Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/E5AdQLULTFPqJUlYObxVI6_1WfA.roa
File: E5AdQLULTFPqJUlYObxVI6_1WfA.roa (raw, json)
Hash identifier: mxZ1AnAnqb7JN49e/B8I8tpnf+4p9JvJ06z2WEs5jMA=
Subject key identifier: 13:90:1D:40:B5:0B:4C:53:EA:25:49:58:39:BC:55:23:AF:F5:59:F0
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 019E2CB4C8C45C151E3F459864057541038E
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/E5AdQLULTFPqJUlYObxVI6_1WfA.roa
Signing time: Fri 15 May 2026 17:35:05 +0000
ROA not before: Fri 15 May 2026 17:35:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56376
IP address blocks: 185.112.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:b4:c8:c4:5c:15:1e:3f:45:98:64:05:75:41:03:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: May 15 17:35:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13901d40b50b4c53ea25495839bc5523aff559f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:e3:82:fa:10:66:2f:48:d0:ea:b6:41:61:
ad:77:f3:17:24:f8:ff:d1:4b:4a:7e:df:50:e0:eb:
20:a8:91:73:85:35:93:5f:b1:34:8b:16:87:50:9d:
0e:a0:c1:06:02:2a:03:51:6f:69:7d:7e:63:d9:63:
52:2d:dc:ab:d6:64:63:cb:d6:9d:fd:38:ee:40:dc:
8e:a1:18:78:79:76:49:2d:69:b6:ea:7d:10:2e:90:
a5:41:6c:2a:2d:14:cc:91:e3:e7:c2:0b:5d:f0:61:
60:ae:a0:ae:13:b1:62:5b:4c:7e:0e:48:c8:5f:36:
73:9e:0c:5a:3a:62:6c:5b:47:d8:f8:00:ec:91:a8:
d7:93:a0:31:ac:72:c8:fb:48:34:b3:bd:f6:8e:79:
c4:cb:f9:e1:fc:87:de:2d:08:dc:3e:cd:e2:a0:e6:
e4:c7:d4:b1:87:13:e1:ff:94:3f:17:14:84:a1:c3:
38:8d:d3:9a:59:3f:0e:67:ae:03:b1:0d:a4:fa:d2:
a4:b8:8e:e5:19:b4:17:3a:9c:1c:48:06:f5:94:52:
49:5b:b7:0b:c5:dc:44:bc:a8:71:a1:22:e4:f2:56:
61:5d:a2:98:e6:84:55:58:3d:fc:cc:ea:8c:92:e0:
b6:e8:3e:3a:32:19:d1:8d:51:3d:a8:95:56:49:f4:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:90:1D:40:B5:0B:4C:53:EA:25:49:58:39:BC:55:23:AF:F5:59:F0
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/E5AdQLULTFPqJUlYObxVI6_1WfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:73:df:f7:44:54:6a:29:82:d0:85:17:4e:dd:6b:99:6b:93:
3a:7b:ac:4b:e9:c1:e5:bd:92:c7:c1:9d:f3:ef:56:8a:55:2e:
91:02:10:49:46:13:cf:58:14:6f:c3:2c:ae:14:f0:97:e7:19:
11:dd:09:e2:ce:ce:fe:0a:85:a9:a5:80:8e:14:f0:82:7e:1b:
ae:11:d3:1d:33:f3:1a:ed:c5:25:bd:c4:9b:0b:ab:46:cb:9f:
ec:d8:58:c1:8c:5f:70:ce:bb:cd:38:10:01:14:92:42:b5:ce:
f4:60:49:40:7b:03:35:9e:bd:63:d2:4d:fb:26:a9:6b:8f:18:
80:a3:21:4a:88:f7:7f:8f:7c:9c:8c:1c:8e:bf:ef:2c:a1:59:
d6:1d:f0:05:bc:4a:81:91:29:90:ca:96:9d:db:8b:32:6e:d0:
55:4a:bf:d8:0c:a5:d1:2b:b1:5e:30:3c:aa:e1:70:b4:68:a9:
2c:d9:d4:14:43:60:84:e9:3b:cb:bc:73:54:54:44:e7:6f:83:
df:a6:01:72:c8:39:5f:e9:60:ed:4c:2b:f3:3d:42:d7:e3:b9:
98:8b:71:b8:4c:1a:51:7e:bc:08:f2:d4:d0:c2:f2:5b:47:5f:
1c:8b:e9:99:1b:1a:f5:35:98:02:aa:74:8d:63:dd:01:a6:dd:
a6:27:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:53:07 2026 by rpki-client