Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/1m5HSxX-lKOD4u4fGX6ma15JoUs.roa
File: 1m5HSxX-lKOD4u4fGX6ma15JoUs.roa (raw, json)
Hash identifier: EihJQKal0ImjJVDDVfh3BA+ydTEzfWFyJ5mENKRj7AY=
Subject key identifier: D6:6E:47:4B:15:FE:94:A3:83:E2:EE:1F:19:7E:A6:6B:5E:49:A1:4B
Certificate issuer: /CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Certificate serial: 019DD3EABB84398578927E66A0506683642A
Authority key identifier: 7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/1m5HSxX-lKOD4u4fGX6ma15JoUs.roa
Signing time: Tue 28 Apr 2026 11:47:49 +0000
ROA not before: Tue 28 Apr 2026 11:47:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2116
IP address blocks: 159.162.0.0/16 maxlen: 16
2a13:1840:d1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:ea:bb:84:39:85:78:92:7e:66:a0:50:66:83:64:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Validity
Not Before: Apr 28 11:47:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d66e474b15fe94a383e2ee1f197ea66b5e49a14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6f:d0:52:28:99:0d:a0:1d:db:87:56:41:93:
01:0a:7b:ed:53:67:24:6e:42:db:fb:67:44:b8:d3:
03:7c:5d:63:0f:25:56:4c:83:e5:70:a2:e4:64:cc:
30:76:dd:3e:b7:a4:db:8f:c3:f5:95:21:9d:42:c8:
58:0f:c6:3d:07:b8:48:79:7e:11:07:dd:5c:23:bf:
f5:17:81:d8:7f:ee:57:f6:b5:ef:4c:f2:e9:93:a9:
ca:31:46:dc:48:7a:71:0f:9a:34:5a:cc:73:1e:92:
83:30:a1:6f:81:e5:70:c1:3a:3a:86:ba:51:5e:d7:
43:b4:f2:cd:bd:35:d9:2c:e7:91:23:dc:f1:2d:02:
0b:5d:98:cc:a3:76:0a:49:84:c3:6d:39:60:4a:da:
b0:8f:86:84:32:b2:be:ea:c2:0b:e3:a4:18:1a:e9:
2c:74:7f:12:df:46:3c:67:46:4c:37:2e:cc:bd:49:
c5:04:9e:9b:20:62:6b:87:22:18:f8:48:42:79:a6:
42:3b:51:d8:6c:14:fb:71:3e:c3:71:0e:36:b6:28:
d1:64:ff:14:37:fa:32:ce:b4:6e:f9:c7:2d:56:b6:
63:bb:4c:26:6c:e9:fb:96:a3:33:b0:55:92:ac:28:
17:cc:e6:4d:89:eb:5c:f2:cb:48:76:a7:a5:95:60:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:47:4B:15:FE:94:A3:83:E2:EE:1F:19:7E:A6:6B:5E:49:A1:4B
X509v3 Authority Key Identifier:
keyid:7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/1m5HSxX-lKOD4u4fGX6ma15JoUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.162.0.0/16
IPv6:
2a13:1840:d1::/48
Signature Algorithm: sha256WithRSAEncryption
49:4f:3c:c7:e8:fc:32:b1:8c:3b:c7:e2:0b:2f:4e:d7:fe:8f:
4e:a5:d2:86:91:b2:e7:e8:16:04:35:d9:cc:9a:f0:31:1d:e2:
cb:4b:fc:69:fe:87:04:2d:d0:78:7e:5a:d9:53:88:70:7b:2a:
9a:99:0f:98:0c:d2:50:6e:dc:a6:ee:ae:f5:8b:2a:2d:cd:c6:
8c:87:a2:72:2e:28:f8:40:84:b2:09:64:e2:aa:0a:45:59:e0:
67:e1:4e:10:d2:ef:b4:11:56:e7:13:9b:bd:cc:f1:23:3e:b7:
7e:2e:20:37:a7:23:cd:17:c1:2c:50:7b:9b:25:c7:e6:77:2f:
58:bc:51:59:93:7e:e4:a2:55:2f:7f:be:fd:d2:97:71:6a:4b:
8a:d5:5f:a7:72:07:0b:d1:09:3d:b7:6b:d2:04:8a:e8:46:e3:
83:79:a3:00:df:2c:6c:8f:a5:15:1f:66:7e:f0:37:ac:a4:87:
64:5d:b0:15:55:13:47:d1:fd:c3:55:39:5e:9c:cf:5f:99:73:
9c:a7:4a:ad:fb:dd:27:b6:dd:7d:57:ce:eb:e2:40:47:ef:77:
02:d4:51:82:05:96:e6:82:27:a8:17:06:b4:2c:af:f0:f2:85:
a4:bc:85:8e:96:d5:81:35:ae:71:15:1a:1a:ab:9e:37:39:33:
f5:b7:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:33 2026 by rpki-client