Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/G128Aj3UzxS3UKbzkqPvpKp9tmU.roa
File: G128Aj3UzxS3UKbzkqPvpKp9tmU.roa (raw, json)
Hash identifier: v5+OIZJuCZdNIq9ct3jjcPuaBsiWP2r52OBqdsOfDZ0=
Subject key identifier: 1B:5D:BC:02:3D:D4:CF:14:B7:50:A6:F3:92:A3:EF:A4:AA:7D:B6:65
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019E5DA63F5FBA1006B2E7DDBB0870CFD222
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/G128Aj3UzxS3UKbzkqPvpKp9tmU.roa
Signing time: Mon 25 May 2026 05:40:36 +0000
ROA not before: Mon 25 May 2026 05:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209227
IP address blocks: 193.141.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5d:a6:3f:5f:ba:10:06:b2:e7:dd:bb:08:70:cf:d2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: May 25 05:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b5dbc023dd4cf14b750a6f392a3efa4aa7db665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:f3:1c:49:f3:42:1c:44:21:f0:5e:52:84:
31:0d:3a:58:ec:82:9b:e0:f8:7f:63:47:ea:33:fb:
6e:69:ee:1b:2d:39:5d:1a:f0:b2:69:4a:48:5e:70:
75:a6:2b:3b:23:12:4d:5e:f5:60:83:e7:de:f3:e5:
60:e1:39:8f:ec:21:20:e1:5b:bd:5e:e5:ec:9a:15:
9b:6b:b0:78:a4:a3:5f:88:46:42:73:b6:99:ad:03:
ba:ff:31:d1:8e:28:31:df:83:15:ac:67:28:05:27:
cf:fc:7b:b0:20:92:a7:c1:c1:d5:6e:7e:88:e2:4f:
4d:cb:6c:b5:cc:54:49:b2:94:40:ab:cc:3a:c2:9a:
a5:c2:56:a2:a1:98:9f:b4:e7:46:2a:b2:2a:d1:bf:
1e:20:24:8e:93:13:11:b5:74:f2:14:23:89:68:58:
d4:2d:8f:44:e0:32:81:76:57:8d:23:63:f4:8c:69:
77:87:0c:e2:82:d1:a0:89:6a:02:87:1b:6a:c1:4a:
ce:51:3c:1a:6d:bd:e6:fe:6a:17:0c:8d:af:85:91:
3f:b5:c9:30:56:a3:17:3a:09:56:35:ff:e7:c5:aa:
63:01:e4:46:b0:45:59:55:c6:f6:f6:25:cd:3e:4f:
eb:39:51:23:b7:1e:01:35:22:7b:37:d3:db:af:0d:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5D:BC:02:3D:D4:CF:14:B7:50:A6:F3:92:A3:EF:A4:AA:7D:B6:65
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/G128Aj3UzxS3UKbzkqPvpKp9tmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.126.0/24
Signature Algorithm: sha256WithRSAEncryption
09:63:30:df:b5:c2:1a:d9:83:17:a3:59:f4:79:81:09:5d:d7:
37:5d:a0:91:39:64:32:09:c9:9a:0c:38:62:07:6d:9e:9e:01:
28:03:0d:ab:ab:7b:03:20:c2:af:10:9d:8b:a3:bd:9e:91:8d:
e7:0b:ac:9a:1e:ef:83:c9:26:02:16:df:04:0d:03:41:2a:7c:
31:29:c5:7f:c1:a9:4d:84:b2:8d:13:df:17:3d:eb:89:f1:de:
ef:e4:bf:68:5e:8d:83:5c:37:eb:b9:cc:c4:ea:01:c1:8f:cc:
41:c1:3a:94:eb:76:58:b9:0d:55:85:5b:64:ab:ef:a9:48:43:
3a:13:39:e5:b1:a0:28:d5:e8:35:50:b1:06:dd:a4:7f:79:aa:
32:8a:8a:aa:30:31:aa:46:2a:6b:9d:11:3a:6d:d8:85:02:00:
7a:0c:5e:3f:97:d2:1d:6b:a6:68:a7:08:be:63:f7:19:9e:f6:
c0:c1:59:c9:d1:5a:36:88:e9:7b:8a:89:12:9d:74:f2:4d:6c:
58:8c:fd:b2:d5:95:ab:25:69:4a:97:cd:c1:fd:d5:86:8f:f1:
e9:0c:f4:e7:ff:d4:99:80:b9:2a:50:b9:db:52:cd:d6:b1:08:
3a:27:99:d8:cb:a8:86:18:9a:f2:15:29:95:ed:a9:80:e9:85:
f2:62:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:50:00 2026 by rpki-client