Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/55HojjA4cA9RJElZ6W9f-13mHIU.roa
File: 55HojjA4cA9RJElZ6W9f-13mHIU.roa (raw, json)
Hash identifier: Ve9IaScD4LXmFuYglmtq9rNAM9SN5CWCeWWr1JvG1uc=
Subject key identifier: E7:91:E8:8E:30:38:70:0F:51:24:49:59:E9:6F:5F:FB:5D:E6:1C:85
Certificate issuer: /CN=0d4b0f87730a55044f88276beb064e3c7badd1c4
Certificate serial: 019F2368F55145B98D36006A24B2B87925C3
Authority key identifier: 0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/55HojjA4cA9RJElZ6W9f-13mHIU.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12301
IP address blocks: 5.56.34.0/24 maxlen: 24
5.56.35.0/24 maxlen: 24
2a01:47c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f5:51:45:b9:8d:36:00:6a:24:b2:b8:79:25:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b0f87730a55044f88276beb064e3c7badd1c4
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e791e88e3038700f51244959e96f5ffb5de61c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:58:a3:6a:5e:cf:ef:92:9f:28:6f:ae:17:
8e:32:fb:0d:23:ff:72:6c:56:ed:25:89:03:69:09:
8f:92:93:e1:71:ef:37:06:83:21:2d:aa:4a:0b:d6:
70:fb:4e:2d:47:45:de:5b:5e:06:60:80:ce:12:8d:
fc:e4:db:90:6a:c8:19:cb:82:b7:13:3d:bd:af:c5:
34:64:82:ea:d9:86:ae:20:ec:6a:29:5c:30:e3:fc:
0f:d7:d7:f6:a4:4b:9e:92:a3:27:79:6d:50:1b:03:
67:a2:b6:df:da:25:06:27:9d:13:bb:be:e1:2b:0f:
dc:b6:3b:28:70:9a:be:eb:02:1c:22:81:67:49:77:
e1:48:9b:39:e5:99:b7:08:71:72:31:01:e0:bd:ef:
d4:fe:cf:2b:0f:b5:d9:b8:15:8d:2c:96:13:a5:57:
9b:ad:26:53:d1:a3:fa:21:65:ac:10:c5:f3:15:a8:
59:f3:b1:c8:ab:97:d4:4c:41:e5:6f:e2:55:e7:7e:
39:b1:61:8e:fb:2f:4e:b8:58:c4:be:fc:92:9c:86:
64:0e:71:4b:b4:ef:7d:7e:d5:2c:44:c0:6c:9a:01:
d3:92:25:1c:31:95:0b:72:1a:de:ee:d1:7d:7b:2b:
e2:70:c2:cb:cb:4f:34:49:ef:8f:0d:75:63:0d:0e:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:91:E8:8E:30:38:70:0F:51:24:49:59:E9:6F:5F:FB:5D:E6:1C:85
X509v3 Authority Key Identifier:
keyid:0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/55HojjA4cA9RJElZ6W9f-13mHIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.34.0/23
IPv6:
2a01:47c2::/32
Signature Algorithm: sha256WithRSAEncryption
65:68:d8:12:0a:ee:90:7e:22:af:d9:c8:b2:97:17:cd:5b:94:
83:3b:3c:be:59:61:b8:7f:78:41:bf:40:7f:fc:d3:ff:e0:07:
b2:16:25:47:f3:15:61:b8:39:3c:62:61:4d:10:18:26:b4:5d:
9d:02:b1:f7:d4:d9:6f:be:bd:a4:3c:a2:dc:1c:e5:6c:9a:af:
b1:93:c3:60:45:74:bf:0a:f6:8d:e1:e9:82:a9:a7:be:a3:43:
f2:dd:4e:e6:45:6f:54:8c:e2:80:20:ef:09:09:e1:a6:8b:ef:
f6:50:c3:54:91:aa:79:7c:ea:fe:5c:58:dc:94:43:1a:50:77:
de:03:6a:c8:8f:3d:65:f1:7e:6d:74:f1:7f:24:c7:8c:a4:3a:
1e:07:d4:27:c0:cb:b7:f8:ae:8a:9e:0c:79:a1:1f:9f:37:f7:
f6:a7:e1:f4:bf:8d:f5:5b:58:b1:04:22:65:48:a8:21:ba:24:
ec:59:8a:6e:4d:2d:b7:52:95:a5:e1:45:da:41:17:86:a1:da:
b4:8a:9d:65:9d:5d:db:ed:f4:4b:71:46:8d:17:af:cf:4c:87:
3a:13:77:6a:e8:df:5d:2e:22:ca:e0:ac:c0:d9:b6:2a:91:90:
50:a6:02:34:0f:bd:e1:85:e6:ec:62:57:8a:32:63:ac:8d:3d:
f0:10:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:19 2026 by rpki-client