Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Up_vdQwYfwZMJRygBgS2xdZz48A.roa
File: Up_vdQwYfwZMJRygBgS2xdZz48A.roa (raw, json)
Hash identifier: cWUCPBdFbSxSr2nlhEXfLv7mg4Yghqw6LD60h+agyhc=
Subject key identifier: 52:9F:EF:75:0C:18:7F:06:4C:25:1C:A0:06:04:B6:C5:D6:73:E3:C0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019EB53866D162F453EED52F072E741F1875
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Up_vdQwYfwZMJRygBgS2xdZz48A.roa
Signing time: Thu 11 Jun 2026 05:47:12 +0000
ROA not before: Thu 11 Jun 2026 05:47:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213887
IP address blocks: 5.253.56.0/24 maxlen: 24
5.253.58.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:38:66:d1:62:f4:53:ee:d5:2f:07:2e:74:1f:18:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 11 05:47:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=529fef750c187f064c251ca00604b6c5d673e3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f7:c4:c7:d9:a5:9d:47:a8:2f:90:65:78:05:
ad:71:60:78:91:98:ad:10:bf:54:3c:73:5a:7d:e3:
3d:24:ac:6d:ba:39:c8:f4:57:40:c5:7c:f1:2e:0c:
25:84:c4:92:ea:1f:ba:59:ab:11:33:2f:ce:bd:a8:
3a:2c:0d:df:63:35:48:4d:17:25:32:1b:61:a2:3f:
e3:93:42:de:0a:4b:87:80:84:de:c6:76:e0:90:2c:
7f:44:5b:d9:dc:e6:dc:23:7b:f7:41:01:2a:af:fa:
35:6f:07:1e:34:99:54:78:ec:4e:71:2f:e5:d9:b2:
36:33:83:75:72:f8:3c:73:2a:e0:90:f0:40:b9:ab:
f2:f5:56:1e:dd:88:9d:b4:0f:15:b6:84:3f:0f:72:
35:cf:4c:46:3a:a4:4d:79:1a:0f:da:d7:3c:63:e2:
99:a1:75:f0:9d:09:12:30:9d:37:84:20:33:f7:13:
a1:cf:6e:25:ba:f2:1a:e6:2a:e1:c1:6d:a0:19:e2:
70:0d:52:34:d8:6a:93:c4:91:23:b0:e0:c2:b9:fe:
a1:4b:86:38:53:72:6f:18:c2:69:8a:0a:a0:b8:f4:
12:de:7f:c2:0e:70:ec:e6:ff:d8:12:46:f4:41:8b:
d3:62:26:2c:b7:de:d5:1d:31:f8:91:5c:fd:a6:9f:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9F:EF:75:0C:18:7F:06:4C:25:1C:A0:06:04:B6:C5:D6:73:E3:C0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Up_vdQwYfwZMJRygBgS2xdZz48A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/24
5.253.58.0/24
87.120.92.0/24
87.120.205.0/24
87.120.216.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d1:9e:fa:18:f9:80:c2:70:93:7f:3c:19:7e:fb:0d:6e:cd:
d7:59:b2:c6:de:02:1d:38:9b:49:2f:12:d9:9c:58:3b:b8:86:
ef:6e:db:57:ae:be:cc:1e:51:f1:76:de:5b:47:e3:7f:05:ac:
50:48:e3:5b:f8:36:46:8d:31:91:c0:03:4d:9d:9f:05:4c:a9:
3a:32:5a:5e:f4:bd:fd:48:67:52:db:13:83:b1:5d:ad:86:df:
4e:47:1a:b4:12:a6:4e:3d:8e:50:e2:ad:cf:ba:a9:78:91:77:
20:a8:39:e0:75:9d:7a:20:f4:f6:8c:ef:3a:2f:61:8d:fe:a7:
8b:69:af:78:4b:ba:ae:53:42:8c:01:e2:33:33:18:65:73:76:
51:00:b6:79:2b:6a:09:c9:c5:fa:56:4f:bb:5e:6a:9b:c7:55:
ac:3f:c4:2d:e3:c0:b1:59:10:06:92:2d:5c:89:40:60:bb:d1:
6e:5e:39:06:c3:89:5c:c1:95:1c:d0:50:7c:9b:ea:3a:0d:74:
d9:2f:42:ce:26:58:8c:00:b5:76:3e:a2:b8:6b:aa:44:a6:9e:
de:5e:56:1a:60:65:2a:f7:9a:8e:5f:08:d9:76:62:2b:28:e2:
d8:d4:70:fc:e2:f4:02:e3:58:f0:bd:3f:5a:af:ec:0f:71:9c:
1b:bc:aa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:00:34 2026 by rpki-client