Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/eh5fOnfV3Yahiu4aGae0RbMTacA.roa
File: eh5fOnfV3Yahiu4aGae0RbMTacA.roa (raw, json)
Hash identifier: EnUBauk+HPUC2FL0C2u4k3bttrn+4mEzqjxd5GPr53A=
Subject key identifier: 7A:1E:5F:3A:77:D5:DD:86:A1:8A:EE:1A:19:A7:B4:45:B3:13:69:C0
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A0F25E465196F5B66E90086B66B09EF82F
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/eh5fOnfV3Yahiu4aGae0RbMTacA.roa
Signing time: Wed 30 Sep 2026 12:50:59 +0000
ROA not before: Wed 30 Sep 2026 12:50:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 153.56.247.0/24 maxlen: 24
153.56.248.0/24 maxlen: 24
153.56.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:5e:46:51:96:f5:b6:6e:90:08:6b:66:b0:9e:f8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Sep 30 12:50:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a1e5f3a77d5dd86a18aee1a19a7b445b31369c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:2e:11:2c:13:41:0c:17:a3:59:f9:a7:dd:
65:63:4d:f9:44:0d:f1:87:8c:18:d6:0d:4b:fc:76:
dd:01:c3:5f:06:0b:18:f1:f9:e0:8e:69:46:2e:55:
00:88:36:ad:48:50:b0:28:84:0e:36:ee:0f:08:0a:
83:bf:67:6e:20:05:bf:5f:e6:f5:c4:86:13:c3:3b:
d7:14:28:35:7d:15:68:1f:e9:ab:c2:aa:ea:bc:d7:
8f:ce:17:03:2b:7b:ec:e7:56:5f:90:15:6c:f3:c6:
5d:01:09:ad:e7:fe:7a:b0:f5:46:91:66:b2:96:3a:
4a:b3:e1:74:78:7d:74:60:fa:d1:86:41:72:ce:46:
e3:61:f7:0f:64:bb:5e:09:50:43:5f:05:19:09:91:
ff:45:d6:a3:8f:df:da:38:57:d5:5b:d6:f2:87:13:
c5:3e:1c:96:bc:d6:7e:2a:f0:c9:f8:a4:d9:75:e7:
b7:d4:ca:aa:83:f6:62:83:82:00:c0:ad:27:4c:67:
f0:76:2f:2b:f2:ad:14:3b:e8:d4:ac:ae:e3:3a:23:
81:49:09:bf:f9:48:ce:61:5c:38:f1:28:f0:23:38:
21:5c:24:cf:2c:8e:50:35:c8:59:80:50:7a:b1:b3:
8e:72:d0:d6:43:7d:0b:ff:f7:f8:ee:3b:79:f5:ba:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1E:5F:3A:77:D5:DD:86:A1:8A:EE:1A:19:A7:B4:45:B3:13:69:C0
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/eh5fOnfV3Yahiu4aGae0RbMTacA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.247.0-153.56.249.255
Signature Algorithm: sha256WithRSAEncryption
00:6d:9e:bb:20:47:e1:3d:d1:31:ea:dc:a3:54:f8:e0:e1:de:
03:b2:ca:d0:56:1f:06:7a:d3:87:49:e4:2f:0f:b8:17:2a:82:
54:bb:38:8f:96:45:ec:94:81:83:f8:3f:68:d4:0f:b2:4c:27:
51:c3:d8:84:e1:2d:30:00:75:c1:56:6b:35:10:5b:89:05:46:
45:39:4c:ad:36:55:f7:31:c7:0c:ca:cf:32:22:8e:1a:70:a5:
93:e5:94:7b:cf:73:7d:3d:3c:8d:42:7b:09:61:da:36:c4:8e:
0b:da:f5:7c:58:a7:b9:d9:15:94:e8:95:5a:7a:c0:b5:ce:1b:
69:a5:86:7d:b1:cd:86:d5:d9:5f:c1:76:38:ef:eb:9a:17:82:
35:27:a6:8c:ae:f0:c9:c4:37:37:1a:70:26:63:e8:f0:76:92:
ac:91:91:38:af:cf:d3:52:a7:b9:cd:8d:8c:7b:c1:4d:c3:49:
f7:29:47:49:46:87:40:af:40:4e:97:df:2d:c4:f1:e6:0d:2b:
2f:91:5a:fa:dc:91:52:5c:0c:91:d0:67:46:5d:f8:8a:9c:e8:
91:45:75:4f:4d:f6:a7:03:a9:55:d9:f6:f6:6f:da:22:b2:35:
10:5f:ac:5f:27:5d:7f:56:ba:e2:4f:66:a9:78:a8:aa:0e:04:
83:bb:ee:da
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaDyXkZRlvW2bpAIa2awnvgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4
ZjMzYTcwHhcNMjYwOTMwMTI1MDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTFlNWYzYTc3ZDVkZDg2YTE4YWVlMWExOWE3YjQ0NWIzMTM2OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9EuESwTQQwXo1n5p91lY035RA3x
h4wY1g1L/HbdAcNfBgsY8fngjmlGLlUAiDatSFCwKIQONu4PCAqDv2duIAW/X+b1
xIYTwzvXFCg1fRVoH+mrwqrqvNePzhcDK3vs51ZfkBVs88ZdAQmt5/56sPVGkWay
ljpKs+F0eH10YPrRhkFyzkbjYfcPZLteCVBDXwUZCZH/Rdajj9/aOFfVW9byhxPF
PhyWvNZ+KvDJ+KTZdee31Mqqg/Zig4IAwK0nTGfwdi8r8q0UO+jUrK7jOiOBSQm/
+UjOYVw48SjwIzghXCTPLI5QNchZgFB6sbOOctDWQ30L//f47jt59bpzYwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHoeXzp31d2GoYruGhmntEWzE2nAMB8GA1UdIwQY
MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt
MmI3OGIxOWI1YTg3LzEvZWg1Zk9uZlYzWWFoaXU0YUdhZTBSYk1UYWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3
LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACZOPcD
BAGZOPgwDQYJKoZIhvcNAQELBQADggEBAABtnrsgR+E90THq3KNU+ODh3gOyytBW
HwZ604dJ5C8PuBcqglS7OI+WReyUgYP4P2jUD7JMJ1HD2IThLTAAdcFWazUQW4kF
RkU5TK02VfcxxwzKzzIijhpwpZPllHvPc309PI1Cewlh2jbEjgva9XxYp7nZFZTo
lVp6wLXOG2mlhn2xzYbV2V/Bdjjv65oXgjUnpoyu8MnENzcacCZj6PB2kqyRkTiv
z9NSp7nNjYx7wU3DSfcpR0lGh0CvQE6X3y3E8eYNKy+RWvrckVJcDJHQZ0Zd+Iqc
6JFFdU9N9qcDqVXZ9vZv2iKyNRBfrF8nXX9WuuJPZql4qKoOBIO77to=
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:49 2026 by rpki-client