Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/witRRkz4JW7tbYbVve-R2XWlzt4.roa
File: witRRkz4JW7tbYbVve-R2XWlzt4.roa (raw, json)
Hash identifier: zj2WUs4aBwc6W04fwoGSEt7fCld9nbP7Wc0W/bqtodo=
Subject key identifier: C2:2B:51:46:4C:F8:25:6E:ED:6D:86:D5:BD:EF:91:D9:75:A5:CE:DE
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019F36678CC8762F7F938C59B2DE008648D9
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/witRRkz4JW7tbYbVve-R2XWlzt4.roa
Signing time: Mon 06 Jul 2026 07:49:43 +0000
ROA not before: Mon 06 Jul 2026 07:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 153.56.128.0/24 maxlen: 24
153.56.129.0/24 maxlen: 24
153.56.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:67:8c:c8:76:2f:7f:93:8c:59:b2:de:00:86:48:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Jul 6 07:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c22b51464cf8256eed6d86d5bdef91d975a5cede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:77:c9:ae:6b:15:4e:6e:32:ed:29:5d:fe:
50:4c:8f:14:80:53:17:eb:16:fa:84:cd:14:06:58:
dc:32:a3:3b:59:5e:cc:0a:e5:58:50:5a:5b:88:5c:
98:7e:6f:58:ee:84:2b:a7:b3:d3:38:cb:a8:59:f8:
3c:a0:4b:e2:ee:e4:7b:d7:bf:e5:3a:ff:26:89:d3:
5e:b2:76:99:b7:14:c1:ca:aa:4d:cc:2c:90:2b:3b:
ff:d9:34:17:be:b4:83:df:8b:18:7c:87:86:3f:e5:
df:be:b7:24:c0:87:9a:f8:f8:bc:94:05:88:4a:05:
c1:b2:24:4f:f7:9c:5a:61:eb:3f:df:b2:be:a9:5d:
ce:74:c0:4a:08:97:b4:2c:33:90:12:12:4c:98:8d:
43:93:52:70:5f:24:99:b6:a9:ec:c0:76:5a:74:01:
70:77:f2:8b:c4:38:4f:f0:f5:ca:d1:81:95:89:bb:
1a:44:57:0c:1a:2d:47:35:df:4d:d7:7c:84:ec:aa:
98:ca:a3:2c:59:ca:80:a4:05:66:4b:37:37:38:b0:
71:6b:2b:67:3a:bb:98:d5:d6:72:87:d3:4b:e0:89:
c3:9b:9f:12:8c:ca:77:b2:49:7e:43:37:23:0a:59:
a4:0a:a7:27:2f:d7:de:1f:e1:be:6c:1e:b7:c3:2e:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2B:51:46:4C:F8:25:6E:ED:6D:86:D5:BD:EF:91:D9:75:A5:CE:DE
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/witRRkz4JW7tbYbVve-R2XWlzt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.128.0-153.56.130.255
Signature Algorithm: sha256WithRSAEncryption
ac:aa:e7:14:ea:c2:af:29:d9:65:87:6c:2b:2c:5e:d3:ce:92:
bd:0a:a3:27:91:fe:66:b4:67:21:b3:dd:eb:4b:da:d0:c2:cc:
3b:c9:33:e9:42:43:d8:5b:99:9d:f5:48:00:d9:f7:82:c3:4a:
b5:ba:a4:d0:db:1a:f2:8d:98:fd:a8:42:ef:b2:1e:c0:b7:76:
4f:4a:f3:c8:93:0a:5c:db:9c:58:48:e6:1d:9b:96:89:f7:c8:
8e:f2:74:5b:f3:6f:0a:c4:76:e0:28:a3:39:3a:b3:68:1e:0a:
22:9e:05:d7:9e:9d:96:6d:b1:a5:44:db:47:79:77:9b:c1:8d:
61:8b:5c:c9:a4:8d:a5:83:37:15:cf:5c:a8:10:57:64:ee:dc:
fd:3c:ca:b1:3c:78:71:5a:ee:39:0b:a5:e5:4f:26:91:c8:5e:
82:ce:d1:17:43:0e:cb:b2:33:99:29:2d:78:4c:a7:e4:e0:c8:
d7:8c:37:94:97:95:c4:af:3c:e5:49:95:4e:25:5d:bd:93:d5:
bc:3f:dc:9e:16:8a:52:c3:87:5e:16:cd:9b:8f:ed:94:02:1d:
fb:83:3e:6c:64:ee:9c:ea:ad:1f:5d:be:f1:85:95:7e:bf:51:
9f:de:21:8e:d2:1d:1f:65:d9:9b:f7:8d:fa:36:5f:7e:aa:67:
36:6a:1b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:51 2026 by rpki-client