Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/5Tuta24CBuBR1jcGU9oYTO_3hIo.roa
File: 5Tuta24CBuBR1jcGU9oYTO_3hIo.roa (raw, json)
Hash identifier: X7mubBoae+g7dlPp9DjhBxqfcYkNtn6APR12acbjYpE=
Subject key identifier: E5:3B:AD:6B:6E:02:06:E0:51:D6:37:06:53:DA:18:4C:EF:F7:84:8A
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F6EFDFC555B5411B9623D79F9004D9B8C
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/5Tuta24CBuBR1jcGU9oYTO_3hIo.roa
Signing time: Fri 17 Jul 2026 07:32:46 +0000
ROA not before: Fri 17 Jul 2026 07:32:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147218
IP address blocks: 213.189.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:fd:fc:55:5b:54:11:b9:62:3d:79:f9:00:4d:9b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 17 07:32:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e53bad6b6e0206e051d6370653da184ceff7848a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:ab:16:93:fe:e8:07:c6:aa:c6:d4:f9:6f:
e9:f6:9b:39:88:d1:f0:51:20:d8:2a:3f:69:ac:35:
46:88:5b:90:35:e7:10:60:75:1b:20:02:fb:41:68:
be:22:d1:88:eb:78:43:0a:ba:25:d9:b8:96:65:c7:
8d:ba:54:37:8f:60:6e:7e:94:0c:d2:0c:86:a1:09:
90:bf:63:e3:47:21:12:8a:57:42:97:4d:81:f0:28:
a8:7f:c1:25:95:a2:4a:01:60:03:7f:3c:ba:61:96:
38:1b:2d:7c:05:56:3e:2a:66:92:2a:c6:5c:71:f3:
36:89:f8:b3:90:74:46:47:00:28:ee:10:c6:74:f2:
1e:40:54:8d:d3:8f:94:92:a0:c3:38:53:f3:07:73:
41:f2:b0:38:21:90:7c:ac:68:ca:48:eb:d7:89:eb:
a6:d5:cd:2e:58:26:a9:e1:cd:25:d8:11:13:b5:fb:
00:da:41:cf:6d:ed:31:d4:9f:9a:38:34:90:bd:1c:
cb:4d:da:7d:0a:54:30:6b:43:4e:d4:21:af:7c:1f:
05:b6:ba:2f:5a:d5:de:5a:6c:4f:84:6c:7d:d3:d3:
93:3d:80:4c:91:c9:da:18:0b:b8:2c:a4:32:b3:5d:
5b:99:52:d1:c5:1b:e6:95:62:2b:12:25:2a:a6:22:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3B:AD:6B:6E:02:06:E0:51:D6:37:06:53:DA:18:4C:EF:F7:84:8A
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/5Tuta24CBuBR1jcGU9oYTO_3hIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.25.0/24
Signature Algorithm: sha256WithRSAEncryption
24:84:b3:33:34:2c:fd:28:12:4a:26:51:4d:34:f7:51:02:a4:
f0:b9:a4:3d:7f:1b:31:0a:d4:8b:d8:99:db:24:5f:9a:82:0e:
0e:51:7b:af:ac:33:3f:02:86:4f:9d:55:d8:14:c2:67:28:cf:
4e:c4:14:37:f3:e1:3d:a3:63:7c:66:53:60:09:ea:79:9b:b1:
7f:87:56:03:b7:dd:48:1e:91:7d:fc:8e:1d:f3:0c:8c:f6:1c:
a2:1e:09:27:d8:ce:91:82:f5:5f:4f:ff:5b:d9:a2:e2:69:fb:
b8:ae:c5:ca:11:fa:02:a8:0e:03:0a:a9:f4:90:a1:fd:88:49:
65:a0:7a:c4:ec:40:4b:1f:cb:c8:2b:9a:2c:86:3e:7a:ae:a1:
43:a3:c2:64:b5:85:4f:0f:c5:da:8a:88:aa:d4:7e:e5:db:31:
98:66:96:e7:a5:70:dd:4e:bd:55:c8:02:84:bb:87:11:1f:3f:
62:1a:a1:91:69:11:fb:39:b1:77:fd:c3:75:90:27:f3:7a:80:
db:75:d1:2c:72:22:11:5a:d2:59:55:68:db:4f:a2:30:b9:75:
37:39:72:f4:0c:7e:17:5d:37:8f:40:ff:1d:e7:1e:79:9c:b7:
f2:a5:5a:59:91:6f:52:43:5c:d2:a4:78:fd:9d:af:37:eb:da:
c0:c5:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:31 2026 by rpki-client