Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/1l5LpSbt4LO3XHIYJI_LrN3FJV0.roa
File: 1l5LpSbt4LO3XHIYJI_LrN3FJV0.roa (raw, json)
Hash identifier: xMsrRVMMJpp1a3ltT7Qh1hrZ2cgcr3g1zRL4RAaRIxE=
Subject key identifier: D6:5E:4B:A5:26:ED:E0:B3:B7:5C:72:18:24:8F:CB:AC:DD:C5:25:5D
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D1AE3CE6558F2F6ED1EB1AD53C52D6BAB
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/1l5LpSbt4LO3XHIYJI_LrN3FJV0.roa
Signing time: Mon 23 Mar 2026 13:30:30 +0000
ROA not before: Mon 23 Mar 2026 13:30:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402203
IP address blocks: 192.144.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:e3:ce:65:58:f2:f6:ed:1e:b1:ad:53:c5:2d:6b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Mar 23 13:30:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d65e4ba526ede0b3b75c7218248fcbacddc5255d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9b:49:0f:90:6f:43:90:0f:4b:3e:00:80:3a:
90:a9:25:5f:64:3d:13:8d:17:33:1c:61:e7:4c:b1:
00:c2:e8:45:96:c7:f1:26:d0:2e:e9:f3:3c:77:5f:
67:1b:eb:47:bd:04:69:89:da:f5:9e:40:1b:30:b9:
ea:ac:1f:6a:b8:f9:ea:65:c2:12:be:2d:cd:4a:f1:
94:31:f3:ca:13:5e:04:4a:e3:b7:6c:01:2d:7e:5c:
b8:92:01:33:9b:3c:4b:dd:0c:9c:c0:76:4d:d2:d8:
b2:76:77:7e:61:00:29:98:3f:f4:e5:14:fb:70:ed:
db:e7:8f:8e:7a:6b:6b:58:fc:3a:77:5d:7e:ba:13:
38:6a:69:c8:4c:c3:00:b7:3d:bc:64:16:ea:e9:80:
f4:45:3f:f8:f2:f1:5d:b7:f7:7b:13:26:90:2c:0e:
46:39:5a:25:d8:7b:60:88:2c:57:d7:f8:42:35:f7:
d4:1a:d9:b7:c4:f0:eb:4d:6a:6f:6f:27:03:57:85:
ac:41:10:1b:12:7e:01:94:f5:a4:3a:0f:1e:b3:f9:
d0:e9:29:61:10:9b:c3:de:d2:38:4b:6f:f0:62:3f:
4e:cf:35:49:15:f8:01:3a:e2:e4:a1:60:b1:5a:13:
69:65:17:e4:70:e4:6b:06:07:25:6c:d3:42:99:b4:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5E:4B:A5:26:ED:E0:B3:B7:5C:72:18:24:8F:CB:AC:DD:C5:25:5D
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/1l5LpSbt4LO3XHIYJI_LrN3FJV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.79.0/24
Signature Algorithm: sha256WithRSAEncryption
07:37:7f:30:6f:0d:4f:16:ac:64:10:d2:f4:a8:df:8e:58:0a:
0a:aa:1c:d9:5d:1d:a7:a8:bb:e7:52:df:a0:c3:29:d6:0d:c4:
e0:c0:f3:e2:ca:7d:50:ec:61:36:71:bb:71:bb:99:5a:ad:b7:
f7:c9:79:06:7e:9d:a3:36:46:51:c5:a4:10:26:29:ea:00:99:
14:fb:e2:4e:a2:fa:5c:0f:a7:25:f5:09:0c:28:51:2b:98:5f:
dc:bd:40:50:96:68:fd:6b:1a:ce:d6:2e:0e:8a:fc:49:d8:be:
46:b1:87:e8:a5:54:cf:db:43:1b:9c:d7:82:c2:eb:9a:bb:f9:
9b:39:ce:84:b1:a5:b9:4a:9d:03:a2:89:1f:06:af:38:c5:1e:
8d:93:ef:34:b0:49:27:55:0e:2c:1d:3b:57:73:d8:2f:ff:a0:
44:88:19:c9:9e:1e:4f:e6:d2:d8:13:7e:71:b3:ed:82:44:76:
3d:0a:c7:da:b7:ff:18:0e:92:18:eb:73:72:55:d3:b2:7e:ae:
95:7e:5e:01:9e:88:f8:79:a3:88:78:7b:f0:a9:2d:b7:57:3c:
84:07:22:28:ae:cc:1b:57:89:80:f9:4a:b4:49:c2:b6:21:38:
36:cb:92:e8:69:18:8b:cf:75:f1:9a:ca:61:a5:55:b1:b3:f9:
cf:1b:9b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:45 2026 by rpki-client