Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/U5RLeifz_xBe5s_He7E-Usj0o2U.roa
File: U5RLeifz_xBe5s_He7E-Usj0o2U.roa (raw, json)
Hash identifier: j6ywqTV/wpFAItlHMsi4PNzXglpUnGi+vu3TqttVZl4=
Subject key identifier: 53:94:4B:7A:27:F3:FF:10:5E:E6:CF:C7:7B:B1:3E:52:C8:F4:A3:65
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01A1638F0BAE925DE28B6F1ABE5FDD487B0C
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/U5RLeifz_xBe5s_He7E-Usj0o2U.roa
Signing time: Thu 22 Oct 2026 12:21:21 +0000
ROA not before: Thu 22 Oct 2026 12:21:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52035
IP address blocks: 158.41.24.0/21 maxlen: 24
2a0e:ce40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:8f:0b:ae:92:5d:e2:8b:6f:1a:be:5f:dd:48:7b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Oct 22 12:21:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53944b7a27f3ff105ee6cfc77bb13e52c8f4a365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:f2:38:5a:9a:a2:fb:ed:3e:fb:98:be:54:
22:93:25:44:12:60:92:b4:44:3c:4b:b3:09:71:d8:
c9:fb:74:9c:3b:1b:b1:10:54:12:8e:5f:94:79:4a:
4a:05:7c:d0:d4:31:e9:94:5f:db:e1:86:8f:bc:0c:
2e:69:c3:a3:3a:58:5e:ed:a0:02:72:cb:a9:e3:09:
ed:ec:54:ff:46:8b:bd:a2:41:d9:ba:5c:2d:0c:bc:
63:24:07:7b:1e:98:f5:83:58:28:0a:63:1c:96:d3:
8b:3d:98:db:c8:c8:11:a2:76:6d:b3:20:09:56:f7:
75:47:74:f2:6a:f6:a7:ad:6c:a4:e7:5b:ed:5a:f9:
6d:53:af:fa:fa:ba:73:41:b0:d5:1f:b1:25:7a:67:
6b:9c:95:e6:74:95:ea:51:2c:00:73:69:99:55:73:
f0:3c:b4:97:b5:f7:a0:c2:82:87:ad:9e:30:e9:97:
79:af:3c:6f:40:22:66:c7:f3:78:6e:00:07:42:8e:
98:3d:89:32:98:e7:c0:9a:ac:cb:15:d7:42:87:80:
bf:09:41:f4:b1:ce:84:31:ee:7f:76:0a:05:40:02:
83:b3:c8:4d:95:52:e9:15:0b:52:3d:f8:b4:ff:0c:
9d:1b:42:be:5d:43:26:d7:81:7a:ca:b4:3c:38:33:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:94:4B:7A:27:F3:FF:10:5E:E6:CF:C7:7B:B1:3E:52:C8:F4:A3:65
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/U5RLeifz_xBe5s_He7E-Usj0o2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.41.24.0/21
IPv6:
2a0e:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
38:74:2e:e6:b3:a5:e0:e0:19:c2:22:e5:7b:85:a0:64:69:86:
b5:02:16:f4:0c:93:dd:27:5e:46:c4:d2:8d:8f:ab:8c:36:69:
10:b9:94:18:a4:92:2c:73:08:8b:39:69:81:37:f8:1d:ae:d1:
95:80:19:9d:cb:25:19:3e:40:74:b8:b0:de:f5:57:c7:ff:31:
9a:31:74:00:01:8e:e0:38:a6:33:4f:25:75:41:8e:f2:d7:de:
5a:54:30:cc:85:5e:20:19:97:a1:d4:e6:49:60:34:65:33:51:
8e:82:ce:73:89:6b:da:f5:47:e6:fc:67:f3:d7:c3:8b:73:67:
5c:31:ee:32:19:f8:0e:fc:18:8e:86:d8:e6:88:b1:b2:dd:61:
1e:c4:75:03:13:0b:18:2a:43:73:8f:a8:75:24:48:c3:6b:a2:
38:8e:0a:ce:7c:b2:fc:1e:0e:e4:4d:6c:30:85:86:68:ed:c2:
57:f0:08:24:17:a1:16:d9:d6:cc:9f:8d:0e:19:68:57:82:04:
91:46:29:4f:d1:04:a9:77:25:5a:23:5a:17:82:63:ef:aa:7d:
05:4c:7e:13:80:5e:d7:aa:ed:1e:a4:69:d0:48:14:9d:3b:3b:
99:57:48:da:99:87:63:e2:01:3c:b3:1e:5a:5f:dd:24:c9:ce:
41:dc:ad:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:14:16 2026 by rpki-client