Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/2hUNqAaLAxlTuvxBbQp3Ny8ZRBg.roa
File: 2hUNqAaLAxlTuvxBbQp3Ny8ZRBg.roa (raw, json)
Hash identifier: JHzxdaWvVLDKSsd26QrH87bLuJsRLjXCmgemIpABYco=
Subject key identifier: DA:15:0D:A8:06:8B:03:19:53:BA:FC:41:6D:0A:77:37:2F:19:44:18
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01A0050067AA1846B51CC64817F4E27A2A46
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/2hUNqAaLAxlTuvxBbQp3Ny8ZRBg.roa
Signing time: Sat 15 Aug 2026 10:38:27 +0000
ROA not before: Sat 15 Aug 2026 10:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213751
IP address blocks: 5.56.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:00:67:aa:18:46:b5:1c:c6:48:17:f4:e2:7a:2a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Aug 15 10:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da150da8068b031953bafc416d0a77372f194418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e5:78:46:1f:72:da:68:54:78:b8:bd:b1:c2:
d4:f3:83:e0:aa:3d:3e:46:7c:12:8f:8e:08:c6:de:
7d:f3:b3:b5:26:74:fb:bf:9b:15:a8:2a:3a:77:90:
80:e8:6b:d9:61:8c:9f:76:e9:70:b2:3e:f0:5c:5a:
f4:1a:3c:26:07:08:7b:87:24:d5:56:71:cb:ca:40:
99:6f:4f:2c:e8:1c:f7:d6:ef:59:67:81:58:aa:fa:
1a:70:96:58:e5:e3:19:1f:39:49:aa:ff:9b:fb:b5:
35:0f:6b:a6:28:11:43:05:69:8c:89:ec:c9:5c:a1:
91:2c:c1:51:b7:17:9b:e2:e4:48:f2:ea:6a:f7:b5:
15:b4:41:05:15:c4:ff:9e:23:db:6f:fb:9d:68:c3:
f4:12:d0:01:53:28:ac:66:ee:52:ca:18:ca:47:67:
9e:42:42:e4:7a:58:ab:a0:d4:ff:12:5e:fa:07:89:
29:da:47:c9:0a:11:b6:47:7c:39:00:ae:46:ba:19:
90:f6:62:8f:08:26:fc:7c:26:87:7a:52:7b:e1:69:
29:97:18:7d:64:86:be:24:30:b7:9e:09:79:8e:22:
c0:7e:62:4b:be:4b:3d:b7:2a:0a:9d:f9:bf:8e:72:
70:0b:a5:9d:33:fb:87:2a:db:ee:27:a1:a5:e9:da:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:15:0D:A8:06:8B:03:19:53:BA:FC:41:6D:0A:77:37:2F:19:44:18
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/2hUNqAaLAxlTuvxBbQp3Ny8ZRBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.30.0/24
Signature Algorithm: sha256WithRSAEncryption
18:de:48:a4:d0:19:6d:3d:e8:12:f3:fc:25:a9:b4:b5:8a:c1:
0b:69:a7:86:73:c3:42:e3:d4:d7:50:ec:73:63:ce:82:5c:c6:
38:2d:e6:fa:7c:b9:8d:dc:9e:b9:28:ba:dd:af:c8:13:a9:ed:
fc:ec:f3:b7:1e:e7:a4:d4:15:e1:d0:18:f9:5b:f7:b8:b6:db:
dd:23:a8:ae:eb:3a:63:26:7e:c2:56:f2:59:ae:02:c5:63:fd:
37:90:a4:fe:c0:b0:13:18:c3:44:b2:19:6e:1f:56:7a:c2:d6:
6b:cd:42:e8:c0:a8:9d:95:94:eb:2e:55:b9:7a:f4:ba:51:d0:
f8:1f:a7:cd:73:3b:00:e2:f5:28:18:73:95:0a:92:94:73:0d:
62:1d:c2:df:ae:b2:64:cb:bc:e2:1e:e6:74:23:33:d6:41:25:
26:16:b7:4d:46:48:43:f1:af:15:83:a8:b9:fb:57:75:c9:a0:
e6:25:e7:db:f7:9c:f0:18:d4:01:b2:df:62:79:d9:e3:41:03:
6a:19:36:b6:e9:2f:b9:70:a7:39:29:91:31:04:93:55:c9:71:
58:c1:3c:42:8d:6c:93:37:a6:8a:1f:7a:09:bf:4e:4d:eb:44:
ec:45:1f:19:43:c3:8e:86:94:fa:e9:e0:69:35:a8:0e:8b:2b:
f7:50:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:10 2026 by rpki-client