Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5Xz3zbtCQddT-P-76Kz9gKbObfA.roa
File: 5Xz3zbtCQddT-P-76Kz9gKbObfA.roa (raw, json)
Hash identifier: oddVBnqhjjE/kNGaw90GRsW60l0uAx9u6UhyGXGNHeU=
Subject key identifier: E5:7C:F7:CD:BB:42:41:D7:53:F8:FF:BB:E8:AC:FD:80:A6:CE:6D:F0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EF852CEF04E26A621DFE0C95FF819550D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5Xz3zbtCQddT-P-76Kz9gKbObfA.roa
Signing time: Wed 24 Jun 2026 06:30:36 +0000
ROA not before: Wed 24 Jun 2026 06:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213186
IP address blocks: 151.242.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:52:ce:f0:4e:26:a6:21:df:e0:c9:5f:f8:19:55:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 24 06:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e57cf7cdbb4241d753f8ffbbe8acfd80a6ce6df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:73:37:e6:89:06:a9:01:1b:11:d1:5d:75:53:
8b:f2:87:45:3b:82:bb:bc:94:10:cc:52:fb:7d:f9:
96:0b:20:86:9a:45:ab:a4:be:5f:e3:2d:29:df:40:
04:34:58:eb:89:f9:c7:5a:de:ea:e1:f2:5c:bb:2d:
96:e7:d5:9e:74:ca:90:93:38:14:9b:07:53:78:b4:
85:32:6c:54:23:06:6e:1c:f5:98:92:20:9e:2b:84:
5f:56:f5:26:01:18:57:8d:89:e2:9f:76:f0:2b:23:
d7:5e:9f:4d:e1:fd:1c:07:c9:ef:08:6b:54:9e:ce:
c3:80:57:9d:d7:db:2d:94:a5:a9:a8:c7:9b:4c:23:
ff:a1:9c:c5:ee:c1:94:a0:3b:8d:c8:d1:9c:03:89:
0b:07:9a:f9:a5:1b:8d:4d:1b:d2:33:1e:03:8e:9b:
11:d9:34:91:a6:4d:62:80:b8:df:06:9a:64:1e:17:
8e:d1:8a:7d:b6:f6:d6:a0:a6:20:e5:f1:e9:68:4b:
53:25:43:21:1f:71:7d:c4:4f:e0:76:2e:55:04:d3:
87:f5:c1:c0:63:e4:16:08:9f:69:29:72:35:1b:bb:
d9:57:01:b1:1a:f0:d0:85:62:9a:61:03:d5:14:00:
70:35:ac:f4:9b:e5:a9:de:94:42:af:c7:7d:79:58:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7C:F7:CD:BB:42:41:D7:53:F8:FF:BB:E8:AC:FD:80:A6:CE:6D:F0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5Xz3zbtCQddT-P-76Kz9gKbObfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.92.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:93:04:35:55:60:26:c5:99:70:4e:55:ef:85:5a:bb:9b:06:
20:e3:36:bd:73:27:c9:75:04:a4:6b:0c:08:5c:dd:51:e6:e7:
74:c2:f4:c9:0b:90:94:52:61:d8:19:05:b3:fb:6c:9a:27:25:
b7:29:f7:ae:f2:d8:e7:89:de:aa:88:ca:9c:32:71:6c:df:ea:
6e:f8:85:98:97:26:ef:02:e7:ac:e2:b9:7b:b2:b4:24:df:12:
f0:d3:f2:29:b9:5c:ec:e7:47:7f:db:91:46:22:e8:1c:cc:4e:
b2:1f:50:ca:10:c5:25:74:e6:be:65:b3:b4:0d:1e:6b:12:ee:
c6:c5:86:a3:38:89:c6:dc:c0:c8:57:79:25:da:00:42:3a:54:
2a:9b:d9:d7:7c:12:8e:32:78:eb:db:e2:11:0a:62:59:89:2f:
70:a6:92:6c:30:f2:96:d0:2e:93:01:30:aa:ab:fd:d8:57:1f:
22:02:5a:74:d9:22:79:0a:b3:46:72:c1:22:b5:f6:d7:22:74:
18:d8:a6:6b:ec:27:a8:cf:94:5a:56:85:c7:ff:3f:f6:28:15:
a2:43:b4:47:88:71:ea:88:50:d6:11:b2:ea:19:0c:85:f0:c1:
bb:bb:de:16:70:09:72:b9:92:fc:7d:ce:81:23:a2:85:fc:5c:
87:ec:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:16 2026 by rpki-client