Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/U3q4aYmjkCcRSnXGlFFoXcmZnns.roa
File: U3q4aYmjkCcRSnXGlFFoXcmZnns.roa (raw, json)
Hash identifier: pDAC5lg0wGU8eNfGyCD4sf0z50duiEzjyYAf5h7iSsQ=
Subject key identifier: 53:7A:B8:69:89:A3:90:27:11:4A:75:C6:94:51:68:5D:C9:99:9E:7B
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368DBEA2A26DE276D4B9FE8D43F926E
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/U3q4aYmjkCcRSnXGlFFoXcmZnns.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 213.130.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:db:ea:2a:26:de:27:6d:4b:9f:e8:d4:3f:92:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=537ab86989a39027114a75c69451685dc9999e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:a8:a5:9a:7a:69:30:cc:ac:ac:c9:f9:0b:
47:e9:4f:6d:fe:c3:1d:5f:27:73:d1:95:d7:d2:ff:
1e:fd:f8:da:a5:39:46:99:be:2c:de:1a:9c:61:cf:
cd:f0:e5:04:4c:ba:9a:50:fa:80:d8:17:93:94:f7:
ba:e8:65:71:1d:5f:f7:d5:64:fa:3e:0e:ba:2a:7c:
d2:19:e9:4d:a2:8e:c7:1b:92:00:28:5c:a0:f3:fc:
c6:1c:91:7c:d9:f5:7d:0f:25:9b:a6:ba:57:13:4b:
46:9f:f8:2e:9f:3f:38:5f:6d:16:bd:fd:c5:ea:0a:
ac:21:59:ae:99:2b:8c:d6:3f:c9:6f:80:4a:a6:c5:
34:e6:85:ec:5b:6e:30:4d:42:7c:49:03:c3:6b:3e:
19:c3:51:8d:58:44:9c:1a:15:80:53:4b:56:d4:cc:
ee:8f:a7:5d:87:d4:f3:74:de:53:5f:01:dd:b7:fb:
63:2c:63:2e:3b:98:18:10:3b:c8:36:32:53:d4:c7:
4c:8a:ed:b5:6b:df:18:f8:dc:e9:42:0b:4a:64:60:
2d:11:5e:2b:13:4c:4a:d9:63:40:76:2b:72:54:c6:
51:59:d5:e7:e3:11:19:d5:1d:3c:d9:55:0e:7d:c6:
33:36:ab:0c:72:5c:76:73:19:a9:83:27:b7:a3:4d:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7A:B8:69:89:A3:90:27:11:4A:75:C6:94:51:68:5D:C9:99:9E:7B
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/U3q4aYmjkCcRSnXGlFFoXcmZnns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.153.0/24
Signature Algorithm: sha256WithRSAEncryption
68:2c:34:4b:f4:73:47:21:bc:f8:dd:37:ce:03:02:7b:79:2b:
7b:50:1b:86:82:16:ee:8e:3c:0d:a7:17:f9:5a:a7:8c:19:9c:
45:ca:df:ac:9e:e0:4b:67:55:95:bc:17:19:90:91:d9:d6:94:
fd:41:b8:56:3f:d5:94:af:81:3b:53:3b:ea:6b:5e:bf:c7:56:
b7:5c:2a:22:4d:8c:2f:e3:8b:86:d1:03:56:3a:82:d8:74:a8:
ea:94:4c:bf:21:66:8b:ab:43:9b:70:2b:9a:c2:2a:00:60:7a:
2f:57:5f:c8:fd:b9:46:98:43:fb:19:1e:71:c4:43:31:3e:d7:
b0:49:53:af:ce:2c:f6:ea:e2:d4:ee:fe:5d:52:92:3e:f1:91:
00:0d:87:b3:f9:5b:cc:09:6b:39:00:cd:f2:a6:ec:ee:7f:af:
d6:b4:4e:ba:17:00:4c:65:74:94:03:e1:69:3a:a0:43:c6:93:
5a:6b:a7:d6:67:cd:39:68:a3:c1:37:3a:56:32:ab:09:d0:8c:
28:6f:2c:17:6d:66:c9:da:6d:3b:ad:46:b1:85:13:86:2b:ea:
f1:44:e4:69:b7:46:ac:33:20:76:1c:c0:62:68:82:e6:5f:9e:
f7:7b:76:7b:ec:4a:70:4e:cb:0d:13:a5:de:a3:07:a1:72:cd:
49:fc:d5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:31 2026 by rpki-client