key identifier: E5:7B:ED:7D:68:18:1B:15:14:F2:A2:E7:5B:70:70:7D:D9:7A:25:4B
Certificate issuer: /CN=01e984be88cab830aeb81d0ed8768f433135d59a
Certificate serial: 019F23692A16A352F7C3BB9F892D1C2A8ACF
Authority key identifier: 01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/5XvtfWgYGxUU8qLnW3Bwfdl6JUs.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15372
IP address blocks: 176.111.245.0/24 maxlen: 24
2001:67c:12b8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2a:16:a3:52:f7:c3:bb:9f:89:2d:1c:2a:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e984be88cab830aeb81d0ed8768f433135d59a
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e57bed7d68181b1514f2a2e75b70707dd97a254b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:f5:87:e8:95:20:13:ad:57:1d:09:3a:f3:
be:c5:8e:18:ad:ee:e9:75:c0:fe:c0:56:43:eb:5d:
c2:93:12:42:39:d7:9f:49:16:56:76:d6:e1:9e:76:
58:73:84:0f:90:dd:cb:19:83:39:95:39:43:16:26:
01:32:d4:7b:fe:cd:1b:f7:f6:67:d8:6b:a9:cc:ed:
3c:5b:35:0a:19:3a:8d:f6:c7:42:2d:e1:84:f3:1d:
89:5b:1b:f1:35:01:2f:26:cf:07:c6:98:d1:a6:f2:
ad:61:8b:99:29:ce:fa:7f:1b:3d:1a:bd:8a:7f:9c:
6c:87:03:69:59:7c:93:5d:f5:73:8d:d8:2d:f7:a7:
13:fa:61:6c:c7:b2:07:d5:2e:7e:cb:2d:b1:b9:f1:
4f:45:81:2c:37:dc:93:24:c5:3f:5c:3c:24:13:bf:
61:a0:5c:63:8b:61:c3:b4:38:61:05:cd:0d:e3:e6:
90:c3:00:4c:61:7e:bc:37:f9:16:b5:d0:6f:28:c9:
c6:cc:92:7a:42:0d:47:50:ac:56:31:ed:64:d0:46:
f7:3f:39:20:51:fa:b4:1e:27:54:86:3f:07:e0:0b:
d9:c9:d2:d4:d3:da:a3:8b:d3:bc:a3:de:82:5d:bc:
a6:81:2b:9d:25:84:2a:6c:01:10:21:15:e5:70:78:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7B:ED:7D:68:18:1B:15:14:F2:A2:E7:5B:70:70:7D:D9:7A:25:4B
X509v3 Authority Key Identifier:
keyid:01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/5XvtfWgYGxUU8qLnW3Bwfdl6JUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.245.0/24
IPv6:
2001:67c:12b8::/48
Signature Algorithm: sha256WithRSAEncryption
3e:b3:2d:32:f7:a7:15:13:22:ce:78:16:8d:e4:1b:2d:2d:95:
67:f0:50:c4:ae:38:01:f9:53:11:1a:ff:8c:7a:c1:58:af:c9:
42:8e:a3:22:5a:6e:86:c8:c1:b9:b6:b8:6c:d1:d2:6c:d2:7f:
59:63:e8:5a:46:7f:95:0c:19:0c:a8:31:6e:c3:f6:eb:ce:e6:
3d:2a:b2:10:ec:4f:8a:3a:b6:b4:69:47:71:4c:d0:4c:3d:6a:
29:f7:82:91:54:7d:9d:b2:df:f7:4b:cb:c6:67:51:7a:64:d1:
1b:78:30:da:2e:dc:06:83:af:d3:49:6f:8e:ff:6b:23:6e:2c:
eb:95:69:d3:4b:57:2b:ea:62:ed:18:3c:ba:90:4f:95:84:bd:
4b:1a:ee:e9:b9:36:0f:97:30:46:8b:60:9b:c0:b9:4f:a0:fc:
c5:ec:89:60:41:c5:89:23:f9:2b:88:b7:0c:53:4a:59:d1:5d:
e2:58:2f:e7:a0:58:bb:94:ab:fd:06:21:d1:46:17:b1:c2:77:
e0:07:03:82:d4:42:33:d7:4d:65:75:33:4e:ca:ff:b3:d7:85:
5d:e8:41:3f:14:5d:49:ca:7e:94:d8:91:17:0f:fe:db:b7:b5:
24:60:7c:0c:6e:e2:56:eb:41:f6:9b:6b:27:0a:cc:e3:d0:e2:
6f:07:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:37:40 2026 by rpki-client