Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/Slsd4AowAV2szlKSLBnWjDdPuuI.roa
File: Slsd4AowAV2szlKSLBnWjDdPuuI.roa (raw, json)
Hash identifier: 5qbYJlGG3sgDCyQYDGg/J9akEntIBByYkC7q0B6z4jU=
Subject key identifier: 4A:5B:1D:E0:0A:30:01:5D:AC:CE:52:92:2C:19:D6:8C:37:4F:BA:E2
Certificate issuer: /CN=0d4b0f87730a55044f88276beb064e3c7badd1c4
Certificate serial: 01A0D6E60747F3880113D69D8E2D0C132C01
Authority key identifier: 0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/Slsd4AowAV2szlKSLBnWjDdPuuI.roa
Signing time: Fri 25 Sep 2026 04:49:54 +0000
ROA not before: Fri 25 Sep 2026 04:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5588
IP address blocks: 5.56.33.0/24 maxlen: 24
5.56.37.0/24 maxlen: 24
5.56.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:e6:07:47:f3:88:01:13:d6:9d:8e:2d:0c:13:2c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b0f87730a55044f88276beb064e3c7badd1c4
Validity
Not Before: Sep 25 04:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a5b1de00a30015dacce52922c19d68c374fbae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:42:67:db:c7:1c:c4:e9:24:1c:23:cf:f1:
86:f6:bd:12:c8:31:03:09:34:1e:5c:9c:d7:69:ad:
2a:30:75:14:fa:ed:31:bb:04:4f:9c:91:3c:1b:dc:
b5:01:89:fb:8b:6b:26:a5:52:1f:02:98:bf:de:57:
38:1a:00:4f:3a:8e:5c:5a:87:bc:1d:b1:ab:03:c4:
96:f1:89:16:e4:61:1a:15:34:3e:08:19:57:1b:04:
f8:79:22:07:cb:99:b7:4f:7f:81:e5:48:f9:8c:53:
2f:f3:41:23:88:78:56:40:8b:e9:ad:86:ed:b9:53:
fd:4d:53:92:1c:87:1c:6b:9d:47:14:4f:a6:d4:c9:
88:e3:4b:14:d2:3c:96:24:df:87:af:12:31:da:26:
35:95:4c:30:53:1f:91:76:c3:8b:ca:ad:a5:eb:68:
74:ae:0d:16:0e:7b:42:21:ed:30:e2:bb:ef:84:63:
ff:f4:ee:ff:f7:ca:e5:7e:b2:f6:10:80:17:31:34:
3c:e5:74:c7:e6:57:e9:30:90:8e:14:a6:d1:a7:ef:
f1:7a:88:60:58:96:ed:5d:41:50:f6:b6:9f:79:28:
63:c3:bf:84:92:40:da:a9:34:fa:9d:aa:1d:ac:42:
fa:00:d4:36:72:3a:d8:7d:46:21:59:7d:62:12:e5:
2b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5B:1D:E0:0A:30:01:5D:AC:CE:52:92:2C:19:D6:8C:37:4F:BA:E2
X509v3 Authority Key Identifier:
keyid:0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/Slsd4AowAV2szlKSLBnWjDdPuuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.33.0/24
5.56.37.0-5.56.38.255
Signature Algorithm: sha256WithRSAEncryption
3f:35:50:f5:95:3d:56:7f:9e:e3:19:94:d4:35:65:51:1e:28:
6d:46:14:3e:8b:9e:03:13:04:1c:2f:74:96:5c:3c:12:5e:b3:
36:46:3d:ba:00:14:13:20:b2:b9:63:86:54:2c:e8:b2:79:8b:
ad:a9:9c:a4:47:b9:a5:c7:7b:4e:e5:44:47:2e:bb:47:4a:51:
30:f9:e2:89:0b:9f:e4:d4:05:0a:1b:e0:88:12:1c:ce:e0:f1:
27:c0:a8:21:6d:95:d5:27:72:b7:d2:60:e2:d9:fc:3e:45:34:
0c:20:93:6f:10:9a:c0:38:1c:ca:82:8d:96:1f:8a:c7:43:27:
53:b7:9f:fc:a7:6c:62:9b:3f:53:43:8d:ac:9b:35:46:1d:36:
b0:a2:7a:1c:7e:7c:e1:7f:b0:4b:b4:ec:4f:ff:b3:36:a7:83:
26:8b:24:dd:1f:4d:aa:b2:87:4f:cf:80:06:5e:9a:90:e8:d0:
bc:62:fe:4e:fe:c3:38:b7:f7:47:c9:eb:41:6d:06:b9:ac:d4:
95:e8:27:4b:fc:73:49:fc:b0:69:e1:ff:64:77:4d:e2:0d:0e:
30:a6:a5:1b:e9:40:40:47:0c:25:9b:08:c0:fb:ed:7c:b8:14:
c3:fe:40:67:e6:64:63:bb:3b:e8:b0:e1:17:2d:79:33:4f:02:
01:7a:de:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:50:51 2026 by rpki-client