Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/lBW5YHPb8dUMIQp7Ni-iMJP_E4Y.roa
File: lBW5YHPb8dUMIQp7Ni-iMJP_E4Y.roa (raw, json)
Hash identifier: cbZo3D7fpp0X2deua8SfRD7Y1+8SplMIfDE6x9KtmDE=
Subject key identifier: 94:15:B9:60:73:DB:F1:D5:0C:21:0A:7B:36:2F:A2:30:93:FF:13:86
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019ED11FB44C893F35A1D6A04E8AE2DDD6DD
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/lBW5YHPb8dUMIQp7Ni-iMJP_E4Y.roa
Signing time: Tue 16 Jun 2026 15:49:36 +0000
ROA not before: Tue 16 Jun 2026 15:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3144
IP address blocks: 152.175.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:1f:b4:4c:89:3f:35:a1:d6:a0:4e:8a:e2:dd:d6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Jun 16 15:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9415b96073dbf1d50c210a7b362fa23093ff1386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8a:ba:09:51:74:9a:5e:ee:51:aa:f8:32:2d:
f6:32:7f:da:c3:a9:8b:b4:e8:41:21:ba:01:80:8d:
19:6b:a6:c4:53:0a:1a:a1:d0:6c:6b:3d:d9:92:7e:
0d:9b:53:6f:60:fc:f9:32:48:30:c1:21:45:8f:9e:
23:2c:57:b2:db:fb:59:f7:7c:0a:4e:13:27:b7:a9:
45:24:9c:08:8b:d2:69:06:60:cc:0f:42:85:99:c5:
ad:c7:d9:d4:6c:f0:dc:32:a9:b8:4f:64:9b:3a:7b:
18:aa:75:7b:93:93:89:da:4e:1b:cd:51:ad:58:fb:
80:44:dc:a0:46:b5:95:76:ae:b8:7f:e8:51:73:c4:
3b:3f:78:6c:ec:9e:54:b7:57:9c:61:77:4d:bf:23:
bb:17:aa:d9:fd:be:dc:85:4e:b4:26:a5:da:e0:b1:
9b:11:dc:02:3e:d9:66:0b:eb:6f:22:d8:42:71:7e:
56:0c:ac:da:45:6f:3f:26:b7:f6:11:d9:2d:a0:de:
43:cb:ca:d4:f5:c4:28:cd:b8:66:5d:a2:a8:3d:25:
44:1f:6e:ca:10:50:72:57:88:55:c5:48:b4:a6:94:
68:2b:63:c9:87:d0:f5:53:4b:55:74:4f:dd:70:b9:
f6:ee:42:23:f1:f7:ad:f4:4e:35:7a:ba:00:2c:7e:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:15:B9:60:73:DB:F1:D5:0C:21:0A:7B:36:2F:A2:30:93:FF:13:86
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/lBW5YHPb8dUMIQp7Ni-iMJP_E4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.224.0/19
Signature Algorithm: sha256WithRSAEncryption
89:ce:0f:e7:dd:28:17:90:90:2c:7a:4d:2c:14:84:78:d8:b2:
eb:4e:c0:37:16:3b:d1:a8:10:c5:5b:3e:4c:b5:be:91:e3:b4:
dc:5a:d9:15:ab:58:56:4a:5d:5f:2b:a9:18:05:b8:92:6f:28:
d8:dd:ee:3b:0c:93:10:b8:83:00:a1:12:ca:ba:04:dc:6d:af:
8f:3c:67:f2:f4:e6:17:de:5c:64:a2:82:ae:9c:b2:b5:bd:ba:
38:55:07:64:e6:0d:35:b0:ab:09:0c:dc:cc:c0:f0:7e:c6:7c:
ef:53:1a:31:09:5a:19:3b:22:76:cb:ce:be:dc:9c:0d:3f:c8:
67:94:7e:31:7d:42:55:3a:37:f5:ec:dd:e5:4f:09:cd:d6:b0:
02:b6:bb:65:02:94:c4:be:d5:c4:b9:13:8c:0b:8f:bd:07:21:
69:0f:63:d9:0a:ae:1a:84:3b:54:fb:4d:d7:22:81:f7:56:7f:
6c:5b:01:21:6b:9b:bc:14:e8:7b:64:aa:26:39:ff:d9:d3:3d:
79:29:00:8d:a1:8a:77:ad:7d:0e:ac:fd:d9:42:29:1c:33:37:
bf:87:b7:7b:c2:29:95:89:d8:f5:46:c1:13:83:db:65:dd:0d:
ff:48:b7:f6:d3:12:27:7f:d4:00:a8:4b:3b:9e:65:3f:b0:00:
28:f3:df:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:18 2026 by rpki-client