Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/C5_lqSUQ6WLQmcw5DaQ4glmbd-c.roa
File: C5_lqSUQ6WLQmcw5DaQ4glmbd-c.roa (raw, json)
Hash identifier: pNsPtp3Jh4QV8tjlNFIUx759yR4vmvZaCGaiFZ7nHBI=
Subject key identifier: 0B:9F:E5:A9:25:10:E9:62:D0:99:CC:39:0D:A4:38:82:59:9B:77:E7
Certificate issuer: /CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Certificate serial: 019F23688C905548C7E100ED23335A4F8A6F
Authority key identifier: B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/C5_lqSUQ6WLQmcw5DaQ4glmbd-c.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211683
IP address blocks: 5.253.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8c:90:55:48:c7:e1:00:ed:23:33:5a:4f:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b9fe5a92510e962d099cc390da43882599b77e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:b3:06:82:85:7f:ce:60:15:6b:ed:0f:b1:
0d:cb:ff:e1:53:a9:1d:37:a8:dd:40:d8:01:85:2c:
4e:98:30:1c:50:cf:38:a1:5e:d2:b0:fe:3a:6a:38:
18:e1:8b:cc:52:fd:f9:47:03:57:d7:f7:b2:d3:96:
d4:d5:22:b0:7f:5a:d7:bf:b7:1d:6f:5d:0b:6e:54:
67:2c:6e:63:a5:3d:70:bc:1d:ef:83:70:a9:cb:f5:
34:6c:e8:ef:b4:fc:58:68:a9:bc:56:74:ea:94:6e:
46:4b:90:fd:18:7d:d8:7a:f4:a0:8f:bf:02:f2:f0:
5f:5e:51:89:be:d6:66:76:fa:5a:40:42:95:95:2f:
40:6e:c5:3e:02:1d:07:59:d2:e5:1e:04:82:3e:83:
0e:fd:f5:a3:a0:a8:82:ec:8b:8c:f7:10:33:bc:ef:
11:1a:95:7f:78:d6:3f:74:81:58:3d:0b:3a:41:d9:
ce:e0:4a:63:96:7d:8a:79:25:06:07:35:6e:b3:01:
ce:53:5d:40:67:bc:cb:28:8d:d7:31:ff:ea:c3:8c:
51:2c:bb:75:d5:19:47:75:48:5e:39:bd:d3:99:6a:
49:36:4a:40:79:b2:42:e1:fc:bb:5d:89:6a:3b:1a:
b3:7a:2f:ac:9b:a9:88:66:52:73:74:4d:99:81:02:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9F:E5:A9:25:10:E9:62:D0:99:CC:39:0D:A4:38:82:59:9B:77:E7
X509v3 Authority Key Identifier:
keyid:B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/C5_lqSUQ6WLQmcw5DaQ4glmbd-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:bd:5a:83:71:39:2d:33:d1:1f:5a:26:8c:25:51:69:91:22:
2e:9f:95:42:94:dc:ba:67:af:1d:b1:5c:42:7e:5f:f0:e7:41:
7b:7d:93:9e:1b:c1:13:c2:07:d1:7c:96:67:15:20:06:97:60:
6c:4d:3d:6e:50:4a:1d:bd:d8:41:13:28:90:f3:6c:aa:1e:cb:
1e:a1:9f:57:41:dd:24:f3:ad:42:c9:40:4c:17:e5:e6:de:14:
0a:55:0d:b4:7a:6a:cf:4f:54:3d:e1:e2:91:1f:4c:0c:27:5d:
0e:cf:80:0b:d5:a5:b7:be:67:c1:51:c8:f2:9f:17:3e:c9:80:
84:81:54:0c:26:5b:f3:66:5b:6b:cc:ad:3a:89:ae:3c:28:43:
17:4d:43:dd:03:89:4d:e2:53:e2:7d:74:e3:87:ba:50:63:93:
c0:07:96:3a:50:77:b6:88:a0:12:3a:03:f1:b8:04:86:84:17:
af:72:3d:44:0f:bb:54:2f:1f:ad:82:5a:41:ad:5d:85:16:84:
58:e5:ed:77:66:93:df:e2:74:86:41:96:05:a5:33:3c:f7:33:
2a:7f:39:e9:b1:41:7c:da:59:27:91:de:4f:76:e3:24:30:4a:
4a:60:3b:a9:23:0c:64:9c:ad:5a:4b:c6:07:d8:ac:22:da:0b:
fa:d5:8a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:20 2026 by rpki-client