Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/P3i4srHpwiuIB0xPjqetdmYKV1c.roa
File: P3i4srHpwiuIB0xPjqetdmYKV1c.roa (raw, json)
Hash identifier: 41gux4lPqzvf2MXN8KdsUBgT0iliFU3zKAin5mYwihg=
Subject key identifier: 3F:78:B8:B2:B1:E9:C2:2B:88:07:4C:4F:8E:A7:AD:76:66:0A:57:57
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 01A158BEB0553EF01FEDB962DA5C53C05A82
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/P3i4srHpwiuIB0xPjqetdmYKV1c.roa
Signing time: Tue 20 Oct 2026 09:57:34 +0000
ROA not before: Tue 20 Oct 2026 09:57:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 153.56.128.0/24 maxlen: 24
153.56.129.0/24 maxlen: 24
153.56.130.0/24 maxlen: 24
2a11:1fc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:be:b0:55:3e:f0:1f:ed:b9:62:da:5c:53:c0:5a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Oct 20 09:57:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f78b8b2b1e9c22b88074c4f8ea7ad76660a5757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:1f:53:81:97:28:0e:d9:58:74:52:d5:16:
43:98:69:67:7a:da:13:70:3a:ed:fa:b6:d8:c8:ef:
2f:60:f3:9d:f0:80:c8:d6:f0:4d:6b:38:dc:dd:1c:
03:d5:81:9d:5f:35:59:79:c2:e7:fc:41:de:5f:82:
d7:c2:9f:ab:a9:a5:80:0a:84:ae:4c:ea:a7:4b:f6:
49:0e:f0:d5:07:31:0f:a2:07:0d:bb:7a:8c:0a:0b:
46:8c:0a:82:72:ee:d6:0a:dc:a9:58:4d:e8:11:bc:
49:be:3c:cb:f2:a7:7a:46:93:59:62:68:2d:a1:44:
9b:98:bc:6f:cd:ee:0d:dc:a0:bc:13:e4:e5:31:b7:
16:99:d6:f7:2d:25:5f:7c:fe:18:09:8e:dc:ad:0a:
b3:4b:59:a4:ae:76:4d:c9:ef:82:80:02:a1:20:8c:
ab:9f:ad:c4:1b:bd:7c:f2:bd:d5:20:ca:59:3b:d4:
16:83:f2:cd:ab:05:55:51:a2:d2:ac:92:15:b0:3b:
83:a3:27:8a:8d:2e:d6:91:82:95:86:f2:6c:cb:d1:
70:45:81:d5:8a:5e:28:3c:eb:5f:29:5e:0c:4b:dc:
91:fa:0b:9f:f7:d0:41:b0:1d:43:c2:de:9a:35:7a:
e3:32:d7:83:de:b0:e5:0c:ac:f3:f2:79:39:0f:6f:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:78:B8:B2:B1:E9:C2:2B:88:07:4C:4F:8E:A7:AD:76:66:0A:57:57
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/P3i4srHpwiuIB0xPjqetdmYKV1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.128.0-153.56.130.255
IPv6:
2a11:1fc0::/32
Signature Algorithm: sha256WithRSAEncryption
42:b8:13:ce:cf:0d:fd:af:09:76:e1:5b:07:c6:c0:29:f9:35:
9b:92:66:a1:1d:ab:4f:fc:9c:97:2a:2b:10:f3:d9:87:b3:1c:
b5:98:3f:18:b0:ec:39:c1:69:a1:54:54:fa:38:b9:32:91:7a:
94:84:66:67:81:d3:1b:d1:7b:1b:af:a1:b5:11:99:91:1d:47:
92:79:d5:5a:2e:b5:a2:f1:d6:64:89:85:f8:25:a3:c1:ec:a7:
a8:78:aa:ff:cf:78:d7:eb:da:3c:b1:ef:f1:1c:94:2b:b8:10:
a1:d3:56:f4:0e:3e:26:30:37:89:72:81:a0:26:5a:b6:bf:d7:
51:99:77:3d:96:e7:fc:6a:ab:b9:fe:8d:7d:4e:f1:d5:86:4a:
5d:c0:80:0e:e0:c1:a6:df:84:aa:99:ec:cc:cb:83:3a:77:e1:
9a:ac:03:1e:85:be:6e:bb:25:c4:a9:cd:3c:90:a9:55:0f:9f:
2a:02:42:25:f1:1a:63:60:99:62:d8:fd:1e:a8:4a:bd:d9:57:
b2:91:22:d5:a8:25:0f:3d:77:a2:bb:79:10:74:31:0e:54:4f:
37:7e:39:6c:2a:dd:07:eb:71:7c:0b:34:76:6f:b1:08:4d:cc:
db:c1:2b:ec:fa:f2:c4:ca:a7:e0:85:b4:de:7d:0e:8c:14:5f:
7b:3c:cb:1a
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaFYvrBVPvAf7bli2lxTwFqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWMxNmY3ZWE3MTBhZjQ1ZTJiM2ExMWU2MjhhMzhjZTY3
YmM3YTUwHhcNMjYxMDIwMDk1NzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjc4YjhiMmIxZTljMjJiODgwNzRjNGY4ZWE3YWQ3NjY2MGE1NzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk8fU4GXKA7ZWHRS1RZDmGlnetoT
cDrt+rbYyO8vYPOd8IDI1vBNazjc3RwD1YGdXzVZecLn/EHeX4LXwp+rqaWACoSu
TOqnS/ZJDvDVBzEPogcNu3qMCgtGjAqCcu7WCtypWE3oEbxJvjzL8qd6RpNZYmgt
oUSbmLxvze4N3KC8E+TlMbcWmdb3LSVffP4YCY7crQqzS1mkrnZNye+CgAKhIIyr
n63EG7188r3VIMpZO9QWg/LNqwVVUaLSrJIVsDuDoyeKjS7WkYKVhvJsy9FwRYHV
il4oPOtfKV4MS9yR+guf99BBsB1Dwt6aNXrjMteD3rDlDKzz8nk5D2+hiwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFD94uLKx6cIriAdMT46nrXZmCldXMB8GA1UdIwQY
MBaAFC0cFvfqcQr0Xis6EeYoo4zme8elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzIt
MWZhNzgwMThhNmU5LzEvUDNpNHNySHB3aXVJQjB4UGpxZXRkbVlLVjFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzItMWZhNzgwMThhNmU5
LzEvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAeZOIAD
BACZOIIwDQQCAAIwBwMFACoRH8AwDQYJKoZIhvcNAQELBQADggEBAEK4E87PDf2v
CXbhWwfGwCn5NZuSZqEdq0/8nJcqKxDz2YezHLWYPxiw7DnBaaFUVPo4uTKRepSE
ZmeB0xvRexuvobURmZEdR5J51VoutaLx1mSJhfglo8Hsp6h4qv/PeNfr2jyx7/Ec
lCu4EKHTVvQOPiYwN4lygaAmWra/11GZdz2W5/xqq7n+jX1O8dWGSl3AgA7gwabf
hKqZ7MzLgzp34ZqsAx6Fvm67JcSpzTyQqVUPnyoCQiXxGmNgmWLY/R6oSr3ZV7KR
ItWoJQ89d6K7eRB0MQ5UTzd+OWwq3QfrcXwLNHZvsQhNzNvBK+z68sTKp+CFtN59
DowUX3s8yxo=
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:10 2026 by rpki-client