Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/sHAYZJ5lJLM8IXOteqwaPFIPiSM.roa
File: sHAYZJ5lJLM8IXOteqwaPFIPiSM.roa (raw, json)
Hash identifier: oLMgyUyVCQ4o7PAuIgRalvXm2LEU3nLFcx6OUNcMV8U=
Subject key identifier: B0:70:18:64:9E:65:24:B3:3C:21:73:AD:7A:AC:1A:3C:52:0F:89:23
Certificate issuer: /CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Certificate serial: 019F16E834B41C078416C7E2F149A29CCB5A
Authority key identifier: 4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/sHAYZJ5lJLM8IXOteqwaPFIPiSM.roa
Signing time: Tue 30 Jun 2026 05:02:24 +0000
ROA not before: Tue 30 Jun 2026 05:02:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210734
IP address blocks: 111.88.74.0/24 maxlen: 24
153.56.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:16:e8:34:b4:1c:07:84:16:c7:e2:f1:49:a2:9c:cb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Validity
Not Before: Jun 30 05:02:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b07018649e6524b33c2173ad7aac1a3c520f8923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:b2:ba:59:f8:71:fb:4c:8f:be:81:2b:9a:
de:b2:ac:67:25:b1:12:3a:25:61:78:01:9d:74:2d:
47:8d:60:4b:cc:bd:32:6f:f9:e3:c5:5a:48:10:e4:
74:ac:e7:fe:cd:78:5f:0c:c8:14:1c:19:d6:f4:8a:
07:69:8e:62:b3:be:c8:7f:b8:fa:65:c0:50:18:0b:
4b:9c:7c:9e:0a:cf:b0:db:5a:44:06:fe:c2:50:ae:
75:67:59:cf:3d:ad:1f:49:77:20:26:a9:5f:f2:bc:
0c:1f:27:c6:ed:d0:a9:42:e1:b2:75:d8:4d:b6:8d:
a7:f2:a8:26:74:38:40:87:d5:c7:70:07:ef:6e:81:
d4:ed:a4:fe:53:0f:09:b9:20:be:d7:6d:2f:6e:c3:
15:71:d6:d9:ca:6f:2f:61:6b:11:b9:b3:7a:98:a5:
09:d9:fd:3f:d6:79:54:ff:9e:d9:62:3c:7d:1f:f1:
6d:b6:01:37:b0:f4:a1:4f:36:9f:6f:e1:5d:d7:de:
ac:21:c5:dc:df:79:95:6c:72:08:a3:3e:02:fd:12:
0a:37:74:82:09:78:04:60:26:f3:13:7e:0e:b9:7b:
60:9a:59:68:b4:73:c9:33:8c:ac:9f:19:2b:6d:d2:
5b:74:86:5c:35:2e:b0:26:a5:33:67:63:ce:a1:e1:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:70:18:64:9E:65:24:B3:3C:21:73:AD:7A:AC:1A:3C:52:0F:89:23
X509v3 Authority Key Identifier:
keyid:4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/sHAYZJ5lJLM8IXOteqwaPFIPiSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.88.74.0/24
153.56.171.0/24
Signature Algorithm: sha256WithRSAEncryption
37:00:96:84:bc:d2:13:a4:8e:ce:3a:80:00:7a:99:e6:d5:82:
a8:c3:7e:ce:b5:63:5f:bb:2e:83:b7:34:cb:69:f1:0e:42:4e:
21:f7:3d:03:8c:78:73:2f:ae:9b:4a:35:6c:21:4f:b5:e9:80:
e0:af:6c:75:20:13:5a:af:07:27:ff:4f:df:ff:51:3a:35:1d:
d9:67:ad:c6:42:4f:e5:d8:cc:a5:dc:d0:c8:64:ea:b5:6c:48:
fc:cc:c2:4c:53:04:d3:23:e2:04:ab:13:c1:49:5e:d5:6b:4e:
34:db:ab:74:e2:99:32:0e:6e:04:9f:c4:31:37:2f:29:e5:77:
62:2a:c3:9f:08:22:2f:f2:d4:5f:61:f3:f0:a2:4f:12:5d:04:
9f:3f:65:33:7e:d8:30:ff:c0:77:3c:be:68:f3:2b:f7:7a:9b:
93:58:01:13:ea:b3:03:a7:03:e4:a8:42:11:62:28:ff:e3:28:
f5:f7:d5:0b:52:24:35:2b:37:77:d6:2a:a7:0f:0f:8e:96:bc:
4d:93:eb:56:eb:63:0e:51:cf:a3:71:f1:42:7f:5b:38:d1:56:
1c:d7:27:e7:e3:41:6d:49:96:83:64:b6:8e:a6:9a:af:bd:88:
5f:66:ec:25:53:40:87:3c:c7:35:ac:8e:8c:7a:83:37:f9:3d:
50:da:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 01:33:11 2026 by rpki-client