Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/CoLO71qrUv_4qMwwwRs5lDVCE9E.roa
File: CoLO71qrUv_4qMwwwRs5lDVCE9E.roa (raw, json)
Hash identifier: T4p9qnVSGm7AR+uo+khZZRMNDQd/GpzNGpYFRL2iEKU=
Subject key identifier: 0A:82:CE:EF:5A:AB:52:FF:F8:A8:CC:30:C1:1B:39:94:35:42:13:D1
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A0079DA816EC13D2656B553B3E74ECBAEB
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/CoLO71qrUv_4qMwwwRs5lDVCE9E.roa
Signing time: Sat 15 Aug 2026 22:49:27 +0000
ROA not before: Sat 15 Aug 2026 22:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 153.56.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:07:9d:a8:16:ec:13:d2:65:6b:55:3b:3e:74:ec:ba:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Aug 15 22:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a82ceef5aab52fff8a8cc30c11b3994354213d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:bc:12:25:bd:7d:57:82:db:99:30:23:a9:
f2:21:02:fe:48:43:86:25:d5:1f:c2:34:76:47:11:
de:86:11:8c:5e:95:1b:23:e3:bd:44:44:53:29:81:
61:23:5d:8f:ef:f9:73:0b:17:dc:8a:3f:a4:e8:85:
81:5f:57:3f:be:61:c5:44:1c:12:0c:49:51:a6:1c:
a6:5a:78:06:a2:93:fe:64:87:9e:1f:79:3c:8a:2b:
ea:3b:2a:83:d6:7b:b3:b9:a9:9f:7c:d3:06:18:df:
12:5a:99:d1:14:a2:2a:16:17:d9:52:76:33:6f:34:
b6:8e:d7:c9:dd:92:85:c9:1f:a3:48:18:e5:81:fa:
57:03:d8:8d:d0:75:3e:31:da:b3:cd:50:10:d1:e9:
9c:47:f6:e7:c2:d2:39:83:3b:d1:df:1a:9d:d3:88:
f0:70:39:82:8b:53:66:23:d3:89:5c:ac:ee:53:30:
de:9a:47:97:88:7b:84:ac:bc:72:3a:a9:9d:88:ed:
c5:da:78:f1:cb:12:91:92:0d:25:38:80:56:51:d4:
89:c6:6a:5c:e6:fd:27:70:f6:3e:94:56:9d:05:aa:
78:50:95:62:c8:87:d3:ae:b2:69:83:72:1c:46:48:
78:34:78:63:72:7d:da:d4:9b:e7:5a:4c:ab:fb:7e:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:82:CE:EF:5A:AB:52:FF:F8:A8:CC:30:C1:1B:39:94:35:42:13:D1
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/CoLO71qrUv_4qMwwwRs5lDVCE9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:07:84:b5:bd:e8:e4:e1:d5:74:ed:73:fd:f9:fb:2e:da:a3:
d5:3a:79:52:3e:02:bf:56:d8:9b:b0:7b:1e:a0:fc:ab:cf:be:
3d:79:15:a6:6e:43:50:9d:49:e3:e7:7e:dd:0d:7e:14:5c:b7:
d3:1d:f9:e5:2a:2c:d9:49:e8:26:99:7c:8d:52:d6:38:1c:06:
e3:50:bd:56:8e:4d:f0:d2:c6:61:e3:98:84:41:46:03:49:26:
ce:53:97:ed:7b:a6:14:0f:32:af:b7:51:1d:d3:5d:37:04:d8:
c6:0e:c9:fb:ed:a6:5c:ef:d2:ce:62:ff:6c:b5:8c:a9:87:d3:
2e:ad:de:98:11:fd:9d:d5:9e:72:29:69:5e:a7:d6:45:46:b4:
66:e4:97:60:06:77:ef:df:89:15:db:ab:00:e2:64:c0:ea:0e:
b8:22:e6:78:d4:bd:d7:4f:63:93:dc:57:a0:a2:0a:bd:d9:87:
3c:67:f4:a7:3a:c3:90:10:d0:fc:96:ee:58:a6:b3:ba:dc:51:
05:aa:1d:ea:9e:49:29:4a:c3:07:31:96:ad:d9:30:4c:ad:21:
9b:ac:cf:d2:cf:0f:a0:8c:16:d5:f7:a1:7a:73:99:22:62:f9:
0b:58:e4:95:2e:fd:36:63:73:e5:85:b2:e6:cb:f6:be:2f:94:
44:ea:14:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:21 2026 by rpki-client