Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/1Xv1ZT3Ka3Pl-sig-kxHu9QPm4A.roa
File: 1Xv1ZT3Ka3Pl-sig-kxHu9QPm4A.roa (raw, json)
Hash identifier: yCVw68UmAC47CHqpmFupYHC9ZxaKhStlflix7eTg3Ug=
Subject key identifier: D5:7B:F5:65:3D:CA:6B:73:E5:FA:C8:A0:FA:4C:47:BB:D4:0F:9B:80
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019F428645EC0EB747ACB349AE9E021EDA25
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/1Xv1ZT3Ka3Pl-sig-kxHu9QPm4A.roa
Signing time: Wed 08 Jul 2026 16:18:43 +0000
ROA not before: Wed 08 Jul 2026 16:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62163
IP address blocks: 213.146.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:86:45:ec:0e:b7:47:ac:b3:49:ae:9e:02:1e:da:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jul 8 16:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d57bf5653dca6b73e5fac8a0fa4c47bbd40f9b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:6f:b3:88:e6:09:27:b6:15:e2:1f:05:ee:
52:e0:d4:d0:c0:22:04:5d:a4:4c:cc:e2:3e:f4:e2:
b5:5c:6c:94:4b:c6:10:b4:08:14:0c:8e:fd:b0:b3:
0f:6b:d9:c6:7b:76:c6:9a:4f:71:98:c8:5b:33:a4:
2e:da:40:9c:13:61:1c:fd:9d:07:53:11:12:27:27:
7a:72:7f:93:85:be:0c:8e:93:f4:ff:eb:b6:66:f1:
89:d4:06:7e:83:38:41:f2:90:be:44:8d:7f:36:06:
be:55:89:f6:5f:93:69:71:5a:b2:46:39:a0:28:ed:
37:e6:33:86:c9:62:29:f8:b9:e2:ef:48:9a:68:3f:
77:97:94:6d:cf:bd:3a:79:55:6a:49:6e:15:8a:8e:
e2:bb:00:1f:4d:32:ee:8c:19:df:1b:e0:e4:e3:9a:
05:01:a9:ba:37:5d:38:92:7b:9b:f4:3b:fe:ae:b0:
e6:1d:d5:53:4a:fe:27:00:ca:27:49:79:bb:58:0c:
51:33:75:f9:aa:95:14:17:2c:ab:36:fc:88:de:d5:
28:9e:bc:9c:1c:66:8a:d6:47:1c:48:43:c3:62:9f:
a7:23:65:79:02:69:98:ac:3b:69:2a:fa:bf:7e:af:
8f:5c:10:e9:5e:30:b3:97:02:25:3b:bc:26:42:b3:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7B:F5:65:3D:CA:6B:73:E5:FA:C8:A0:FA:4C:47:BB:D4:0F:9B:80
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/1Xv1ZT3Ka3Pl-sig-kxHu9QPm4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.146.175.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4a:31:15:fa:95:e8:74:71:86:ad:7f:12:7d:df:4e:94:a4:
56:a4:ad:6b:69:8c:58:3a:0a:85:db:00:25:07:ae:7c:2e:3b:
d2:aa:87:12:07:e8:b7:e5:d2:c5:5c:d3:57:f5:22:38:36:4e:
b1:f3:ca:33:11:dc:56:01:20:65:7f:b8:39:64:c5:eb:58:cf:
d4:96:97:b0:fc:ae:c5:29:51:2d:f5:b4:a3:22:4e:9f:76:eb:
f6:70:b6:44:c9:73:76:1d:9c:1a:15:9e:8c:44:dd:06:9d:f8:
33:55:24:83:0e:43:8b:86:86:8c:d6:cf:a1:30:ed:c1:87:dd:
86:83:ea:88:2c:b9:3a:06:02:dc:91:c6:93:19:71:04:27:b6:
d5:10:e7:f9:60:01:f3:ca:3b:52:0e:a3:f8:9b:c6:7f:e9:b4:
73:d5:f1:26:2f:5a:c8:71:25:8f:22:4e:68:4b:62:93:b3:bd:
59:f6:57:07:8d:37:86:f8:e2:2f:f1:47:5c:aa:9e:6a:4a:98:
57:6b:5c:58:4f:e0:27:e9:b1:ac:51:48:85:60:f6:3f:4b:3b:
7f:32:3a:75:b5:8b:11:20:a7:20:69:39:fc:41:a6:3f:3a:e0:
12:b3:ba:e7:62:6a:32:ea:9e:cb:ed:f1:d9:c3:c8:60:78:bb:
72:67:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:34 2026 by rpki-client