Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/I71NJkj89h8wSgRZEv7Uu-ennY8.roa
File: I71NJkj89h8wSgRZEv7Uu-ennY8.roa (raw, json)
Hash identifier: 7qKOfTXecU9G79v4eb63WyfNmDEqd5wE7Rw0F1+7oP8=
Subject key identifier: 23:BD:4D:26:48:FC:F6:1F:30:4A:04:59:12:FE:D4:BB:E7:A7:9D:8F
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01A15F9E2B6A5EC6051E12CB37882621B7CF
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/I71NJkj89h8wSgRZEv7Uu-ennY8.roa
Signing time: Wed 21 Oct 2026 17:59:23 +0000
ROA not before: Wed 21 Oct 2026 17:59:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 5.56.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:9e:2b:6a:5e:c6:05:1e:12:cb:37:88:26:21:b7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Oct 21 17:59:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23bd4d2648fcf61f304a045912fed4bbe7a79d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:1b:d8:7f:2f:f0:38:82:81:7a:3a:6c:a5:
30:3a:91:21:4b:d1:4a:4b:5b:a9:df:22:30:3f:23:
df:6a:b1:ea:eb:92:2f:8a:95:8d:bf:8d:1d:4e:5c:
92:8f:78:c3:cd:51:5a:9f:2f:74:c9:bb:53:03:47:
dc:3d:cc:ab:14:02:10:36:c4:ef:f6:97:61:25:f1:
66:ef:04:ec:fc:4d:d5:b2:02:16:71:54:89:df:67:
17:ad:11:c2:d2:14:99:30:92:9d:8b:f9:89:a4:28:
92:a7:f6:b9:f3:f9:c9:6e:11:58:c8:eb:f4:d4:d8:
a6:81:f3:d2:31:a6:78:3a:93:f0:2c:d6:b6:5c:b5:
b9:a6:f8:34:2f:44:42:7f:e8:b4:d9:40:e3:5e:97:
fa:fd:df:0e:9e:bc:db:ff:a7:4a:50:40:f4:c9:bd:
00:0e:89:c9:41:0b:74:9d:e0:1d:a8:e6:06:5e:40:
2d:08:a6:79:70:7b:28:21:22:bb:e1:11:fe:13:b3:
2c:f5:eb:31:48:9a:3e:06:c8:c0:24:07:2e:d7:21:
4c:05:6c:f6:2f:15:5c:96:10:f2:60:e6:23:0f:f3:
ae:ae:ba:e3:60:13:99:63:ea:ed:c5:c8:1a:7d:b4:
bc:f1:9b:dc:b3:cf:4d:88:c6:09:37:8e:08:53:a6:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:4D:26:48:FC:F6:1F:30:4A:04:59:12:FE:D4:BB:E7:A7:9D:8F
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/I71NJkj89h8wSgRZEv7Uu-ennY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.28.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:a8:53:8f:01:ff:18:e1:ce:d8:1c:c9:a4:98:8b:3d:01:82:
dc:54:da:4f:b4:0f:f0:92:01:05:04:3d:57:97:f1:3f:c5:33:
74:d0:98:9e:e5:0b:8f:34:fd:27:76:03:43:cd:cc:38:25:e1:
23:4d:90:b4:2a:d7:83:4c:33:49:70:ea:9e:4e:46:64:d2:b8:
62:ce:8b:37:55:1c:0e:29:9c:57:9e:41:ec:ae:84:74:8b:39:
10:00:82:62:fc:a7:b7:e6:a2:81:42:e3:ba:27:fb:6e:95:cb:
86:76:ef:f5:89:12:80:83:39:05:b2:fa:a4:0a:6f:fd:4a:91:
14:e7:dc:ca:2c:43:14:5f:a7:27:93:ed:1d:e3:08:93:39:90:
79:db:2a:d4:9b:86:1e:68:89:3d:2c:f3:21:d9:d0:2e:45:69:
ef:eb:3d:13:5c:15:6a:7e:b0:e9:34:02:a0:ad:5b:d7:46:df:
bb:b0:68:6a:bc:40:59:a3:fa:80:67:f1:6a:24:d3:b6:9d:19:
39:9c:3a:d4:df:f2:a0:92:15:c8:27:2a:81:8f:6d:04:e4:25:
29:92:3d:4d:10:29:eb:ee:3f:f9:a8:b9:99:6f:65:03:84:8e:
34:d3:48:38:98:63:eb:24:6e:fd:24:72:38:38:86:64:4a:68:
57:94:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:53:02 2026 by rpki-client