Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/5-GtKhoAa66dioBZrpVFfqRz7cI.roa
File: 5-GtKhoAa66dioBZrpVFfqRz7cI.roa (raw, json)
Hash identifier: 8StcYCEG4rjyFat3WS2Tv/dBrTZvUN2GO2Qno0+qmVg=
Subject key identifier: E7:E1:AD:2A:1A:00:6B:AE:9D:8A:80:59:AE:95:45:7E:A4:73:ED:C2
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019EE82C74E95E13A15F3DA920202DE901C9
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/5-GtKhoAa66dioBZrpVFfqRz7cI.roa
Signing time: Sun 21 Jun 2026 03:14:48 +0000
ROA not before: Sun 21 Jun 2026 03:14:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1273
IP address blocks: 2.153.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:2c:74:e9:5e:13:a1:5f:3d:a9:20:20:2d:e9:01:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jun 21 03:14:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7e1ad2a1a006bae9d8a8059ae95457ea473edc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:42:24:0e:fd:f6:6a:41:bf:e6:81:f1:86:
b9:a8:b7:f2:d2:ce:21:08:2d:f1:9a:94:e9:73:8a:
64:40:b0:3e:92:9c:aa:a7:58:a2:92:08:77:c7:fc:
b5:b4:59:87:eb:4d:bd:6b:7d:4c:68:c1:0a:0b:11:
36:78:23:84:56:2d:77:a5:ea:cf:6f:23:02:73:3a:
ab:63:13:07:e9:9e:dc:00:80:d3:32:07:e4:d7:71:
6a:9c:b2:28:ec:3b:16:86:37:69:0b:70:8b:b5:b4:
98:5d:69:88:3e:81:ad:2c:b0:3a:a2:b0:c2:49:9e:
75:b5:a2:e7:c3:71:b2:b9:37:21:1b:3e:1f:ae:09:
88:9d:19:76:88:a7:b8:82:75:0d:1a:b8:34:eb:82:
68:31:f8:93:72:c1:07:29:48:8b:7e:fd:c4:3d:c1:
7f:a7:bb:99:7b:3f:0a:ec:13:91:bd:c6:7a:58:60:
b2:82:9e:bf:7d:c0:91:3f:92:a7:5b:dd:3d:3d:b5:
c2:77:47:42:0a:0d:a3:16:3e:43:04:52:7a:07:73:
99:4a:5e:d7:19:bd:0f:0c:89:23:4a:6f:d5:2b:7e:
5f:02:03:67:90:23:74:b2:1d:a1:b9:1c:65:96:b3:
a9:1e:26:76:22:36:8f:17:90:9a:4a:32:d7:1b:38:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E1:AD:2A:1A:00:6B:AE:9D:8A:80:59:AE:95:45:7E:A4:73:ED:C2
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/5-GtKhoAa66dioBZrpVFfqRz7cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.153.128.0/18
Signature Algorithm: sha256WithRSAEncryption
8f:01:45:14:6b:0e:c5:a3:60:a1:bc:d0:48:96:c7:bf:3f:16:
62:04:5f:5c:07:f0:0b:55:c6:8b:d9:78:d4:75:37:44:5e:d0:
74:72:79:6b:c8:ab:b7:61:0e:86:63:ae:9d:1e:c8:87:04:5f:
3b:2f:5d:1a:37:7a:16:01:6e:d6:ec:dd:6e:f1:6d:7a:40:27:
b8:38:85:aa:b8:1e:9c:1e:74:bf:4d:37:43:af:bd:52:50:7f:
94:7f:5e:b5:63:4d:6a:f0:14:bc:6a:7d:ab:ad:ab:94:fc:fe:
22:b3:2e:99:a5:15:09:44:46:4b:1f:7d:5e:f3:0e:fa:c3:3b:
1d:22:84:5b:11:88:c3:a7:61:80:67:64:5b:6d:ed:90:80:02:
03:4e:b3:74:06:82:ee:5b:88:2b:f1:a7:50:9a:8a:1e:a7:b1:
49:b1:bb:17:a4:9e:c2:91:2d:49:e3:0a:5d:69:46:51:84:8f:
74:d7:22:7b:5b:ec:f8:54:7e:fb:37:f4:ac:49:3e:7a:70:d8:
f2:f7:3b:fe:cf:38:f6:ef:f7:ef:94:92:d0:db:58:11:2b:93:
22:be:57:7a:95:7d:8d:76:7c:ab:1a:34:a2:ce:f8:96:aa:2f:
d1:9e:5c:07:d8:42:11:a2:21:1a:9e:b2:cd:fb:13:ee:f5:ee:
45:a9:14:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7oLHTpXhOhXz2pICAt6QHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjYwNjIxMDMxNDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2UxYWQyYTFhMDA2YmFlOWQ4YTgwNTlhZTk1NDU3ZWE0NzNlZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxlCJA799mpBv+aB8Ya5qLfy0s4h
CC3xmpTpc4pkQLA+kpyqp1iikgh3x/y1tFmH6029a31MaMEKCxE2eCOEVi13perP
byMCczqrYxMH6Z7cAIDTMgfk13FqnLIo7DsWhjdpC3CLtbSYXWmIPoGtLLA6orDC
SZ51taLnw3GyuTchGz4frgmInRl2iKe4gnUNGrg064JoMfiTcsEHKUiLfv3EPcF/
p7uZez8K7BORvcZ6WGCygp6/fcCRP5KnW909PbXCd0dCCg2jFj5DBFJ6B3OZSl7X
Gb0PDIkjSm/VK35fAgNnkCN0sh2huRxllrOpHiZ2IjaPF5CaSjLXGzgIVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOfhrSoaAGuunYqAWa6VRX6kc+3CMB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvNS1HdEtob0FhNjZkaW9CWnJwVkZmcVJ6N2NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGApmAMA0G
CSqGSIb3DQEBCwUAA4IBAQCPAUUUaw7Fo2ChvNBIlse/PxZiBF9cB/ALVcaL2XjU
dTdEXtB0cnlryKu3YQ6GY66dHsiHBF87L10aN3oWAW7W7N1u8W16QCe4OIWquB6c
HnS/TTdDr71SUH+Uf161Y01q8BS8an2rrauU/P4isy6ZpRUJREZLH31e8w76wzsd
IoRbEYjDp2GAZ2Rbbe2QgAIDTrN0BoLuW4gr8adQmooep7FJsbsXpJ7CkS1J4wpd
aUZRhI901yJ7W+z4VH77N/SsST56cNjy9zv+zzj27/fvlJLQ21gRK5Mivld6lX2N
dnyrGjSizviWqi/RnlwH2EIRoiEanrLN+xPu9e5FqRQb
-----END CERTIFICATE-----
Generated at Mon Jun 29 16:30:35 2026 by rpki-client