Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/8qhqwdEox3WrRCXbbsIDku7TI6k.roa
File: 8qhqwdEox3WrRCXbbsIDku7TI6k.roa (raw, json)
Hash identifier: wswmfSBdDUsoVZh1h+FG18d8UfZemUZf7gIep8b9k3E=
Subject key identifier: F2:A8:6A:C1:D1:28:C7:75:AB:44:25:DB:6E:C2:03:92:EE:D3:23:A9
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019E0E586DE0F5872D8C57A980E8301BBCB1
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/8qhqwdEox3WrRCXbbsIDku7TI6k.roa
Signing time: Sat 09 May 2026 20:05:36 +0000
ROA not before: Sat 09 May 2026 20:05:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215849
IP address blocks: 5.56.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0e:58:6d:e0:f5:87:2d:8c:57:a9:80:e8:30:1b:bc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 9 20:05:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2a86ac1d128c775ab4425db6ec20392eed323a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:1e:66:3c:a5:0d:64:cb:73:2f:49:66:e4:
b3:3b:44:c5:a1:52:47:34:82:7a:6a:23:7f:2f:4a:
71:e1:5e:6f:35:7b:60:02:27:66:d7:d1:27:e8:df:
e9:e3:db:e5:c7:1b:f8:ac:b6:59:d6:ad:00:13:3a:
b6:6b:cd:1b:ff:e6:e8:cd:77:aa:0b:0a:bd:cb:27:
d3:0c:8e:55:fe:fe:30:dd:68:ac:97:cf:4b:80:9c:
63:0a:65:96:8a:4f:03:f1:2b:a0:1a:26:69:33:f3:
b8:6e:d5:66:69:49:b4:34:bb:0a:20:dd:00:61:1d:
e8:e2:b3:ec:b2:b1:32:f3:a3:99:11:c3:d1:58:d0:
18:87:c8:af:99:40:7c:9a:64:12:b8:a3:b6:49:5d:
54:9e:6d:39:89:94:12:ed:c7:53:f8:28:c1:1d:4f:
9c:e1:f3:15:aa:65:78:f5:88:6e:f7:83:49:43:f7:
69:c7:36:f2:24:01:28:38:03:5a:1b:df:97:9d:7c:
03:2f:0b:16:55:a3:74:af:8e:6f:7d:16:e6:f0:50:
a6:09:06:81:47:3a:c0:ac:cc:fc:49:ef:62:8b:8c:
fe:04:d2:15:2f:a7:e6:58:28:2d:9d:42:dc:49:fb:
38:28:65:2b:8d:20:a6:a5:12:a2:e2:f6:6d:d8:9f:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A8:6A:C1:D1:28:C7:75:AB:44:25:DB:6E:C2:03:92:EE:D3:23:A9
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/8qhqwdEox3WrRCXbbsIDku7TI6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.29.0/24
Signature Algorithm: sha256WithRSAEncryption
73:cd:19:01:78:43:b2:37:1d:a2:f3:15:90:5a:9b:8b:68:c1:
f2:41:17:92:ab:c6:ca:f3:82:32:09:05:df:e9:ce:3c:48:71:
b2:46:01:2a:29:1a:9d:c4:89:1b:f8:93:5b:7a:30:d0:b6:49:
62:3b:06:d2:36:7a:af:2d:6f:e3:e5:69:3e:0e:53:49:27:fa:
6e:92:1b:dd:f4:67:75:48:ae:54:e1:e4:d7:01:1c:d8:85:22:
b6:4c:1b:d9:01:93:d6:b4:f0:9e:08:5a:32:42:6d:d3:7f:3c:
e8:e9:67:f6:de:89:a0:39:46:4d:6c:c6:87:4a:f5:e0:12:14:
b2:5b:a1:ba:b4:bd:a2:d2:d6:88:33:39:df:b2:00:dd:42:1b:
bf:92:7f:41:16:dc:58:dd:94:f5:a4:33:20:ff:99:17:60:66:
ea:7a:a3:54:75:ee:5e:38:2e:35:8e:12:64:0a:57:4f:79:54:
bc:ae:ed:84:32:46:0c:f5:26:f2:4c:74:90:0b:05:84:fd:b4:
50:5a:0d:48:d5:a3:83:55:cd:ea:ce:a8:3e:84:09:55:a4:79:
a1:c1:3e:f3:ec:16:82:cb:c3:29:a0:72:31:b4:a2:4b:a7:f0:
52:de:61:82:11:c0:bc:24:b4:ce:93:60:06:ba:5d:dd:59:6e:
bb:ee:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:19 2026 by rpki-client