Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/s10lbFf1PKkMruBfHpFjstZvSlU.roa
File: s10lbFf1PKkMruBfHpFjstZvSlU.roa (raw, json)
Hash identifier: t/lnEDm+ylVLBsyzGjVSxg9VE+O801fYPR7RIlJnqAk=
Subject key identifier: B3:5D:25:6C:57:F5:3C:A9:0C:AE:E0:5F:1E:91:63:B2:D6:6F:4A:55
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019ED0B58217A6785F5C816CF35B3F4E369A
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/s10lbFf1PKkMruBfHpFjstZvSlU.roa
Signing time: Tue 16 Jun 2026 13:53:36 +0000
ROA not before: Tue 16 Jun 2026 13:53:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 153.51.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:b5:82:17:a6:78:5f:5c:81:6c:f3:5b:3f:4e:36:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jun 16 13:53:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b35d256c57f53ca90caee05f1e9163b2d66f4a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d4:3c:ec:63:cf:8d:79:18:34:fc:3d:5f:c7:
de:c9:72:fd:fe:a1:cd:4b:c8:f1:cf:20:4d:3a:1c:
37:94:2e:ca:a1:28:d3:9b:bf:18:24:c2:a9:35:88:
b2:f0:71:ac:5a:35:9d:54:99:26:3f:a8:07:c1:5a:
bb:37:80:7b:c9:38:9b:1a:28:dd:1b:90:dd:5c:27:
65:b1:5b:f5:ab:d4:02:d1:69:84:62:80:f2:d6:64:
b2:43:05:eb:9c:64:91:bb:36:01:07:43:99:87:25:
ed:4e:d2:6c:a2:a6:70:20:90:3f:ea:0f:e8:78:1e:
e4:72:c7:fe:6b:86:cd:83:c5:00:e7:d7:76:de:ef:
33:40:e2:87:92:b2:26:aa:8e:a3:f1:e1:55:bd:02:
a3:8c:7b:f2:fe:e3:43:7e:e6:da:03:85:fb:db:54:
be:7a:cf:60:cb:1f:6f:d2:29:33:ab:d6:7b:13:2b:
8d:83:e3:97:0c:66:76:4b:69:d8:6d:86:79:01:be:
96:2e:75:c4:8a:e8:0c:c3:5e:8c:8e:b0:94:9a:7a:
c9:9c:f2:51:83:cc:54:45:9e:0d:3f:cd:11:1e:34:
29:5e:37:96:ec:65:db:1a:e7:dc:33:5d:c0:ea:bb:
7d:b8:15:9b:a7:81:f6:15:b4:4d:6c:6c:6b:c6:6d:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5D:25:6C:57:F5:3C:A9:0C:AE:E0:5F:1E:91:63:B2:D6:6F:4A:55
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/s10lbFf1PKkMruBfHpFjstZvSlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.160.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bf:a9:76:2b:5b:ea:1c:8c:4a:01:88:6e:2a:21:03:33:39:
54:16:8c:d1:1a:0e:3b:b8:2c:75:64:0f:13:c1:67:23:18:31:
04:a8:c3:5b:0a:59:ec:7f:c8:2b:86:ee:f6:a4:fb:5d:28:72:
24:9a:72:f2:47:e5:45:3c:76:d8:a9:28:f7:4d:3f:86:66:db:
c2:be:60:83:59:b8:4a:09:bf:91:84:cc:ae:9f:ab:cb:b3:8e:
88:b3:ad:84:b9:35:8f:c0:00:8a:8d:df:24:8f:bb:59:77:a4:
26:8a:50:e2:21:e6:75:78:b6:b4:71:ab:dd:0b:6d:3a:6a:9a:
34:45:96:34:61:e2:10:ff:a6:1c:71:c4:16:22:ab:30:01:bb:
94:7c:0e:4a:42:23:6e:b5:71:72:48:82:db:c5:41:9f:2f:6d:
37:81:b8:53:1f:86:e8:69:f0:08:85:26:0c:ed:99:59:f9:75:
71:af:c9:71:8d:a5:12:ec:d0:57:95:bb:81:88:63:90:cf:9e:
36:2f:de:b4:98:86:ad:a4:92:9a:43:e5:91:11:ff:be:79:ff:
46:d5:8e:db:ba:7e:2d:f2:2b:51:96:07:ad:0c:b4:a3:00:d3:
11:2d:23:e9:3a:b9:a9:a1:ad:df:af:74:8c:f3:d6:be:5b:ba:
af:66:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:36 2026 by rpki-client