Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/ev8fsS2pQVCaQ4feU5zWLckpMSc.roa
File: ev8fsS2pQVCaQ4feU5zWLckpMSc.roa (raw, json)
Hash identifier: N1tvT2Z1uLP/2N8fWYJQhCEwoN2M5Na1KjKaQbkdT3I=
Subject key identifier: 7A:FF:1F:B1:2D:A9:41:50:9A:43:87:DE:53:9C:D6:2D:C9:29:31:27
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019EDFB0B5633BC9BF4E4BCEB5DEAD0B54F2
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/ev8fsS2pQVCaQ4feU5zWLckpMSc.roa
Signing time: Fri 19 Jun 2026 11:42:40 +0000
ROA not before: Fri 19 Jun 2026 11:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 5.252.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:b0:b5:63:3b:c9:bf:4e:4b:ce:b5:de:ad:0b:54:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jun 19 11:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7aff1fb12da941509a4387de539cd62dc9293127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:af:f4:fc:67:d4:59:5a:ac:f9:45:95:74:
f4:dd:8b:22:f1:75:43:63:5b:52:48:5c:09:97:bc:
c4:83:24:8b:07:c0:f0:c0:16:e1:e3:df:ff:94:23:
e3:d2:0a:86:06:98:4d:4f:6a:e2:a3:67:e6:e8:d5:
b7:14:27:f1:7a:62:a0:0b:21:46:da:0d:d7:b8:b8:
8c:21:c7:99:1e:b5:e5:9a:a5:3f:a7:2d:ba:04:37:
c6:e1:dc:35:31:9c:ca:b4:f6:6d:c3:48:43:67:f5:
d3:93:5f:a5:6d:02:d2:cd:26:e4:d8:9d:9d:c6:82:
11:a1:99:e8:94:62:e7:ef:5d:dd:8a:f6:fc:94:93:
15:fb:de:e0:a2:32:57:b1:7c:44:dc:77:d0:8e:48:
6b:34:4a:3c:45:3d:17:aa:69:28:63:63:50:77:e8:
73:bf:67:5d:1c:a2:5e:f2:cb:98:48:3e:27:00:4d:
e7:f3:a1:ac:1a:3b:58:7e:dc:0a:ab:02:3b:37:1a:
fe:e2:ff:c0:2d:2c:fd:73:4d:a1:b7:6c:a1:8f:8c:
c1:62:b5:ef:0d:7e:57:a5:11:3c:8f:5d:2b:41:2d:
23:13:4b:de:29:b5:1b:19:24:ea:da:82:4a:7d:22:
af:f1:78:da:9d:e7:8d:a6:f5:d2:86:e6:22:e1:f0:
80:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:1F:B1:2D:A9:41:50:9A:43:87:DE:53:9C:D6:2D:C9:29:31:27
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/ev8fsS2pQVCaQ4feU5zWLckpMSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2f:eb:bd:c3:84:cb:80:15:ae:f4:46:b0:74:4b:b3:e3:53:
62:5c:54:34:7d:42:84:40:9f:4b:26:81:60:f5:a2:47:cf:4d:
95:bb:48:0e:6f:ec:4a:05:fa:84:7b:8f:c7:a2:64:a5:a4:ec:
d3:45:8b:0d:fe:3e:2d:a9:84:8c:47:3d:33:53:66:67:b4:56:
39:b9:32:46:ed:3b:6c:94:c8:56:17:2e:ee:3a:82:5e:b7:c6:
df:68:34:be:2e:b7:a1:6b:92:5c:f3:f6:d0:3e:a6:04:f2:5c:
dc:37:76:be:93:86:99:e6:e1:dd:25:f6:c5:df:18:5f:fa:c6:
8b:1a:50:5f:93:3a:57:72:8e:06:a4:9a:6f:3a:30:4f:f1:89:
70:65:1d:80:1a:85:ff:63:48:2b:62:bc:2f:14:f6:fa:d7:0c:
6a:9b:d8:3b:91:00:ea:94:46:aa:c4:e0:bf:f5:89:db:26:88:
5c:09:90:b4:5e:c9:aa:4a:d5:d6:e6:f9:37:63:ee:fb:cd:21:
91:66:73:4a:8a:d5:9a:93:38:70:49:97:00:9c:2d:aa:d3:bf:
a8:d4:a5:9e:29:d4:33:9c:b6:44:70:7d:a8:bc:6a:9a:2e:7a:
44:4a:30:4f:1d:0a:5b:b4:d2:ff:ac:09:09:10:9d:04:d3:ac:
a5:dd:6a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:23:19 2026 by rpki-client