Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/5fcx8obVEyoTorLpIgirYEHl1Q0.roa
File: 5fcx8obVEyoTorLpIgirYEHl1Q0.roa (raw, json)
Hash identifier: m4mpP2IxkbLqcnmIfpJCCUpjWCW4dvvjytcLKpNKEZ4=
Subject key identifier: E5:F7:31:F2:86:D5:13:2A:13:A2:B2:E9:22:08:AB:60:41:E5:D5:0D
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019F0FC5E9617A95ADAE52260BC98ABFA2D3
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/5fcx8obVEyoTorLpIgirYEHl1Q0.roa
Signing time: Sun 28 Jun 2026 19:47:36 +0000
ROA not before: Sun 28 Jun 2026 19:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215133
IP address blocks: 152.89.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:c5:e9:61:7a:95:ad:ae:52:26:0b:c9:8a:bf:a2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jun 28 19:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5f731f286d5132a13a2b2e92208ab6041e5d50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:8a:71:21:cc:af:31:d9:3c:29:0c:3d:6f:
91:40:d7:28:e3:6b:f3:06:57:d5:47:fe:1a:dd:33:
1e:25:6d:45:3c:9f:cc:0b:f8:58:89:3e:ad:8d:0c:
9b:40:b1:aa:b9:16:6c:9a:65:24:01:83:9a:c8:a5:
d1:5d:25:d9:e7:da:ab:56:e3:82:bd:1d:a6:d1:d1:
88:0a:06:4f:b8:ae:02:3e:50:4e:b5:75:4f:65:85:
29:5f:24:03:08:ce:a5:83:8c:aa:9a:ac:e2:05:a0:
60:6d:ae:08:b0:4b:f2:98:49:f0:50:de:d6:62:fd:
dc:4c:0c:49:f3:b2:76:26:f2:0f:ae:a5:a3:ba:a3:
3f:aa:19:85:8e:c9:15:b8:6b:1c:f2:7e:eb:38:7b:
14:cb:e3:c1:c2:91:32:24:89:76:89:94:1c:01:66:
fc:50:5b:9a:63:cd:1a:3d:65:30:3b:8b:38:82:7f:
aa:17:5d:2a:cb:e1:94:12:55:fc:f6:e6:df:dc:8b:
33:89:9f:cb:f3:dc:a9:86:88:31:64:9f:2a:a1:c0:
e7:31:68:ae:88:00:4f:33:07:7f:97:13:46:c7:45:
bf:5b:63:cb:f5:b4:ea:23:ca:e8:53:b7:f9:0e:7c:
d0:c0:e8:38:d7:2a:4b:9a:21:b0:09:c6:29:c0:3b:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F7:31:F2:86:D5:13:2A:13:A2:B2:E9:22:08:AB:60:41:E5:D5:0D
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/5fcx8obVEyoTorLpIgirYEHl1Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.195.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:98:c3:0a:93:f9:51:c7:bf:59:4e:e1:f5:2c:6d:c5:ad:13:
50:2e:6a:f5:9d:16:94:42:77:5c:ea:24:21:dd:5d:3f:3a:02:
2f:cf:8b:fb:bd:b5:ea:66:3a:50:0f:e7:06:a4:4a:56:98:9e:
2c:46:70:0a:d1:24:35:af:be:e8:8b:69:9e:b7:2c:e4:5f:fe:
86:79:c6:de:7b:8d:07:7b:00:93:24:b6:c6:4f:ca:03:5f:e9:
d3:82:ae:70:15:1f:89:7c:a3:4f:fe:67:95:86:76:6a:15:27:
9a:db:e3:19:78:6e:a5:73:ee:40:f7:2f:4f:5b:26:c6:7b:53:
dd:2b:91:ee:48:ea:12:2a:ab:96:11:12:2e:5c:27:8a:2a:fc:
89:b8:96:3b:31:71:a0:57:db:57:7c:c4:d7:52:2d:d9:90:7a:
d5:6b:1a:15:08:53:1d:be:bc:78:af:68:4a:19:13:50:b8:2b:
f9:d3:b0:3e:14:50:98:c5:b6:8f:72:1e:11:aa:d6:55:40:70:
55:55:6b:59:79:98:7c:60:fb:d2:6d:65:12:b9:fa:05:48:9d:
83:a7:5c:a1:9c:ab:ed:61:76:4d:4e:4d:23:b3:f7:bc:bd:32:
2f:fa:3e:0d:f8:02:96:93:0f:03:96:eb:94:1c:c8:bf:e3:38:
42:f5:f9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:13:12 2026 by rpki-client