Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/RO3bpIDn2J_HXKMszt7GfzDSzLQ.roa
File: RO3bpIDn2J_HXKMszt7GfzDSzLQ.roa (raw, json)
Hash identifier: QedY6RKt5ofFsS0wCMN8+wlwQCbLNQao3vI53Hc1xns=
Subject key identifier: 44:ED:DB:A4:80:E7:D8:9F:C7:5C:A3:2C:CE:DE:C6:7F:30:D2:CC:B4
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019CC3379B02149208AE9B852873AF2EF163
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/RO3bpIDn2J_HXKMszt7GfzDSzLQ.roa
Signing time: Fri 06 Mar 2026 12:55:26 +0000
ROA not before: Fri 06 Mar 2026 12:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204610
IP address blocks: 153.80.240.0/24 maxlen: 24
153.80.241.0/24 maxlen: 24
153.80.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:37:9b:02:14:92:08:ae:9b:85:28:73:af:2e:f1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Mar 6 12:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44eddba480e7d89fc75ca32ccedec67f30d2ccb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:6f:44:cc:42:b9:bc:e8:b9:73:21:05:17:
0c:3c:76:38:87:76:09:77:ad:e7:ef:72:c4:f1:ae:
ad:15:3b:57:ff:e4:db:36:26:76:4f:45:1b:7e:cb:
5d:45:c1:a8:57:ac:a6:45:60:8d:f7:48:d0:53:f8:
3f:94:ce:06:3c:dd:42:ed:9b:2a:d8:ac:27:20:16:
70:9d:38:f4:b6:a7:e7:c0:5b:39:0e:57:4e:86:76:
b8:aa:da:07:28:71:43:43:54:c6:4f:67:5b:d4:c3:
21:e0:49:c5:8b:80:75:3d:d1:a3:dd:80:ed:20:fe:
d5:82:34:2a:87:d7:eb:8f:9e:b9:01:96:ff:f2:36:
77:38:d0:13:2a:62:6d:74:85:b6:51:e7:25:0c:c4:
41:7d:a8:fc:93:4d:7f:9b:d4:dc:9c:23:33:af:6b:
91:24:74:80:d4:8c:22:3f:81:72:b0:6f:42:e8:8e:
48:ba:67:df:c9:13:4c:2f:89:86:27:7d:ae:d7:e5:
1a:f2:88:0a:08:b3:d0:3e:c1:67:82:37:a3:ad:70:
a3:ca:5e:bb:2c:23:a0:5e:cb:60:8a:f3:d2:0e:47:
b7:fb:20:9a:b0:fb:f5:5d:c3:13:ed:e7:6f:9f:11:
41:8c:b1:c3:87:76:8e:d0:42:88:ac:15:09:2e:ed:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:ED:DB:A4:80:E7:D8:9F:C7:5C:A3:2C:CE:DE:C6:7F:30:D2:CC:B4
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/RO3bpIDn2J_HXKMszt7GfzDSzLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.80.240.0-153.80.242.255
Signature Algorithm: sha256WithRSAEncryption
12:d2:f6:c1:7e:94:51:26:4c:8c:e0:69:e2:25:a6:c2:ae:69:
13:4c:5f:16:0d:c3:c1:5a:2d:e8:00:c6:45:7c:9a:73:2d:7e:
c5:1d:2e:b3:21:84:2a:f5:71:83:cb:1a:3f:c6:01:37:1c:c5:
b7:6c:fe:4f:31:2c:99:7e:c3:70:70:40:e6:6f:ff:ce:be:80:
e0:f5:f3:94:25:fc:3c:92:e1:6a:15:46:9e:22:c6:2f:5b:52:
f8:bb:d7:28:b5:ec:08:87:06:aa:92:78:6b:61:d7:39:65:df:
39:15:2f:d7:c9:dc:18:42:57:46:19:87:57:62:b5:8b:25:64:
08:78:6d:a9:5d:84:eb:04:7f:be:c6:15:d9:f9:89:49:46:69:
f2:94:31:1a:87:aa:fb:73:0a:e0:69:01:f2:56:0d:53:8b:10:
04:31:1f:40:7d:cc:fe:c0:8a:6b:27:05:a7:4a:01:69:e9:45:
a3:90:22:e6:3d:98:3a:c4:b1:cb:09:b5:34:40:c6:0b:eb:f1:
7c:00:3a:78:79:93:cc:e6:75:2b:91:c5:30:cb:40:da:ec:36:
78:50:8c:d7:f9:6e:19:e8:4b:29:1e:0a:09:c8:50:4a:fc:7d:
ae:86:59:f3:03:0e:df:c6:81:6c:ee:a9:70:cb:5d:4d:eb:e8:
1f:8a:22:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:02:09 2026 by rpki-client