Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/44tbRBm3zSZMoCst6WkxTKufMIE.roa
File: 44tbRBm3zSZMoCst6WkxTKufMIE.roa (raw, json)
Hash identifier: 5gCjJr0c5JiHRvqLpZ00s+SrgcQffTqmoJaDyLE8c74=
Subject key identifier: E3:8B:5B:44:19:B7:CD:26:4C:A0:2B:2D:E9:69:31:4C:AB:9F:30:81
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019DE2FAEEE321D065D28FD8280512530FE7
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/44tbRBm3zSZMoCst6WkxTKufMIE.roa
Signing time: Fri 01 May 2026 09:59:49 +0000
ROA not before: Fri 01 May 2026 09:59:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200296
IP address blocks: 5.56.135.0/24 maxlen: 24
87.236.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:fa:ee:e3:21:d0:65:d2:8f:d8:28:05:12:53:0f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: May 1 09:59:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e38b5b4419b7cd264ca02b2de969314cab9f3081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e0:fd:9c:35:21:8f:bc:a5:86:6c:54:fa:0d:
a0:fd:fe:7e:81:46:14:fa:cc:70:85:2b:4a:44:dc:
01:ce:7f:5d:c6:b0:e0:a8:29:0f:9f:e8:73:20:19:
fb:8c:0f:21:69:80:03:c1:ae:fa:cd:63:0b:73:d0:
95:42:42:9d:cf:fb:47:05:4e:ac:de:8c:0f:8c:b4:
ec:fc:fd:76:cf:ff:a6:36:fa:8f:96:2f:27:49:ae:
52:de:06:79:e0:ec:09:9b:2a:4f:8c:7d:14:57:fa:
ab:86:50:59:97:15:de:8c:81:4f:ee:57:15:91:d9:
38:96:a3:20:00:f4:03:2d:c7:1c:11:b9:80:84:db:
0c:d5:ac:51:3e:e7:15:62:10:eb:c6:82:a9:85:33:
34:1d:4d:6c:e1:cd:e8:df:2c:db:92:7a:94:b5:9a:
85:68:79:3a:38:13:f6:90:98:fe:c9:f7:81:0f:14:
62:40:fb:29:a2:f5:cc:8a:77:6b:21:b6:96:a6:9f:
4d:a1:ba:3f:62:7d:a7:e4:d3:23:cf:ca:72:c4:99:
0c:5c:11:c6:28:71:4d:9e:af:c6:6d:0e:5f:52:b5:
0b:40:ba:64:3d:27:5a:55:68:23:80:84:db:24:dc:
63:28:38:31:20:43:76:04:67:ba:44:f2:36:73:77:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8B:5B:44:19:B7:CD:26:4C:A0:2B:2D:E9:69:31:4C:AB:9F:30:81
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/44tbRBm3zSZMoCst6WkxTKufMIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.135.0/24
87.236.211.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:32:e4:da:c6:7e:4f:7c:cf:5b:1c:d4:e3:45:d5:14:bc:6c:
2a:e1:92:91:cb:40:66:0b:0e:91:89:c8:a4:c4:7d:bc:81:2d:
29:1b:b5:44:00:22:bb:b3:bd:27:84:66:60:7a:df:6a:99:03:
fb:0e:de:1b:70:16:00:19:ba:d9:5f:db:a2:18:57:c0:97:d8:
71:df:e3:74:9c:27:f0:91:0a:d0:a6:65:f7:a0:93:41:8f:74:
cf:57:48:ee:44:94:04:40:70:b9:03:f1:bb:6e:62:9d:9a:e0:
c6:9c:c8:28:17:49:5d:59:34:71:58:b0:49:dc:ea:37:46:ae:
2f:38:34:24:05:bd:62:80:4a:e5:48:ad:98:03:e2:21:5f:a2:
3c:d1:7d:b7:e5:85:ca:da:6a:a2:ca:97:d1:25:3e:b4:fe:5a:
cb:86:72:8b:45:2c:24:c6:f7:66:05:cb:04:9c:c2:7d:d0:ef:
b7:88:84:50:40:26:e0:e7:c7:d4:d6:52:e0:c0:85:bb:f0:8e:
ef:4e:50:2a:d0:c3:b8:1b:28:28:8f:9c:d4:96:9d:cb:a4:0f:
28:74:e8:e1:71:45:9d:26:90:0b:3c:a7:2b:68:42:7a:51:b1:
d6:58:af:3e:23:83:63:92:84:1f:40:c2:da:83:3d:44:c0:a9:
20:9b:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:00 2026 by rpki-client