Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/AFebLvn6AH0mOGLAGY1K4fdA0ac.roa
File: AFebLvn6AH0mOGLAGY1K4fdA0ac.roa (raw, json)
Hash identifier: lc41gS5MnYI/Mo4Xzk3UtrseTVtRz4aEngOCwuhDcEI=
Subject key identifier: 00:57:9B:2E:F9:FA:00:7D:26:38:62:C0:19:8D:4A:E1:F7:40:D1:A7
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A00FB83D92AF6FBB04484411944A845B06
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/AFebLvn6AH0mOGLAGY1K4fdA0ac.roa
Signing time: Mon 17 Aug 2026 12:35:27 +0000
ROA not before: Mon 17 Aug 2026 12:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218947
IP address blocks: 153.56.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:b8:3d:92:af:6f:bb:04:48:44:11:94:4a:84:5b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Aug 17 12:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00579b2ef9fa007d263862c0198d4ae1f740d1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e5:63:78:3e:84:40:42:07:a9:53:fa:bb:92:
0a:c2:25:4f:e8:cb:96:65:2f:61:ec:19:01:cc:67:
a7:4e:75:cb:9c:93:ad:69:15:08:87:ae:9a:15:72:
7d:b3:14:df:ae:7f:06:d9:41:1a:21:06:9c:4c:f7:
26:c9:93:98:f2:02:ab:44:60:6b:7c:b6:c8:ce:3d:
c5:81:e6:8e:4d:75:3e:80:45:62:5d:bc:fa:8e:71:
6b:16:b0:0b:c4:18:c8:96:45:b9:2f:0f:8c:b7:ee:
ff:7b:2a:08:50:c2:26:af:67:a3:99:1c:96:39:2a:
f3:3e:8b:f6:42:b9:87:e3:ab:83:0f:1f:5d:d1:45:
27:62:7f:bd:d0:94:33:e8:da:4a:37:ae:7d:d8:63:
20:02:9f:e4:4e:8c:dd:b2:86:ce:65:b4:82:11:62:
a7:1a:f0:c4:e3:55:a6:df:5d:49:17:b1:73:5a:27:
c5:46:6d:0e:24:51:11:5b:4f:13:cd:91:5f:8f:5d:
ad:d9:28:66:28:93:3c:c4:45:c6:52:b5:97:7d:72:
32:a9:0c:3f:6b:62:1e:80:f7:65:a5:35:bd:06:b9:
b5:d6:e4:d8:e6:b4:77:8d:c9:e0:7c:98:24:6b:bf:
95:23:f0:06:ff:de:43:0b:d7:14:3a:13:f2:c8:fa:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:57:9B:2E:F9:FA:00:7D:26:38:62:C0:19:8D:4A:E1:F7:40:D1:A7
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/AFebLvn6AH0mOGLAGY1K4fdA0ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:48:64:fb:2a:ba:0e:f4:82:d9:9e:35:0a:08:55:5b:5f:89:
f5:ed:84:dc:69:68:b4:f1:d9:60:5a:87:22:ac:03:40:7e:66:
57:b1:7a:88:98:61:7d:8b:6e:ec:49:d8:69:48:bd:b6:05:e0:
fb:bd:13:f9:09:0a:2a:22:6f:c1:fb:53:43:48:ce:6e:66:3e:
e1:d0:e9:2c:48:3c:5f:18:57:f3:ff:9e:72:d0:8f:32:4c:00:
11:c1:5a:38:8a:fd:7c:57:8e:c4:e9:1d:70:0b:b6:27:2c:f7:
23:c4:29:96:cb:ad:7b:00:5f:43:fa:d2:06:9b:f4:20:b3:60:
d2:23:f3:90:79:6e:c4:c6:c2:39:74:18:c4:48:ac:dc:27:32:
01:75:b4:ff:af:9f:09:8b:27:57:ee:9d:39:9e:20:a8:ff:48:
68:dc:5d:8b:79:84:73:f8:67:7f:9d:42:14:1a:56:ad:af:ff:
80:1f:6c:ea:45:c0:bc:dc:26:a9:e9:7b:14:20:5d:da:d6:b4:
44:e3:44:b2:8a:63:32:22:30:5b:54:8d:00:6f:e8:c9:35:db:
67:22:b5:33:77:f4:5f:d8:41:38:26:39:d9:d9:9a:69:27:d0:
e8:02:68:9b:82:fc:5f:d5:73:2c:d4:b2:5a:61:26:97:e2:9a:
7c:52:19:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:06 2026 by rpki-client