Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/lJrAE1_QTuV99t9wPcm0eJgLglQ.roa
File: lJrAE1_QTuV99t9wPcm0eJgLglQ.roa (raw, json)
Hash identifier: /i1/ZZLQJRIDftDOGhZV7UqzdxqGafbx5hrlYVrSuM8=
Subject key identifier: 94:9A:C0:13:5F:D0:4E:E5:7D:F6:DF:70:3D:C9:B4:78:98:0B:82:54
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019F904DA337417F5C35018239542F4B16DE
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/lJrAE1_QTuV99t9wPcm0eJgLglQ.roa
Signing time: Thu 23 Jul 2026 18:47:14 +0000
ROA not before: Thu 23 Jul 2026 18:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 5.133.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:4d:a3:37:41:7f:5c:35:01:82:39:54:2f:4b:16:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 23 18:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=949ac0135fd04ee57df6df703dc9b478980b8254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:77:e4:85:ac:db:12:25:d6:d8:86:a2:a5:
a4:00:28:88:50:81:95:09:e0:fc:9e:dc:f3:0e:cb:
95:b3:ef:b0:34:e4:52:ab:a8:49:ac:70:c7:90:56:
90:86:61:11:91:93:db:cb:ea:d6:4a:33:9a:af:48:
27:b2:be:d3:50:aa:d1:78:e2:81:2a:7b:52:8f:4b:
80:a9:e7:8d:07:f8:74:1b:52:40:ce:fb:62:6d:7f:
10:4c:14:52:30:70:89:e9:a0:26:b4:ae:83:d2:6e:
09:eb:1f:02:ff:bd:22:cf:69:6b:c8:b0:fb:8d:9f:
d5:39:ff:9d:6d:41:b4:5d:29:96:90:75:2e:18:23:
02:b5:c0:ee:aa:27:aa:f0:26:e8:ae:76:bc:16:e5:
71:16:45:f2:1d:85:4c:0e:a3:70:f4:f0:35:3b:e5:
4d:b2:69:80:2a:16:b7:de:e2:74:ba:b5:c0:bb:f3:
0a:29:06:e0:fd:cd:21:81:84:99:55:b2:d1:28:34:
9d:6d:2d:16:da:d4:4d:c3:3a:b7:86:5d:fd:f2:e3:
44:74:e9:70:6a:f6:15:23:29:80:dd:6c:1b:d7:34:
82:7c:eb:d1:f3:66:36:7d:b9:29:b3:a5:4b:f7:c9:
cd:1c:76:ff:8a:e8:78:45:f9:5c:a3:a9:54:de:57:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9A:C0:13:5F:D0:4E:E5:7D:F6:DF:70:3D:C9:B4:78:98:0B:82:54
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/lJrAE1_QTuV99t9wPcm0eJgLglQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.108.0/24
Signature Algorithm: sha256WithRSAEncryption
45:84:6c:77:00:a4:51:f0:82:d9:bd:a9:09:70:55:7a:c0:50:
79:57:c5:9a:82:02:ab:11:53:96:4f:84:2e:9e:d7:53:cf:5e:
2f:be:7a:61:6f:20:7d:b2:a3:07:e0:cd:0f:70:aa:f2:0a:c4:
ef:b8:21:23:d9:5e:23:82:0d:eb:0b:19:74:d5:55:c2:81:32:
cb:60:44:a1:21:4a:a0:96:83:72:96:f8:cd:98:ad:56:e7:19:
2d:76:18:b8:58:36:fe:f8:35:f6:96:68:5c:be:03:50:46:b1:
d3:3e:29:74:d8:e9:39:a5:c7:0d:73:11:b6:fd:c1:1e:77:d1:
4e:68:a8:4c:a5:1f:68:24:83:c1:82:81:c7:b9:20:89:96:2f:
bd:51:b1:7b:e1:80:21:65:7d:77:ce:4c:97:4b:d4:8c:80:d5:
e4:01:fa:e2:31:b9:0b:b9:20:7d:90:9d:9e:29:de:0e:bf:ac:
f1:d2:3b:dd:a8:f2:16:f9:5f:ef:d7:ad:ba:47:a6:5f:d0:9c:
aa:bb:26:cc:80:16:05:f7:44:3a:f3:cd:5b:79:8f:1b:05:ec:
a4:78:ac:23:af:5c:5a:41:51:85:ad:31:2c:28:0b:38:70:24:
e5:9b:1c:b0:6b:7b:7a:16:ef:0f:ae:03:1e:25:6c:93:45:9f:
f9:2c:47:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:38 2026 by rpki-client