Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/65Hca13wETP3ermxXISE5os-Ex4.roa
File: 65Hca13wETP3ermxXISE5os-Ex4.roa (raw, json)
Hash identifier: YLgknSW3CikFihtmN7uUVBS/6gYnz7aw1ggL3aZJuC0=
Subject key identifier: EB:91:DC:6B:5D:F0:11:33:F7:7A:B9:B1:5C:84:84:E6:8B:3E:13:1E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01A0581D081FD0BD6AFA440F5B929C4FEE90
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/65Hca13wETP3ermxXISE5os-Ex4.roa
Signing time: Mon 31 Aug 2026 13:58:12 +0000
ROA not before: Mon 31 Aug 2026 13:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 2.57.151.0/24 maxlen: 24
45.142.213.0/24 maxlen: 24
45.142.215.0/24 maxlen: 24
45.158.44.0/24 maxlen: 24
109.196.111.0/24 maxlen: 24
176.101.58.0/24 maxlen: 24
188.119.115.0/24 maxlen: 24
192.144.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:1d:08:1f:d0:bd:6a:fa:44:0f:5b:92:9c:4f:ee:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Aug 31 13:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb91dc6b5df01133f77ab9b15c8484e68b3e131e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:1b:ec:43:56:97:9d:0e:92:3d:f5:66:94:
81:a9:25:bf:96:e8:b8:e7:5c:cc:1e:e8:fb:8c:d2:
d1:87:5d:c1:47:bd:9b:8e:56:7e:1c:cf:47:ce:92:
10:36:6f:de:57:5e:5c:e6:87:6a:3a:4b:e4:f1:ad:
7b:ae:5c:87:a0:aa:df:3d:7f:7b:b1:f8:dc:57:dd:
5c:a6:06:0a:20:92:9d:d6:c7:92:98:9e:75:bd:96:
e9:6b:c9:4f:e9:44:e7:b7:11:27:e3:84:b6:37:64:
29:7f:67:2d:ea:44:2a:4b:e6:62:3a:5b:09:9e:46:
65:2f:c9:41:c0:8c:ed:8c:fb:8b:88:17:da:41:2b:
9e:f0:c1:24:82:da:5d:65:af:3b:f3:9a:62:f1:e4:
5d:c9:b7:2a:23:03:a0:06:6c:53:64:76:bf:ae:3d:
72:45:75:5f:18:57:b8:b3:2f:ff:b4:8b:f7:28:c5:
09:75:45:a7:be:a4:47:e8:f0:e7:f6:54:79:ad:dd:
21:b0:b0:4f:d6:2e:89:c4:14:20:d5:50:ad:16:18:
74:06:7a:c7:6b:c0:7d:08:1d:88:3d:a7:ea:34:61:
13:e5:25:02:63:dc:27:3f:67:47:45:0b:2a:99:2a:
87:ff:ed:11:b7:fb:2f:b4:7a:44:45:0b:a7:a7:5b:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:91:DC:6B:5D:F0:11:33:F7:7A:B9:B1:5C:84:84:E6:8B:3E:13:1E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/65Hca13wETP3ermxXISE5os-Ex4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.151.0/24
45.142.213.0/24
45.142.215.0/24
45.158.44.0/24
109.196.111.0/24
176.101.58.0/24
188.119.115.0/24
192.144.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:9a:86:ac:fe:da:bb:5e:e0:e0:81:06:d1:aa:53:f7:63:d0:
cd:4c:2a:10:22:a9:61:14:67:9e:bf:53:a4:29:1f:02:67:7c:
8e:e3:34:20:23:22:7b:b4:46:d6:9e:d6:a6:0e:97:50:e8:3d:
02:b4:26:fa:6c:52:f6:b4:d3:d7:2b:36:85:f7:c0:a7:53:8d:
a1:04:0e:5f:9c:a6:6e:cb:3e:1a:91:b2:77:42:08:98:01:47:
c6:9d:23:7d:4e:c1:54:fb:68:31:ae:94:84:54:82:dd:36:cd:
85:c1:8c:9d:ed:60:0f:90:8a:29:8f:6b:af:b6:d8:6e:f2:e7:
01:bb:b3:fe:42:b3:2b:02:0d:65:d3:66:c3:2d:bc:01:ae:d8:
21:36:39:2c:c9:69:1d:2a:ed:64:27:04:19:ab:79:41:ae:ee:
a6:e1:2f:83:b2:db:6e:de:0a:23:72:62:39:0e:2d:33:98:66:
06:28:f3:3b:98:52:55:1e:e3:0c:1b:ee:2b:c8:81:a7:04:e1:
94:bf:cd:5a:eb:d6:ba:e9:84:0e:1b:50:61:20:08:32:82:54:
47:5c:3e:e8:32:f0:8a:f4:24:83:23:66:7b:94:f4:f8:3f:e2:
75:22:e6:26:d0:f2:15:ef:a7:a9:58:2a:95:a9:61:07:96:89:
d9:5d:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:49:50 2026 by rpki-client