Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/X1apZ7-7CuoQuH1lprwDvLaAj_o.roa
File: X1apZ7-7CuoQuH1lprwDvLaAj_o.roa (raw, json)
Hash identifier: bKHCrK9Bl7HPkt4FDfJna4GmZEpO2EsOS5LM/0L3EJs=
Subject key identifier: 5F:56:A9:67:BF:BB:0A:EA:10:B8:7D:65:A6:BC:03:BC:B6:80:8F:FA
Certificate issuer: /CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Certificate serial: 01A0639F9E6F9BF92CEC2EF3823F15E55C93
Authority key identifier: C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/X1apZ7-7CuoQuH1lprwDvLaAj_o.roa
Signing time: Wed 02 Sep 2026 19:36:40 +0000
ROA not before: Wed 02 Sep 2026 19:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214311
IP address blocks: 153.56.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:9f:9e:6f:9b:f9:2c:ec:2e:f3:82:3f:15:e5:5c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Validity
Not Before: Sep 2 19:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f56a967bfbb0aea10b87d65a6bc03bcb6808ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:4e:8c:c5:56:92:03:5c:7e:c2:9e:ab:84:
41:2a:f8:bd:e4:e6:ae:dd:0c:cc:be:92:4b:6c:60:
51:d4:63:9f:df:5d:59:64:04:50:3f:75:94:d0:89:
4e:66:be:57:73:93:f8:c4:da:b0:45:f4:d4:84:c7:
8a:c8:3e:52:93:25:51:72:0d:14:8b:aa:7c:5c:99:
b6:48:36:14:52:8a:21:d3:ab:1c:21:79:59:58:25:
92:3a:d6:10:1a:fe:10:30:27:55:11:6b:3c:46:80:
f2:0c:d2:ba:92:b1:5c:d4:c0:6b:e6:36:78:2a:6a:
38:3f:55:c4:b0:69:f3:97:61:a6:e1:3c:7a:82:f5:
49:5a:ed:f7:17:9b:07:f5:43:89:a8:e5:e5:c0:5f:
8b:c8:9d:bd:97:65:e6:2f:b9:5d:ed:2b:b6:45:96:
9d:cd:14:6e:ed:93:80:c6:b0:c7:7c:ec:7e:b9:31:
d4:00:11:8f:aa:b0:79:20:e3:8d:81:7d:af:79:dc:
52:95:4b:05:bc:bf:1c:94:00:0f:bf:b6:1c:c4:c2:
27:cf:5d:21:23:8b:e0:e0:10:a0:cb:0b:cc:7c:17:
30:58:24:fe:5f:45:54:26:3b:7f:58:55:34:c1:87:
7f:3c:99:f9:76:26:c1:b7:47:67:fd:3b:eb:72:66:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:56:A9:67:BF:BB:0A:EA:10:B8:7D:65:A6:BC:03:BC:B6:80:8F:FA
X509v3 Authority Key Identifier:
keyid:C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/X1apZ7-7CuoQuH1lprwDvLaAj_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.143.0/24
Signature Algorithm: sha256WithRSAEncryption
68:51:7c:15:aa:34:61:8f:ef:09:ad:c4:dd:cc:55:67:b2:12:
1e:17:1c:4d:61:7f:05:fe:7b:d4:4e:eb:1e:54:18:46:97:80:
cc:36:89:9d:a5:0b:31:2e:32:d5:c7:ff:7c:ac:be:23:8b:62:
b5:b0:62:1a:db:ec:b7:34:5b:38:7a:0c:f1:01:0a:36:cb:75:
99:57:f0:ff:ae:42:8d:57:9c:47:70:d3:41:56:09:ff:db:6c:
21:1c:0b:40:bf:88:03:0f:d5:79:17:c4:ff:8f:f1:7c:34:fc:
d8:62:d5:30:6d:31:63:67:7b:e5:24:50:39:de:05:df:ed:a1:
a7:06:15:04:83:d4:1c:ca:67:59:da:69:10:5c:7b:2f:b9:d1:
3d:cc:12:ef:9e:da:1c:c0:31:b4:1c:36:b9:c5:78:4b:f6:ec:
2c:04:03:83:21:58:e4:cf:98:b1:f0:d5:f7:81:af:ed:f8:8e:
56:8c:8d:ca:72:c9:9b:99:43:fb:1d:6b:67:8e:cd:77:29:7d:
ff:40:2a:8c:df:8f:1e:5d:41:fc:49:b9:7a:f0:fa:1e:29:63:
72:57:5b:a7:34:18:40:4c:60:e0:e6:ce:c9:ea:e6:29:86:a3:
b4:10:3f:82:12:31:f1:25:27:53:07:f4:54:b5:3f:de:82:d9:
08:2b:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:30 2026 by rpki-client