Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/71QTkWBkjIDluJBzF-vWoYhvufE.roa
File: 71QTkWBkjIDluJBzF-vWoYhvufE.roa (raw, json)
Hash identifier: tr5Ly3Vb3/fNaOYVgIpH46FeOKIyIEJ4t9Hx6FmJhjw=
Subject key identifier: EF:54:13:91:60:64:8C:80:E5:B8:90:73:17:EB:D6:A1:88:6F:B9:F1
Certificate issuer: /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial: 01A17E80156531FABA90902BA264DE8C5F32
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/71QTkWBkjIDluJBzF-vWoYhvufE.roa
Signing time: Tue 27 Oct 2026 17:54:45 +0000
ROA not before: Tue 27 Oct 2026 17:54:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60246
IP address blocks: 151.0.48.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:80:15:65:31:fa:ba:90:90:2b:a2:64:de:8c:5f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Validity
Not Before: Oct 27 17:54:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef54139160648c80e5b8907317ebd6a1886fb9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:95:0b:4d:25:7b:45:ac:a1:d3:2f:1f:49:
a7:a0:ad:56:a9:c2:a9:12:ff:2d:47:d3:99:73:d7:
76:5e:c3:e3:5d:77:bd:6d:3f:43:d1:9b:32:f9:e2:
5e:76:bf:a4:11:ac:20:a5:38:b3:44:47:43:4f:b2:
9a:dc:6a:6e:6c:09:3e:e5:a9:03:72:30:a6:ea:3c:
8b:06:c1:4f:d6:90:a0:9b:83:a6:4a:ef:35:31:46:
e3:a9:2f:dd:f5:97:92:c5:65:f7:ea:fe:cf:b1:f3:
32:d2:0c:f7:7a:6c:7b:c7:7d:4b:53:59:2b:f2:4b:
d5:59:ce:05:5c:56:bc:92:7c:9a:59:c0:60:63:60:
b5:71:f4:94:fa:e6:3a:99:81:5f:09:56:62:ee:e2:
f4:45:a8:8f:5c:a9:f1:76:06:a6:de:f2:a6:4c:ea:
20:b2:cb:1e:bb:c6:03:4b:3d:04:4a:62:90:0b:6f:
5b:28:5c:cd:62:09:0c:b3:b0:fb:99:23:d6:37:2f:
46:c9:4e:bd:88:9f:80:e3:08:21:07:7b:b4:52:54:
99:8d:a6:74:dd:1b:94:e3:d7:7b:55:ed:1e:71:e9:
f4:33:34:90:1b:58:b3:72:3b:a7:1c:93:a2:d0:b4:
45:66:9c:da:c4:85:6f:4e:9b:ae:b8:75:46:e7:e3:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:54:13:91:60:64:8C:80:E5:B8:90:73:17:EB:D6:A1:88:6F:B9:F1
X509v3 Authority Key Identifier:
keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/71QTkWBkjIDluJBzF-vWoYhvufE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.0.48.0/22
Signature Algorithm: sha256WithRSAEncryption
98:b3:0c:5c:97:0d:10:b3:62:ca:9a:0f:3e:54:5f:e6:fb:62:
11:6c:b2:39:6f:0b:04:44:93:66:25:9b:b6:88:86:61:ce:c7:
79:09:31:3e:3d:d2:c2:dc:e7:f8:f9:43:c1:b0:d7:86:05:7b:
dd:81:7d:3a:d7:b0:d1:22:70:05:da:1b:d2:a3:24:85:68:85:
ed:69:21:44:9e:ea:e4:3f:a0:41:17:48:c8:3c:c7:43:d4:53:
fa:b0:7b:90:12:ff:3c:00:02:dc:ac:b9:92:ad:f3:f3:f4:e5:
1f:28:ef:31:00:3c:8b:5d:e7:0c:b6:ac:04:38:1e:1e:a2:53:
74:86:8a:ec:06:0c:a8:eb:e6:80:95:b9:f8:8c:c7:56:f7:82:
aa:0a:06:42:fd:dc:08:3e:48:38:58:5a:19:c9:0e:c5:07:5d:
55:43:5d:e9:bc:4d:5c:7a:13:42:fd:c2:65:91:ea:68:5b:96:
bf:25:ea:6c:98:7e:5c:9f:25:2e:e1:cc:60:4e:58:68:30:25:
40:70:55:41:21:bb:e8:2f:ba:a6:22:d4:65:25:1c:fa:33:7e:
32:b7:23:fd:ac:3a:53:3f:90:97:14:5d:2e:bf:f1:9d:3e:01:
1c:a4:7d:60:13:20:31:2b:f4:53:cf:56:28:25:ff:6d:4e:91:
90:d2:bc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:29 2026 by rpki-client