Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/9irx_5__iebC-joF_t5k-HwOato.roa
File: 9irx_5__iebC-joF_t5k-HwOato.roa (raw, json)
Hash identifier: D9D6cEfFrHVaLUE2HmZWJvCFExnSp3xZwWxilCrXvQo=
Subject key identifier: F6:2A:F1:FF:9F:FF:89:E6:C2:FA:3A:05:FE:DE:64:F8:7C:0E:6A:DA
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019E2B2E531A3466538E546521E87D7B7E20
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/9irx_5__iebC-joF_t5k-HwOato.roa
Signing time: Fri 15 May 2026 10:28:36 +0000
ROA not before: Fri 15 May 2026 10:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 153.51.176.0/24 maxlen: 24
153.51.177.0/24 maxlen: 24
153.51.178.0/24 maxlen: 24
153.51.179.0/24 maxlen: 24
153.51.180.0/24 maxlen: 24
153.51.181.0/24 maxlen: 24
153.51.182.0/24 maxlen: 24
153.51.183.0/24 maxlen: 24
153.51.188.0/24 maxlen: 24
153.51.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:2e:53:1a:34:66:53:8e:54:65:21:e8:7d:7b:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: May 15 10:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f62af1ff9fff89e6c2fa3a05fede64f87c0e6ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:85:47:db:ce:16:da:38:cd:eb:ae:56:81:
7e:04:5e:6e:bb:a6:30:af:70:23:24:ef:23:4a:a8:
6a:dc:c9:78:ad:db:11:70:86:a0:22:3c:3a:96:4d:
5b:f1:ca:5d:79:bd:01:d3:99:91:41:bc:c8:c3:28:
7e:dc:7b:26:96:8b:91:3b:80:75:b2:bb:d0:06:63:
5d:86:3e:7f:9c:d1:d7:5e:69:78:11:c0:fb:71:b6:
f0:e3:b3:b6:cf:54:56:5f:36:ca:5a:45:b1:34:b5:
61:da:b3:53:72:c1:1b:8b:48:94:c3:db:ee:be:f1:
01:e3:5a:9c:ea:f6:cb:2e:5d:a0:23:56:85:5b:b4:
bf:fa:dd:e6:0d:7c:e6:79:ac:61:8d:f2:b6:38:7a:
3d:13:91:da:0b:f1:60:82:b6:45:c4:18:97:15:03:
2e:bb:95:1c:d8:d4:6c:53:30:86:4e:ac:95:ef:63:
bc:b1:b7:43:ee:29:df:61:79:f6:41:a1:b1:79:40:
ca:74:8c:a3:34:32:0e:df:f9:6c:de:77:c8:33:2c:
69:d5:2e:e1:17:6b:39:f4:5d:d7:9e:db:2b:66:9e:
71:f3:0e:e4:6a:16:23:b9:d6:ea:a7:f4:8c:14:e4:
17:d7:85:7f:db:47:e8:80:0d:58:48:4a:35:04:75:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:F1:FF:9F:FF:89:E6:C2:FA:3A:05:FE:DE:64:F8:7C:0E:6A:DA
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/9irx_5__iebC-joF_t5k-HwOato.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.176.0/21
153.51.188.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:be:d3:9c:f6:aa:0e:32:04:14:93:91:8c:64:db:62:e1:5f:
00:d1:e3:9f:da:69:5c:06:f3:d1:2e:5a:8f:e5:fa:9f:f1:3b:
41:34:02:6a:dc:88:fb:e3:69:4b:d5:92:0f:f9:a5:05:f8:cd:
db:5b:e7:4b:b9:01:48:9b:28:34:14:d1:17:9f:c9:99:9d:25:
2b:c4:9b:0f:f0:55:29:ad:16:de:88:11:8c:8b:32:a9:9c:1a:
d8:99:5f:05:ac:5a:98:db:44:a1:9b:a5:45:41:cf:d5:6d:99:
6b:d1:18:bf:a5:c2:54:17:5b:47:0d:11:6d:0c:9c:ee:67:89:
51:3f:d9:33:09:dc:eb:fc:bd:b4:c7:44:6c:51:7f:60:60:77:
8d:f4:5d:4f:b5:cc:fc:a5:da:07:59:c2:98:cb:f3:8b:1c:96:
2d:b8:4c:21:da:05:78:77:6b:7e:7e:58:31:1e:05:4a:f4:35:
0d:da:c6:4f:03:1f:50:c6:a6:55:78:f1:dc:e7:87:cd:3a:0a:
d3:07:88:81:3c:d2:13:85:b7:4a:22:bb:20:90:d1:41:dc:d2:
bb:87:0c:e2:e9:c7:bb:97:7f:7c:18:ac:7b:b0:69:d2:c6:b5:
5b:f9:9d:4b:06:d1:a5:47:3c:8e:73:d2:bb:99:71:b8:70:f0:
d6:e8:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 22:53:47 2026 by rpki-client