Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/O5scGks31xGErBxHH5_nDEdCPyw.roa
File: O5scGks31xGErBxHH5_nDEdCPyw.roa (raw, json)
Hash identifier: f4iDyLmesG7cI6y5JPoF5ohxN5qRAZWi3iXSIcF57u0=
Subject key identifier: 3B:9B:1C:1A:4B:37:D7:11:84:AC:1C:47:1F:9F:E7:0C:47:42:3F:2C
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019EF23DF7872288E5968A913D3A19CBE1D1
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/O5scGks31xGErBxHH5_nDEdCPyw.roa
Signing time: Tue 23 Jun 2026 02:10:07 +0000
ROA not before: Tue 23 Jun 2026 02:10:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51791
IP address blocks: 153.56.128.0/24 maxlen: 24
153.56.129.0/24 maxlen: 24
153.56.130.0/24 maxlen: 24
2a11:1fc0::/32 maxlen: 32
2a11:1fc0::/48 maxlen: 48
2a11:1fc0:3::/48 maxlen: 48
2a11:1fc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f2:3d:f7:87:22:88:e5:96:8a:91:3d:3a:19:cb:e1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Jun 23 02:10:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b9b1c1a4b37d71184ac1c471f9fe70c47423f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:73:21:d4:87:8c:7d:67:c5:78:10:a7:07:
b9:ca:69:77:fd:9d:3f:40:5f:c5:c5:c9:9d:75:17:
04:15:b9:df:f9:39:c0:dc:4f:cf:4e:8d:1b:f1:16:
1b:f1:71:73:eb:92:40:53:41:61:a8:03:a4:b7:0b:
d2:3f:90:2e:d4:5e:63:d6:6c:ef:60:12:b4:df:0a:
54:f1:a5:23:b4:a7:a9:36:e4:d4:11:1b:50:32:2e:
07:7a:df:2c:55:d5:3c:9d:89:a8:37:01:55:68:67:
50:e6:6c:12:2b:e9:33:b2:48:4f:e4:15:df:b5:cc:
87:66:e2:e6:c0:52:a7:00:34:55:00:5b:46:d3:fd:
da:66:06:63:0b:33:db:05:eb:dc:3a:ab:7b:76:96:
b5:73:bc:8c:6a:19:dc:f6:7f:59:32:72:66:ee:44:
24:e0:24:d0:36:4d:f9:2d:a5:65:64:60:44:e1:ea:
6b:81:52:b6:04:c0:02:69:46:50:f4:71:09:29:7c:
fa:cc:8a:72:d9:ae:a7:2e:af:37:2d:7b:54:60:5e:
05:33:92:a2:28:b5:42:7b:27:08:ea:37:45:35:70:
ad:68:4a:4f:cb:40:54:49:26:89:e3:91:1c:f5:aa:
ca:53:23:18:f1:79:ff:4e:91:90:78:d3:56:16:32:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:1C:1A:4B:37:D7:11:84:AC:1C:47:1F:9F:E7:0C:47:42:3F:2C
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/O5scGks31xGErBxHH5_nDEdCPyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.128.0-153.56.130.255
IPv6:
2a11:1fc0::/32
2a11:1fc2::/32
Signature Algorithm: sha256WithRSAEncryption
45:f4:1c:60:cd:21:b6:69:8b:5d:25:fc:87:54:14:38:7e:ba:
e8:2b:8e:78:cb:a2:31:82:84:0c:32:58:f8:bc:2d:24:88:05:
f4:6a:f6:ab:84:0e:57:ac:43:ea:da:fe:cd:9f:27:fe:ec:f8:
4c:83:13:1c:30:ec:af:65:c0:99:05:5b:ed:d3:ba:a2:dc:e4:
b6:ce:b8:9e:47:fb:3f:47:41:b4:f1:5a:b1:cb:92:1b:09:4e:
19:e1:e3:4d:75:ef:e5:8a:a1:88:50:96:9b:4f:35:57:42:48:
4a:55:85:e5:b5:4d:71:1d:a7:98:f6:0e:c3:13:eb:05:4d:fa:
36:8a:a4:a0:d0:38:51:61:81:4d:ba:0a:61:ad:0f:b5:e2:2e:
9b:b9:d8:e0:51:67:ce:cb:1b:e5:de:7c:01:c8:60:cf:19:fb:
46:9d:85:e2:50:f1:81:fe:98:09:0e:4b:38:81:36:fa:1c:df:
a7:97:83:b5:5c:7d:38:e0:75:26:ff:56:57:da:d3:cd:72:3b:
6a:44:ce:8b:eb:10:6e:ee:f7:22:15:3e:05:86:2c:68:0f:af:
3e:c2:d3:e6:58:bc:55:08:cb:70:81:f1:bb:30:e0:d3:21:8c:
85:2a:0f:87:6a:d7:8c:f3:01:7c:39:a1:07:51:20:f5:76:13:
07:c9:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:32 2026 by rpki-client