Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa
File: aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa (raw, json)
Hash identifier: TnHtMgPhychs4GGqHiht/VWWogxSmwlOOeNfBvbp0w0=
Subject key identifier: 68:0A:5C:27:1D:55:97:A8:F1:EB:0E:32:A2:13:50:69:5D:48:A3:96
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A0079DAA160A13C8DD53EC690F990247FF
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa
Signing time: Sat 15 Aug 2026 22:49:27 +0000
ROA not before: Sat 15 Aug 2026 22:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12735
IP address blocks: 153.56.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:07:9d:aa:16:0a:13:c8:dd:53:ec:69:0f:99:02:47:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Aug 15 22:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=680a5c271d5597a8f1eb0e32a21350695d48a396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:68:0e:52:fd:df:c4:97:11:4f:98:45:0e:
d5:96:5b:41:87:ed:2f:dd:6f:91:6b:0c:05:b5:13:
bc:17:1f:5d:37:57:5c:c4:de:08:3a:9c:f1:b3:ae:
72:28:84:ab:b7:d4:a4:27:c6:b2:b9:ec:0a:a1:03:
1b:a9:fc:1e:b1:bc:7e:57:68:1e:98:fd:5f:32:98:
98:2f:de:bb:ef:d5:99:6f:2e:a0:62:c5:85:1a:4d:
68:c5:f9:ad:7f:7e:c5:d5:07:92:2e:5b:61:76:7a:
4f:b0:f9:63:8f:7e:c7:f7:3a:c9:7a:90:a3:13:9f:
92:74:cf:1e:45:8f:a9:50:5e:e6:8d:02:b4:b6:09:
7b:34:e6:b7:b5:06:c6:89:8e:e1:2d:ec:a6:0e:e5:
8a:39:9f:d6:c3:81:a4:33:9e:5c:3c:c6:60:af:66:
ce:57:37:cb:d3:3d:65:3b:87:e3:7e:16:e2:2a:f2:
30:fc:b9:2b:48:bb:20:c8:42:8c:ce:3e:8d:3a:7d:
4d:aa:a4:a1:c5:6b:1c:be:7b:31:7f:59:f3:c0:0b:
fc:e6:b9:a0:20:eb:74:21:b4:e6:9e:e0:4c:9b:47:
05:6d:01:e1:bf:b0:ac:54:f1:35:aa:78:10:86:ab:
d0:0c:45:3c:7b:e1:53:01:2d:d2:09:2d:c3:3b:24:
f4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0A:5C:27:1D:55:97:A8:F1:EB:0E:32:A2:13:50:69:5D:48:A3:96
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7f:2f:b1:89:22:52:a9:3e:63:d7:36:d3:8f:5b:ca:04:30:
80:d8:31:41:99:0b:b3:86:30:13:bc:57:d8:66:3b:1f:6b:c5:
f2:ea:1f:21:47:98:4f:c0:1c:af:b9:a2:64:ce:81:64:72:d1:
2e:1f:b2:70:02:8f:17:45:f0:bd:8b:78:60:1f:4f:29:fb:25:
ae:37:af:f9:5f:ef:f2:67:19:f7:50:7f:7d:ac:bf:3f:eb:b3:
91:7b:c1:23:65:90:7f:c0:fd:71:93:ad:4a:99:af:5c:1e:93:
0d:83:4b:46:e0:97:13:a2:76:e1:19:7d:da:66:1f:8b:15:7e:
3e:0f:f1:88:e9:89:74:9b:af:9d:b8:e3:a8:f4:f8:c8:46:d7:
da:23:8d:c8:ca:45:8f:d3:5a:6f:ab:64:a8:7c:68:a9:ad:5c:
b2:55:b0:36:d6:28:dc:85:e0:0b:91:44:2e:40:3a:8e:fe:94:
75:ae:c2:fa:4c:02:a9:6e:20:4a:fe:bd:7c:e1:73:b1:36:22:
67:f5:c6:5c:38:d5:6a:76:bf:7e:9d:ee:a5:e8:ab:1e:16:dd:
92:20:fd:db:f2:1a:96:42:52:52:c3:27:b9:81:d9:7c:f6:53:
d8:89:78:79:73:e5:cd:98:d1:b5:eb:00:a6:f1:f1:67:43:a6:
b4:58:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:48 2026 by rpki-client