Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/d-QxnSqS_V0shL66uqwLAgZFIBo.roa
File: d-QxnSqS_V0shL66uqwLAgZFIBo.roa (raw, json)
Hash identifier: luvYromzsoLUcbp7ns0bb/QOxsjEI+GNMV9SnMHva8E=
Subject key identifier: 77:E4:31:9D:2A:92:FD:5D:2C:84:BE:BA:BA:AC:0B:02:06:45:20:1A
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019DF78DA625BCA91471A7655282D8895855
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/d-QxnSqS_V0shL66uqwLAgZFIBo.roa
Signing time: Tue 05 May 2026 09:52:28 +0000
ROA not before: Tue 05 May 2026 09:52:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 153.51.170.0/24 maxlen: 24
153.51.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:8d:a6:25:bc:a9:14:71:a7:65:52:82:d8:89:58:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: May 5 09:52:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77e4319d2a92fd5d2c84bebabaac0b020645201a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:d4:37:b5:24:7f:b3:24:d9:67:10:94:ab:
35:5b:6b:06:13:e9:8d:18:05:f6:93:dc:27:8a:ec:
cc:da:02:c3:3d:f8:6d:c8:96:ae:35:83:fb:03:63:
8f:0e:31:2b:d1:90:3d:06:b3:eb:f6:6f:61:96:fb:
7e:83:ae:6e:f5:c4:d8:8b:7d:37:15:b9:72:46:36:
80:fa:54:bb:fe:4d:2c:7a:01:27:64:c8:f6:07:79:
0c:6d:6c:2f:bd:d8:ae:8e:ca:63:41:8c:77:77:0f:
20:11:78:5f:be:c2:8b:cf:0d:79:e1:c1:51:eb:0c:
38:81:45:c7:b4:2a:d8:eb:d5:6c:5e:6e:90:04:f7:
f8:9d:a5:ff:ae:5f:56:05:a9:01:5f:21:37:86:98:
ff:6b:5d:95:3d:9f:8c:19:5b:54:d2:bc:53:88:59:
cb:35:63:f1:26:85:08:d7:12:7e:0b:d6:de:28:42:
c9:d9:94:b4:35:00:e8:ee:1f:72:ae:73:01:cf:74:
d9:81:03:74:95:91:01:c2:93:15:f8:da:0e:3b:86:
22:5e:3f:03:9c:8d:72:ff:87:8e:a9:0b:48:59:34:
b4:10:b0:cc:e1:1b:3f:bd:d5:fc:6b:1d:af:65:e5:
c3:64:9a:ad:18:58:80:a4:6d:90:4d:44:7f:05:66:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E4:31:9D:2A:92:FD:5D:2C:84:BE:BA:BA:AC:0B:02:06:45:20:1A
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/d-QxnSqS_V0shL66uqwLAgZFIBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.170.0/24
153.51.184.0/22
Signature Algorithm: sha256WithRSAEncryption
73:73:0a:05:36:a0:c5:f1:cf:37:5b:63:21:7c:e9:2f:9a:8e:
58:14:32:8e:17:9c:75:e9:10:92:ac:d1:c9:c0:18:9a:98:4e:
6d:66:ad:1f:72:00:d7:9f:fa:e8:d1:4b:eb:4e:41:6b:cd:51:
ea:a8:c4:65:bf:74:89:89:66:a7:34:ea:c5:16:0d:36:74:47:
12:3c:46:ba:0b:bd:fe:4e:cd:91:f1:43:12:86:de:cf:2a:e4:
11:26:47:b6:55:f6:a7:bd:dd:e3:02:a8:ec:de:db:b8:f3:91:
47:49:33:dc:ba:39:72:a9:16:3b:88:aa:aa:5f:7c:a2:d1:cf:
d2:ca:55:e3:85:59:08:32:e0:4e:d9:6d:2a:a8:e3:5e:60:c2:
e0:f0:b3:84:3c:49:e1:5c:73:d2:bf:5e:db:c4:4a:22:62:af:
73:09:5f:5b:8a:ab:9a:cf:62:9d:dc:64:7a:61:67:8d:c0:71:
79:2d:a1:f8:11:b7:2f:ff:c4:0d:6f:99:15:33:a3:9b:1c:64:
db:86:22:fd:d1:1b:e2:5a:34:d6:f9:38:2f:0b:d4:77:8c:67:
bb:04:8a:ff:de:84:63:2c:54:77:ed:e5:e2:93:07:0b:fa:0b:
27:64:59:2b:36:65:01:69:36:6d:55:92:29:e8:2f:20:28:ca:
50:3f:84:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:19:43 2026 by rpki-client