Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/Jt0MNsBVNK7vPF7GTa0AIeGjAug.roa
File: Jt0MNsBVNK7vPF7GTa0AIeGjAug.roa (raw, json)
Hash identifier: U7gylmIoiIo89wnevmrE4nFr88BG/6hmhAyFYsaOeyE=
Subject key identifier: 26:DD:0C:36:C0:55:34:AE:EF:3C:5E:C6:4D:AD:00:21:E1:A3:02:E8
Certificate issuer: /CN=0d4b0f87730a55044f88276beb064e3c7badd1c4
Certificate serial: 019F2368F438FD2C4B1E7E0885074442B88C
Authority key identifier: 0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/Jt0MNsBVNK7vPF7GTa0AIeGjAug.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5483
IP address blocks: 5.56.33.0/24 maxlen: 24
5.56.37.0/24 maxlen: 24
5.56.38.0/24 maxlen: 24
2a01:47c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f4:38:fd:2c:4b:1e:7e:08:85:07:44:42:b8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b0f87730a55044f88276beb064e3c7badd1c4
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26dd0c36c05534aeef3c5ec64dad0021e1a302e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:c7:4a:b7:e9:c1:50:c1:39:34:73:e3:93:
d1:fe:d5:10:e6:f8:d8:2d:4b:d6:41:fb:61:b0:df:
1a:e7:c3:76:d9:5e:0a:04:eb:a3:bd:9a:65:3d:e5:
07:22:2e:5f:2d:73:f2:c0:a8:e7:0e:1c:50:fd:43:
78:9f:bd:df:4a:a0:ee:90:1d:07:75:1b:b6:b6:5d:
7f:21:4a:40:82:e9:78:66:57:54:c7:ed:b4:9b:c3:
bf:20:0b:5a:c1:da:34:2d:8e:32:ec:03:ba:07:0d:
87:e0:3c:bd:35:7b:a3:e1:d9:b6:69:3c:1e:7a:57:
72:87:26:e4:b1:9a:40:5f:59:49:76:47:35:a2:05:
c3:36:62:46:22:ec:a4:43:4a:ee:67:b9:f3:9a:12:
f6:c2:35:5a:41:ff:8c:f6:7f:4c:a6:22:3b:0a:03:
4a:ad:80:1b:bf:36:4f:89:d5:86:52:f8:c5:5c:f4:
8b:08:9e:0d:da:f7:15:bf:74:e1:e4:12:03:ce:24:
38:c5:ae:17:cc:52:40:d4:00:c7:06:0a:10:69:a5:
79:26:e1:fc:8d:56:32:b3:38:26:73:0a:14:83:ac:
99:21:3a:60:52:91:30:d9:10:4b:62:06:34:83:cd:
55:6e:25:8a:bd:c2:c6:e9:f5:51:38:8a:bb:d3:ad:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:0C:36:C0:55:34:AE:EF:3C:5E:C6:4D:AD:00:21:E1:A3:02:E8
X509v3 Authority Key Identifier:
keyid:0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/Jt0MNsBVNK7vPF7GTa0AIeGjAug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.33.0/24
5.56.37.0-5.56.38.255
IPv6:
2a01:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
34:79:6c:38:1e:4d:62:b9:b9:20:da:89:96:f9:5e:75:00:d1:
5c:fd:f7:67:9a:a6:46:bf:9b:c2:87:c9:1f:93:82:94:b4:4f:
04:89:a8:21:74:0a:22:0b:17:85:6e:cf:b8:8d:d4:ec:1a:c5:
cf:4e:2a:93:22:bd:07:bb:e2:e2:be:84:6b:76:e2:ef:3b:c6:
9f:c2:ff:4e:07:7c:36:14:35:52:72:61:00:70:73:1e:92:81:
57:c1:77:e7:35:cd:94:5b:04:d7:25:ad:e1:5f:c2:b2:32:d9:
14:cc:b5:e2:7c:03:d7:de:fe:90:3f:f4:05:5d:64:ce:3e:13:
5d:b7:1d:23:fa:7b:21:5b:5f:e7:75:9a:61:6e:e5:07:47:21:
3f:59:94:d7:b5:6a:dd:79:7c:a1:0c:38:1e:d1:cc:18:d3:59:
01:47:9a:f4:05:d8:b7:3b:1f:45:76:14:f3:3a:c1:bf:4a:dc:
f7:a7:e2:30:0f:b3:6d:50:65:80:8e:d1:20:3b:6b:6d:fa:c0:
35:3f:60:a7:62:90:89:3d:94:4e:26:8b:1b:0e:1f:78:0e:46:
38:0c:d1:7f:4f:b8:11:66:d5:76:24:0c:b6:30:ba:51:58:d3:
c7:89:8a:38:9e:b1:7c:ee:d0:3e:13:19:95:bd:a1:82:86:16:
3c:32:f9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:58 2026 by rpki-client