Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/r5xSrq13TBSiblkLCkk6aKWkSPM.roa
File: r5xSrq13TBSiblkLCkk6aKWkSPM.roa (raw, json)
Hash identifier: Jqrbgb6N2ntUjpORqhuL9e7bWx13rYWpNNGtwo5PVmQ=
Subject key identifier: AF:9C:52:AE:AD:77:4C:14:A2:6E:59:0B:0A:49:3A:68:A5:A4:48:F3
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019F30D529442F232405A7A0E1F68A3859C2
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/r5xSrq13TBSiblkLCkk6aKWkSPM.roa
Signing time: Sun 05 Jul 2026 05:51:43 +0000
ROA not before: Sun 05 Jul 2026 05:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133150
IP address blocks: 194.152.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:30:d5:29:44:2f:23:24:05:a7:a0:e1:f6:8a:38:59:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 5 05:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af9c52aead774c14a26e590b0a493a68a5a448f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:be:39:fd:16:46:e2:aa:8f:71:2b:cb:ee:
53:86:ff:ea:90:0f:00:72:9b:72:45:b7:58:88:41:
80:74:45:68:35:21:68:8e:32:10:12:f2:d0:84:ca:
b4:f6:cc:f6:15:ff:dd:4b:33:29:0e:bf:d9:25:18:
36:cc:0f:af:6d:43:26:bc:0f:4f:b6:7f:cd:0b:1a:
2e:3b:8b:c1:a2:db:fb:6b:b4:b8:60:b5:9f:46:03:
a8:d0:44:89:25:c7:96:78:ea:1d:4d:5c:ba:b6:9b:
4f:19:c3:9d:02:f6:46:dd:78:c7:15:2e:a9:63:0d:
54:16:e6:7e:73:a9:12:85:18:45:9e:99:a5:34:d5:
b5:d9:08:b6:8c:e9:0f:ee:85:e9:0f:5d:b7:bd:14:
79:92:e8:15:80:a4:27:94:45:91:8c:27:d4:f5:d4:
d3:59:dd:93:3f:2e:63:79:4a:9b:d0:91:ad:e1:2d:
35:55:c3:6a:34:04:a6:e5:58:92:8c:a8:bd:11:9e:
59:ad:47:e2:d0:fa:40:f0:be:71:6a:52:b9:e5:5a:
94:26:42:c0:32:1c:05:83:62:09:9c:66:9c:93:8e:
0c:c1:27:a8:c3:e5:7c:ec:e2:f2:6b:00:49:76:fd:
b4:3c:4f:7e:d9:08:3a:9f:b0:97:5b:36:68:4d:38:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9C:52:AE:AD:77:4C:14:A2:6E:59:0B:0A:49:3A:68:A5:A4:48:F3
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/r5xSrq13TBSiblkLCkk6aKWkSPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.144.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5e:23:fb:ba:4d:bd:cf:a4:f6:c2:48:b7:35:d0:af:8f:c2:
ca:9e:3d:bf:9d:f4:b3:6c:67:05:d7:66:8e:8f:f9:43:1d:38:
e6:03:86:24:2b:da:aa:7c:e2:77:7d:80:63:d1:7c:8e:0f:f5:
5b:72:23:f9:14:4d:46:f6:f9:d2:89:70:27:a0:85:ee:9e:ee:
8e:1c:81:38:63:d0:98:9c:bc:57:60:c0:1a:d4:d3:fa:5c:c2:
fb:e3:96:be:46:45:a7:39:c7:99:97:ca:c7:3c:d0:3c:f8:a6:
77:48:69:eb:a5:99:17:40:2b:7d:a0:b1:0a:98:a0:8c:88:06:
00:07:40:7e:71:43:0e:9d:08:92:96:34:26:61:88:36:69:f9:
05:c8:d1:4c:16:d1:d2:6a:ad:fe:9f:f1:ef:45:9e:ef:69:14:
6a:90:14:4c:ef:83:6b:1b:35:c0:46:72:50:d4:8b:d0:9e:f0:
b5:81:ac:a7:75:28:dd:b2:1c:59:8d:0b:f4:5c:f5:99:1b:d6:
ce:1b:d9:df:86:30:ee:56:36:19:3e:eb:e3:a1:e4:89:06:f9:
9a:6b:47:24:69:02:e4:db:3f:8e:1a:a4:7c:7e:90:db:a8:62:
e2:96:9b:7b:2e:e2:79:be:0c:1f:19:dc:34:41:ff:1c:f7:20:
e3:09:e3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:22:03 2026 by rpki-client