Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/h5uK1sxm-LA7F7RnXnRUsWfGsFc.roa
File: h5uK1sxm-LA7F7RnXnRUsWfGsFc.roa (raw, json)
Hash identifier: kiAKvXhdtX2kzyGIv4FUOZn9GRgVG3rv957GsPh/b7w=
Subject key identifier: 87:9B:8A:D6:CC:66:F8:B0:3B:17:B4:67:5E:74:54:B1:67:C6:B0:57
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019F50A11CCA137D52FA5B47AA7BF19009E3
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/h5uK1sxm-LA7F7RnXnRUsWfGsFc.roa
Signing time: Sat 11 Jul 2026 10:02:43 +0000
ROA not before: Sat 11 Jul 2026 10:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57866
IP address blocks: 103.251.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:a1:1c:ca:13:7d:52:fa:5b:47:aa:7b:f1:90:09:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jul 11 10:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=879b8ad6cc66f8b03b17b4675e7454b167c6b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:22:11:01:cc:5c:4b:09:ce:03:11:29:89:
f2:4c:2e:a0:2b:f0:92:de:41:4a:7b:1f:d0:a3:74:
47:f8:f2:6f:75:d1:ff:03:e9:6f:b8:b5:e4:a6:bd:
16:5b:c3:c4:c9:37:70:56:6a:7e:9a:10:16:67:89:
df:ab:c1:5d:5c:12:69:20:f9:83:f5:0f:aa:10:0c:
fa:4d:18:11:f2:08:89:0f:4c:28:75:13:59:5c:e3:
15:8c:21:ea:7c:ae:e3:66:61:9e:1a:f1:71:b9:d4:
18:3d:d5:c3:72:63:28:27:a3:52:99:9e:f9:d9:ff:
2b:79:52:dc:b3:ff:d9:0d:d5:35:4c:c7:00:71:40:
9d:59:3b:0f:53:70:f3:74:2d:cb:87:e5:2b:ba:f7:
3b:f5:12:d8:b2:07:03:2e:2e:7f:1c:e5:06:32:cc:
13:ce:2f:d2:5e:95:27:dc:5d:1a:3e:56:dd:6c:c7:
2b:e1:6d:06:1b:90:16:8b:dc:26:60:a6:30:b7:e4:
46:7f:69:7a:d6:1e:89:a1:3b:40:36:45:45:27:1f:
e4:34:4c:7c:be:a1:db:c4:ef:5c:eb:a6:14:af:dd:
2d:71:03:51:73:92:98:09:50:e1:d0:3e:77:17:0a:
82:19:ff:95:6d:39:8a:3b:80:9f:ab:9b:9f:4a:19:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:8A:D6:CC:66:F8:B0:3B:17:B4:67:5E:74:54:B1:67:C6:B0:57
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/h5uK1sxm-LA7F7RnXnRUsWfGsFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.251.158.0/24
Signature Algorithm: sha256WithRSAEncryption
53:29:bb:95:a4:aa:48:5d:c8:5a:2e:f2:62:75:62:9a:03:e3:
97:ef:ae:e9:d5:14:08:e3:55:91:a8:23:0d:9a:69:4f:a6:d5:
6d:92:1f:f2:cf:dc:5c:48:c4:5d:f6:7b:61:6d:32:66:53:a3:
2e:d0:08:85:47:0e:f3:46:60:d4:b6:d5:68:2d:5b:cc:e7:57:
4b:4e:be:61:98:22:65:87:66:5f:96:8a:14:f1:0d:f0:bb:9d:
77:8d:c6:77:78:ce:9f:dc:fc:93:29:0d:60:ec:94:bb:05:95:
14:c0:00:b6:0f:0d:3e:dc:6c:28:e8:17:c4:f7:e1:41:8f:cf:
ee:27:42:fd:a5:54:38:5f:ba:03:d3:a7:7a:a1:ea:5d:73:a2:
fb:f8:6b:84:61:4c:cc:5e:53:2f:bf:64:27:ba:cb:06:f4:a7:
40:2c:d1:ae:8f:40:c9:8e:49:cb:86:fa:17:2b:bd:5d:eb:77:
8e:d5:88:d8:6e:b3:51:d1:7a:5c:1d:d5:6d:b1:22:d5:f5:a3:
82:1e:a0:3e:f2:49:69:52:19:8f:63:8f:13:eb:f6:0a:6e:4b:
aa:8a:7a:73:b1:9d:7e:93:5c:75:83:98:cc:74:d2:a6:13:af:
ec:4d:d2:03:aa:d3:dc:28:34:d4:41:9f:7e:f4:a3:74:a0:8f:
82:cf:56:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:19 2026 by rpki-client