Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/GllJhYIQ9j4VpqaoJfCJ_OkyoAA.roa
File: GllJhYIQ9j4VpqaoJfCJ_OkyoAA.roa (raw, json)
Hash identifier: xbAGqvm/a+w+0UN4pl9t7r3UPR+SnhlaAfKReQWFXeI=
Subject key identifier: 1A:59:49:85:82:10:F6:3E:15:A6:A6:A8:25:F0:89:FC:E9:32:A0:00
Certificate issuer: /CN=56e41e2601dc2fae75c686fb2f97fc119a9933d5
Certificate serial: 019F2369248D233E53D6EA89F0D46BF646C0
Authority key identifier: 56:E4:1E:26:01:DC:2F:AE:75:C6:86:FB:2F:97:FC:11:9A:99:33:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/GllJhYIQ9j4VpqaoJfCJ_OkyoAA.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60475
IP address blocks: 5.253.196.0/22 maxlen: 24
5.253.196.0/24 maxlen: 24
5.253.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:24:8d:23:3e:53:d6:ea:89:f0:d4:6b:f6:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e41e2601dc2fae75c686fb2f97fc119a9933d5
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a5949858210f63e15a6a6a825f089fce932a000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:c9:4f:64:02:7d:79:79:f7:59:71:b5:b5:
15:ed:8a:fd:21:b1:59:00:44:ef:51:07:0a:5f:a5:
6c:98:8d:c2:10:9c:2c:b1:12:06:cd:02:47:d9:7b:
a0:96:87:9d:d6:81:cf:a7:67:19:06:f3:7b:c7:86:
f4:62:f4:93:7b:a4:cb:4f:2e:b4:b5:dc:9c:7b:4f:
f9:52:f0:af:9e:97:bb:c6:dd:7e:e3:61:1e:fc:a2:
56:1c:6d:f9:19:16:d8:ac:35:f1:ab:f6:5e:b3:ff:
4b:5e:af:65:d0:4a:5c:9c:c6:b4:c1:98:5d:d0:4b:
7e:0b:f7:bf:ed:40:c5:2f:f9:87:86:c1:2e:fd:95:
bb:ad:93:82:b2:d2:a8:03:20:c2:3c:74:8a:8c:5a:
3d:f4:73:6a:2d:5e:06:b4:b4:a4:00:d4:f2:9e:9a:
7e:90:91:f2:ca:a5:37:db:2e:4c:60:28:64:96:0d:
17:2d:f7:1e:87:3e:26:63:47:62:48:c0:22:71:1d:
2f:e3:54:24:8c:72:a4:84:76:21:b2:59:57:6e:18:
2c:84:c5:56:07:a9:29:3d:7f:6e:c8:b1:bf:3c:4d:
7f:4b:65:e9:43:18:38:80:f2:b3:3a:f8:24:3b:9b:
d8:c1:bc:d6:a8:e3:4e:55:40:2c:a6:7a:3c:f8:9b:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:59:49:85:82:10:F6:3E:15:A6:A6:A8:25:F0:89:FC:E9:32:A0:00
X509v3 Authority Key Identifier:
keyid:56:E4:1E:26:01:DC:2F:AE:75:C6:86:FB:2F:97:FC:11:9A:99:33:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/GllJhYIQ9j4VpqaoJfCJ_OkyoAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:f2:01:69:6c:18:4c:97:0c:78:13:9f:93:86:26:3a:46:02:
d4:13:c8:9b:c7:07:80:d3:fd:66:29:02:22:f2:1d:eb:bd:3d:
bb:dd:82:7c:78:89:34:74:53:c1:33:da:70:53:20:7d:46:92:
39:c2:69:26:87:97:0e:c8:6a:05:4d:18:c0:9e:f5:cc:3d:92:
da:66:b6:3b:40:7d:a6:15:16:8f:39:c2:6f:c6:6c:88:90:d8:
71:bd:d3:83:40:d3:29:02:18:58:87:95:9e:0f:20:32:24:d7:
3b:76:b6:61:8f:c1:1b:5e:11:20:49:94:22:d8:0f:6d:68:ce:
8e:cf:dd:1d:db:16:01:e3:58:29:53:0f:dd:9a:dd:6e:34:93:
df:50:d9:a2:29:71:a7:4f:eb:83:6a:e0:82:73:da:c9:a5:f1:
93:31:78:f6:84:35:23:b7:24:eb:16:aa:21:49:23:26:8b:09:
83:cb:73:a1:b8:9b:82:b1:23:1c:1b:16:81:61:c3:22:cd:62:
78:d5:4d:26:57:15:a0:30:e6:b4:ed:ee:f2:63:28:27:a4:09:
f8:01:48:7a:9f:ce:81:c1:f3:2a:91:f4:5b:56:e0:de:14:b2:
d4:fd:ef:32:8c:11:9e:64:fc:76:6e:72:0a:16:2d:14:37:b3:
a2:7b:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:08:28 2026 by rpki-client