Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa
File: Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa (raw, json)
Hash identifier: 5ijTFRrYY4N4pS9N+fgT1g/tsE4VuTayoctiYwfJwSw=
Subject key identifier: 2A:3D:02:49:94:4E:ED:3B:63:C7:CC:D3:43:B4:D8:DA:56:16:93:A5
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019ECAE7930A31FC3D831C2145BD14CFE926
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa
Signing time: Mon 15 Jun 2026 10:50:34 +0000
ROA not before: Mon 15 Jun 2026 10:50:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219448
IP address blocks: 153.56.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:e7:93:0a:31:fc:3d:83:1c:21:45:bd:14:cf:e9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jun 15 10:50:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a3d0249944eed3b63c7ccd343b4d8da561693a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:eb:72:08:77:3f:07:c9:7a:74:20:f4:16:
cb:12:0f:af:e5:05:de:58:96:c0:51:c4:87:85:f8:
62:55:22:5a:a3:96:7b:01:e8:f8:69:f2:fb:63:38:
f4:7c:f6:88:55:f3:14:46:e9:d8:1b:fd:7a:65:a2:
64:32:08:fc:8e:28:74:88:fd:8a:5c:9c:87:f3:fb:
2f:31:78:a3:50:44:7d:79:90:ca:a7:88:cd:a3:28:
16:ed:68:19:93:c9:6e:9b:83:01:75:f8:57:fc:32:
9b:31:7c:ea:bd:65:cd:9f:4e:59:9f:2e:a0:b7:34:
1f:11:92:d4:9e:ca:be:89:ae:e6:a1:1b:30:11:3a:
53:07:4c:05:87:f3:2f:76:aa:7c:02:e6:87:b0:52:
3d:6b:af:8c:69:97:92:7a:88:c6:6d:52:5b:83:04:
7c:64:1d:1a:cc:ee:e1:5c:bb:f4:44:03:9f:19:75:
95:9c:4e:95:d8:26:1a:dd:52:cf:be:fa:e3:75:d0:
80:4b:28:38:97:76:ce:af:c6:f8:2c:f9:e1:a1:b1:
d7:60:25:bf:de:70:38:10:d4:e6:e4:62:06:07:0c:
2a:1a:2c:ff:9a:bb:1e:73:56:f6:b4:ed:8c:39:aa:
9b:51:93:5a:a8:ad:4c:6d:c8:ce:4b:6a:87:cb:dc:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:02:49:94:4E:ED:3B:63:C7:CC:D3:43:B4:D8:DA:56:16:93:A5
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2e:00:b4:76:82:d7:38:f0:5f:4b:a9:e9:ca:f4:6c:7d:50:
b5:fc:fc:c9:ff:19:c2:96:36:9c:12:85:4c:cc:2a:39:12:52:
1d:67:40:dd:eb:71:d1:40:2f:be:18:93:d2:a2:15:3a:ee:b2:
59:65:3a:bf:ca:21:8e:c1:68:f6:b5:00:5a:11:3a:89:d7:0a:
25:74:40:0e:3a:10:78:16:e3:f7:b1:1a:2f:d1:20:c7:6a:a0:
4a:3d:58:79:af:2a:6f:4a:13:32:a1:8c:9e:f6:12:77:42:dd:
2a:e9:46:4d:f2:ba:c6:ec:44:31:95:eb:ae:3f:48:53:a6:6b:
ad:5d:87:9a:e3:12:3b:a5:0b:15:15:c0:96:b2:20:7b:77:67:
d7:b5:a8:dd:72:74:d6:e6:5f:2b:87:c6:ff:7d:3e:ae:eb:ea:
39:30:b5:ab:dd:42:70:31:3c:82:15:80:a1:c6:94:ca:e3:33:
2a:a0:b2:e3:5a:61:71:82:d0:01:3e:25:78:03:83:c3:fb:49:
d1:42:7c:36:eb:eb:61:20:37:23:f9:e2:76:82:21:6c:f8:d6:
77:87:d3:d5:0d:e2:84:20:6c:ca:03:79:6c:57:55:a0:6f:ea:
91:8a:ae:fe:f4:52:79:69:8e:2b:f5:6d:9d:5d:21:82:df:3b:
64:b2:f4:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7K55MKMfw9gxwhRb0Uz+kmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYwNjE1MTA1MDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTNkMDI0OTk0NGVlZDNiNjNjN2NjZDM0M2I0ZDhkYTU2MTY5M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR7rcgh3PwfJenQg9BbLEg+v5QXe
WJbAUcSHhfhiVSJao5Z7Aej4afL7Yzj0fPaIVfMURunYG/16ZaJkMgj8jih0iP2K
XJyH8/svMXijUER9eZDKp4jNoygW7WgZk8lum4MBdfhX/DKbMXzqvWXNn05Zny6g
tzQfEZLUnsq+ia7moRswETpTB0wFh/Mvdqp8AuaHsFI9a6+MaZeSeojGbVJbgwR8
ZB0azO7hXLv0RAOfGXWVnE6V2CYa3VLPvvrjddCASyg4l3bOr8b4LPnhobHXYCW/
3nA4ENTm5GIGBwwqGiz/mrsec1b2tO2MOaqbUZNaqK1MbcjOS2qHy9zt3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCo9AkmUTu07Y8fM00O02NpWFpOlMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvS2owQ1NaUk83VHRqeDh6VFE3VFkybFlXazZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmTiXMA0G
CSqGSIb3DQEBCwUAA4IBAQBOLgC0doLXOPBfS6npyvRsfVC1/PzJ/xnCljacEoVM
zCo5ElIdZ0Dd63HRQC++GJPSohU67rJZZTq/yiGOwWj2tQBaETqJ1woldEAOOhB4
FuP3sRov0SDHaqBKPVh5rypvShMyoYye9hJ3Qt0q6UZN8rrG7EQxleuuP0hTpmut
XYea4xI7pQsVFcCWsiB7d2fXtajdcnTW5l8rh8b/fT6u6+o5MLWr3UJwMTyCFYCh
xpTK4zMqoLLjWmFxgtABPiV4A4PD+0nRQnw26+thIDcj+eJ2giFs+NZ3h9PVDeKE
IGzKA3lsV1Wgb+qRiq7+9FJ5aY4r9W2dXSGC3ztksvRI
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:27 2026 by rpki-client