Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5ab954-fddd-4908-982c-16632f6d4097/1/aUXtVqJOcipdXpRGjoYsXbwyw6o.roa
File: aUXtVqJOcipdXpRGjoYsXbwyw6o.roa (raw, json)
Hash identifier: ArbHuwyRb4gQS3vO25EL4OK+zlcB3AfCQxQP6EubkPI=
Subject key identifier: 69:45:ED:56:A2:4E:72:2A:5D:5E:94:46:8E:86:2C:5D:BC:32:C3:AA
Certificate issuer: /CN=b0518d476881059ab406ed10f373f6a9b1f2012e
Certificate serial: 01A1BFD92EE5B98E15AF17B2DB46E3D1BE13
Authority key identifier: B0:51:8D:47:68:81:05:9A:B4:06:ED:10:F3:73:F6:A9:B1:F2:01:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFGNR2iBBZq0Bu0Q83P2qbHyAS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5ab954-fddd-4908-982c-16632f6d4097/1/aUXtVqJOcipdXpRGjoYsXbwyw6o.roa
Signing time: Mon 09 Nov 2026 10:27:23 +0000
ROA not before: Mon 09 Nov 2026 10:27:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 153.80.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5ab954-fddd-4908-982c-16632f6d4097/1/sFGNR2iBBZq0Bu0Q83P2qbHyAS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5ab954-fddd-4908-982c-16632f6d4097/1/sFGNR2iBBZq0Bu0Q83P2qbHyAS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFGNR2iBBZq0Bu0Q83P2qbHyAS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:d9:2e:e5:b9:8e:15:af:17:b2:db:46:e3:d1:be:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0518d476881059ab406ed10f373f6a9b1f2012e
Validity
Not Before: Nov 9 10:27:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6945ed56a24e722a5d5e94468e862c5dbc32c3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:ae:9e:a4:b6:25:46:a3:5f:eb:25:b9:02:
b0:94:c6:3f:1e:b5:bc:e1:58:b8:ac:db:d0:2d:e2:
5c:9c:a9:b6:6d:a6:dd:4c:61:d8:cd:68:32:95:d3:
e1:d2:48:85:e1:37:fe:c6:d0:e5:97:7f:20:fb:37:
13:e1:30:b0:bc:1b:60:5d:a4:03:63:9b:75:29:a6:
ea:ae:e7:99:ed:c8:d2:8e:8b:cd:ea:57:bc:e6:ec:
0f:a9:6e:98:66:20:3d:08:3a:ba:e9:46:c6:9e:5e:
1d:9b:56:9a:fd:48:b7:4a:b7:67:a9:b7:28:35:3f:
27:0b:7f:31:aa:66:c9:31:88:80:a6:b5:a2:5d:4d:
ea:17:ba:51:78:81:82:da:07:08:4e:0e:3c:63:f9:
f8:47:2d:3e:03:f3:b1:a1:32:04:fd:2d:a7:60:9b:
62:77:cb:2c:43:12:0c:7f:01:e5:91:72:e4:cb:37:
ba:b0:b2:8c:b0:20:2e:b1:37:cb:76:f9:25:4e:42:
16:a3:74:35:bb:4b:68:25:07:90:98:0a:a7:35:10:
b2:15:a2:a0:7b:d0:95:f3:2b:2c:ee:8f:5a:b8:b3:
59:52:f6:ad:4d:8d:7b:d7:3d:c6:c4:37:ad:50:9a:
69:5f:8a:4f:ff:d3:6b:b1:f4:1b:be:e0:9f:ca:fb:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:45:ED:56:A2:4E:72:2A:5D:5E:94:46:8E:86:2C:5D:BC:32:C3:AA
X509v3 Authority Key Identifier:
keyid:B0:51:8D:47:68:81:05:9A:B4:06:ED:10:F3:73:F6:A9:B1:F2:01:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFGNR2iBBZq0Bu0Q83P2qbHyAS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5ab954-fddd-4908-982c-16632f6d4097/1/aUXtVqJOcipdXpRGjoYsXbwyw6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5ab954-fddd-4908-982c-16632f6d4097/1/sFGNR2iBBZq0Bu0Q83P2qbHyAS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.80.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f0:09:20:6f:b3:75:77:0a:bd:a2:0d:30:25:f5:d6:24:4f:
1d:90:be:33:46:25:70:78:fa:5b:dc:13:83:44:16:a6:fc:a4:
16:9d:08:f4:82:c5:7c:a9:20:5f:2d:25:8e:d2:bd:8b:96:a5:
c2:42:47:ed:77:1b:f9:28:ba:56:2f:f6:f6:9b:0b:f2:a9:a4:
da:be:89:00:97:f1:06:fe:f7:c0:ca:9e:c4:10:09:70:7f:43:
05:0f:04:23:13:8c:3f:0f:9f:95:5e:6b:39:93:08:8c:9f:f4:
31:d2:d8:c7:89:32:82:a2:3c:3e:f9:18:f6:dd:22:e2:30:09:
aa:00:fd:0f:56:5d:95:7f:34:73:e8:91:78:39:13:0f:6a:97:
d4:ac:67:7e:a9:c9:a6:91:3a:1b:03:34:1d:69:75:59:55:44:
88:1d:52:99:c0:a3:3c:de:96:50:0c:1b:66:86:5f:f0:49:0c:
2e:55:fe:c0:b1:ce:02:11:bb:3a:c1:da:9e:45:4b:99:51:b1:
91:56:70:ee:8a:2a:4d:c6:c2:46:bf:75:19:33:8c:25:09:68:
6f:d4:46:4f:96:d9:42:c4:26:28:dd:35:ac:38:6a:3e:12:85:
ce:0d:ae:52:0e:20:e5:61:bb:83:36:d8:68:d6:91:56:71:a9:
63:cb:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:14 2026 by rpki-client