Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/5tXe2zaXfL98ChLUpwIlPPTOuRE.roa
File: 5tXe2zaXfL98ChLUpwIlPPTOuRE.roa (raw, json)
Hash identifier: ShHgB4u3INcSmktKgFCjUMgFfMb0blhwlxT/bc+3fno=
Subject key identifier: E6:D5:DE:DB:36:97:7C:BF:7C:0A:12:D4:A7:02:25:3C:F4:CE:B9:11
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019CECE8DCB49B0BCCA631041DDC30208913
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/5tXe2zaXfL98ChLUpwIlPPTOuRE.roa
Signing time: Sat 14 Mar 2026 15:13:29 +0000
ROA not before: Sat 14 Mar 2026 15:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209734
IP address blocks: 150.251.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 15:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:e8:dc:b4:9b:0b:cc:a6:31:04:1d:dc:30:20:89:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 14 15:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6d5dedb36977cbf7c0a12d4a702253cf4ceb911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:2d:40:4b:29:c9:b3:a2:97:2d:52:5d:2d:
89:27:33:7f:16:af:75:c0:73:d8:7b:82:b7:94:49:
40:58:3f:90:0d:71:31:ba:f1:75:8a:a7:d6:8a:3d:
40:b6:aa:ba:3e:a6:85:67:85:4d:99:1b:f6:e7:ac:
04:06:40:94:55:c9:8a:25:c5:10:35:2b:c6:80:03:
58:87:20:66:4d:2e:a6:04:42:b5:8c:12:1c:d7:d6:
25:60:85:27:fe:22:08:cc:d0:b8:ad:7a:98:13:c3:
04:cf:8d:68:09:87:bf:71:4a:0a:97:7a:ee:a3:32:
93:1c:5d:34:b0:1e:21:9f:bf:1c:49:2d:b9:87:c1:
de:78:72:c2:ad:7d:c6:3f:36:65:de:bf:70:91:14:
4c:84:a7:e1:46:f8:2d:4c:59:fc:8a:77:45:30:3f:
02:0a:ab:b4:ca:c1:bf:bd:90:5b:ca:9c:7b:b3:0e:
76:6b:87:28:03:a5:39:04:20:ec:2e:71:42:85:76:
a3:6b:a1:11:20:84:64:4d:35:51:82:e9:94:8b:53:
95:37:bd:49:ff:8f:8e:67:c6:3e:3c:a5:b9:b4:26:
02:8f:f9:6c:d5:ba:f7:e9:c2:76:e2:fa:db:e1:51:
be:97:81:65:95:ca:3b:24:36:69:e0:6f:29:53:b5:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D5:DE:DB:36:97:7C:BF:7C:0A:12:D4:A7:02:25:3C:F4:CE:B9:11
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/5tXe2zaXfL98ChLUpwIlPPTOuRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.157.0/24
Signature Algorithm: sha256WithRSAEncryption
91:69:a5:b8:d8:e6:d6:6d:7a:bf:16:70:31:ab:d2:52:9e:c1:
6e:7f:ea:39:ab:39:5d:e0:8c:2c:f9:ab:d0:b6:52:19:96:34:
35:62:d3:99:f5:d8:46:e0:57:c1:18:42:e6:4d:3a:6b:96:16:
7e:ed:b0:be:17:35:bf:12:6b:47:c9:f3:2b:2e:30:2b:9c:a8:
44:91:fa:d0:99:eb:c0:4d:25:54:af:65:0d:57:3a:dc:80:8b:
d0:90:af:1d:40:f4:7f:04:88:1c:bd:04:f1:27:1b:c7:c2:4c:
f0:bf:af:87:2e:8b:86:90:db:39:47:1b:00:d7:aa:ef:48:bc:
1d:b2:6d:6d:1d:d6:ce:1b:f3:9e:31:12:9d:ba:b1:e1:52:a0:
96:2f:56:02:23:7d:ff:64:77:fe:0b:d3:43:b6:64:17:84:a0:
79:74:3b:84:e4:0f:ed:e8:7a:6e:f1:e5:42:49:cf:82:6e:86:
2a:c8:32:ab:88:32:c1:1b:29:da:20:2d:c9:be:73:c0:8e:8a:
ac:18:fa:0a:76:df:44:5f:ab:07:ae:41:db:00:78:34:06:2e:
36:0f:47:4c:74:0a:5d:fb:4d:69:5d:88:2c:17:b6:5d:46:c9:
3f:4c:ba:25:d3:0b:b2:d7:05:0c:18:ea:fe:d6:34:b5:d6:92:
f8:44:56:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 00:58:45 2026 by rpki-client