Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa
File: H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa (raw, json)
Hash identifier: lLlcVWkBzyqFZaScNM4rXUJUhmBYgLuz/mF4DSCZsow=
Subject key identifier: 1F:F3:CB:B9:73:07:5E:4F:5A:40:C3:12:BF:D3:CB:F1:DF:48:E2:9E
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 019F2369085EE82332B8BD6241FA761C7511
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 5.183.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:08:5e:e8:23:32:b8:bd:62:41:fa:76:1c:75:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ff3cbb973075e4f5a40c312bfd3cbf1df48e29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:de:a0:2f:3a:59:6e:12:15:11:f3:09:75:
e6:a5:01:d6:45:2d:52:98:4c:4b:0a:89:a4:ba:c9:
57:1e:07:27:1e:da:95:a3:0c:f6:99:bf:82:4a:69:
cd:85:b8:48:d8:d0:5c:bc:14:b6:c2:2e:d2:1f:e5:
e0:ea:d7:9f:01:71:12:67:33:84:f6:b6:43:ab:5d:
15:9d:ef:94:07:7e:f5:67:18:e2:6d:a2:ca:f0:88:
f0:e4:f4:54:81:74:20:f5:cf:35:57:b2:e7:d3:ee:
d0:b1:21:c3:76:ae:79:e0:f8:9b:9a:78:3f:15:e4:
7a:28:ea:f8:a0:31:b0:dc:32:ff:4a:24:af:76:54:
26:d8:60:4e:bb:5a:b6:4f:78:6e:c0:c9:d7:b0:4d:
90:da:9c:68:b7:46:77:cf:c0:b8:2e:77:58:d9:33:
51:b8:0d:79:f7:c2:c5:11:7b:b6:9e:f6:05:1c:ab:
83:38:0b:a8:1e:ea:e8:d7:cc:c4:21:a3:88:db:60:
fe:2c:05:70:27:c9:3f:61:91:9b:23:f9:6c:9a:f7:
b2:d4:b0:90:e3:1a:59:97:42:54:1e:90:d1:9d:c1:
12:c2:5d:a4:f3:42:0a:2e:09:70:f8:87:15:49:4d:
84:a0:a8:02:7f:38:c3:08:68:b0:92:16:d0:28:b0:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F3:CB:B9:73:07:5E:4F:5A:40:C3:12:BF:D3:CB:F1:DF:48:E2:9E
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:65:9e:c7:25:a4:9d:c0:13:f5:54:bc:6c:6b:40:23:98:c7:
23:0f:e2:1e:bd:1f:76:35:dc:b9:1a:19:28:90:19:2c:59:30:
67:f1:27:0d:5f:25:46:d2:e5:bb:ae:8f:e7:ac:c0:eb:f3:55:
fa:04:66:0c:ad:c6:d2:d6:8a:7c:7f:db:de:9e:1d:bc:15:23:
c7:5b:48:5e:5f:ea:1e:43:51:79:13:da:38:09:d4:56:a7:2e:
52:8d:4a:5c:6c:2b:cf:83:c2:08:c0:e8:77:01:ce:ad:af:b8:
63:c1:49:32:f8:dc:4d:be:c4:fb:84:a6:9c:54:89:a1:45:d0:
14:58:ce:8d:45:9c:95:50:51:c5:dc:33:ce:bb:25:3d:67:29:
09:e8:dd:a9:ce:d8:65:7c:7e:50:75:ed:f7:6c:f5:e6:d1:35:
20:db:08:bc:0a:dc:c7:5d:2a:89:2d:f5:c9:f2:cc:b2:3b:86:
c3:65:ba:72:11:81:ee:d1:38:b1:b9:30:e3:a0:e2:f0:bb:ae:
85:7b:c5:f4:d0:b6:cb:96:4d:5e:07:5f:8c:8b:66:29:80:57:
43:20:bb:c5:c0:46:a6:4c:46:0f:4b:2b:7d:a2:2a:38:85:d5:
05:a0:e4:92:95:17:30:ee:3e:d2:65:30:a4:d3:8c:f0:d3:7a:
cc:05:fd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:31:05 2026 by rpki-client