Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/a_bqWhibp7SeshuAQiOml-HBzFo.roa
File: a_bqWhibp7SeshuAQiOml-HBzFo.roa (raw, json)
Hash identifier: 3/NcBV1xs1onuU3mKr8Ow0etCQW+Riv48+qzB2krzYc=
Subject key identifier: 6B:F6:EA:5A:18:9B:A7:B4:9E:B2:1B:80:42:23:A6:97:E1:C1:CC:5A
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A103DBFB497D3A2296644ADDCD42231C16
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/a_bqWhibp7SeshuAQiOml-HBzFo.roa
Signing time: Sat 03 Oct 2026 22:21:50 +0000
ROA not before: Sat 03 Oct 2026 22:21:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 153.56.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:db:fb:49:7d:3a:22:96:64:4a:dd:cd:42:23:1c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Oct 3 22:21:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bf6ea5a189ba7b49eb21b804223a697e1c1cc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:5b:01:95:f8:a7:b7:f4:d9:a8:44:2e:b8:
b9:73:47:3b:25:7e:52:a6:09:71:59:f0:2a:db:a6:
a8:00:d9:ec:fb:ff:06:f2:6d:b0:d8:af:b6:d8:cc:
1e:ed:96:de:fe:52:07:cf:12:3e:e6:59:2e:30:7f:
26:a9:58:25:f0:de:94:aa:bb:ce:f5:39:06:7b:78:
f2:d9:93:4a:aa:5e:4d:84:03:3e:35:99:dd:3c:5e:
a1:24:8b:be:c6:a5:72:9b:b6:42:bb:23:0b:c2:23:
d6:3a:d7:51:8e:d7:41:61:c6:f3:af:1f:cc:3a:7b:
57:99:b3:72:a5:b1:f4:a5:d7:0c:cb:c9:fa:57:84:
6e:d8:91:d1:75:da:b8:a5:e2:5c:4a:26:53:26:7f:
3b:94:0a:0d:d0:9d:f3:0d:c4:1d:0e:51:09:22:ec:
59:4d:52:f5:18:c1:95:02:1a:a1:a9:f7:17:d6:38:
c1:22:71:4f:75:8c:d8:b0:79:89:b4:ba:17:d0:57:
b5:ff:41:b1:dc:97:05:d8:fb:46:8a:0c:82:b3:5c:
6d:f8:3a:0b:b7:20:74:6e:60:af:d2:c1:e8:5e:28:
c3:ca:6a:7f:36:89:c8:0c:50:f0:3b:d9:5a:55:75:
12:7b:83:d4:6c:b5:de:59:04:35:3a:d6:a7:28:1a:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F6:EA:5A:18:9B:A7:B4:9E:B2:1B:80:42:23:A6:97:E1:C1:CC:5A
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/a_bqWhibp7SeshuAQiOml-HBzFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e9:ff:4a:f7:75:07:25:b7:fa:54:4c:35:e8:33:c5:5e:12:
4a:19:01:28:b0:36:bf:e1:66:53:0f:d8:c2:10:a8:e7:d2:bd:
4b:fb:95:03:9d:0d:07:e9:2c:64:06:53:3b:1c:f7:44:14:8e:
ed:6c:ed:1f:7b:ca:ac:4d:16:39:fb:8f:52:27:82:97:50:2b:
2b:83:22:a8:d3:1b:78:ee:00:cf:b2:d9:9b:67:8f:6d:d6:90:
6e:27:2f:15:9b:90:0e:7d:64:1f:23:62:5c:b8:4d:38:8c:73:
b6:90:ff:32:3c:5b:f4:b4:c1:ca:31:fc:b8:98:7b:6b:e2:db:
fb:06:dd:ef:c1:c3:03:ab:67:1e:c9:94:db:bd:5f:e7:5a:65:
69:10:94:1e:f8:51:06:63:c3:82:b0:5f:da:3f:8b:95:57:86:
82:51:5b:fb:7b:72:c6:27:ba:68:e4:4f:8a:71:58:c0:28:1e:
a6:31:af:17:88:bd:03:a1:24:92:c7:44:fc:9b:ec:06:7c:c9:
23:83:6f:92:86:3e:67:7a:1e:4d:27:6c:59:28:82:6a:77:63:
1f:ab:51:0d:c8:09:87:4b:d6:06:92:3d:53:1b:f3:0b:25:e2:
08:51:d1:d4:47:07:e2:ff:fd:49:7d:28:e2:4e:98:fd:2f:80:
ed:03:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 13:21:15 2026 by rpki-client