Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/USq3y3ZrmtlymF614A6Ey1yhMjU.roa
File: USq3y3ZrmtlymF614A6Ey1yhMjU.roa (raw, json)
Hash identifier: leQoCm8GGhHqJlRnrWy26ehvmedBL8kxTMgDKzVKVsE=
Subject key identifier: 51:2A:B7:CB:76:6B:9A:D9:72:98:5E:B5:E0:0E:84:CB:5C:A1:32:35
Certificate issuer: /CN=83452b85bf45c063faad5e155518e724faab333d
Certificate serial: 01A0B40C687EA798EF9E27DFC01ABB7AE8BA
Authority key identifier: 83:45:2B:85:BF:45:C0:63:FA:AD:5E:15:55:18:E7:24:FA:AB:33:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0Urhb9FwGP6rV4VVRjnJPqrMz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/USq3y3ZrmtlymF614A6Ey1yhMjU.roa
Signing time: Fri 18 Sep 2026 10:25:07 +0000
ROA not before: Fri 18 Sep 2026 10:25:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28959
IP address blocks: 195.238.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/g0Urhb9FwGP6rV4VVRjnJPqrMz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/g0Urhb9FwGP6rV4VVRjnJPqrMz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0Urhb9FwGP6rV4VVRjnJPqrMz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:0c:68:7e:a7:98:ef:9e:27:df:c0:1a:bb:7a:e8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83452b85bf45c063faad5e155518e724faab333d
Validity
Not Before: Sep 18 10:25:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=512ab7cb766b9ad972985eb5e00e84cb5ca13235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7a:66:f6:bb:b1:c8:8f:39:7f:15:42:8e:9d:
ea:31:ce:65:a2:6f:22:2d:9b:0f:6e:6b:65:6c:05:
95:80:00:ac:d9:ba:88:a8:14:d8:da:9a:fd:07:d6:
fb:d8:bc:71:b3:c4:0f:3f:4e:ee:e7:fb:00:da:b7:
63:50:d8:a2:41:a1:01:b0:66:65:94:99:83:94:fa:
e8:a8:39:43:94:67:ed:cf:80:ed:59:93:2f:b6:21:
18:c3:2f:61:97:44:c3:57:85:43:c4:ff:97:86:62:
b9:57:4c:8f:51:2e:ba:12:38:c9:5a:df:54:e9:b8:
1f:77:83:db:03:49:93:cc:78:cd:9a:c1:95:b6:08:
59:b2:e1:d2:a9:83:94:0d:00:bd:12:f5:53:8f:54:
54:db:53:c5:0b:ac:ea:48:6e:f1:3a:53:27:b4:96:
4d:db:af:3e:0d:fd:87:fa:14:a4:68:53:17:f9:f8:
6a:b3:14:c7:a7:b8:7a:c3:65:eb:64:04:4b:d7:36:
aa:91:92:34:58:02:e4:42:ed:41:b3:24:47:85:29:
41:d8:0e:68:00:9f:89:8a:b6:73:ba:70:00:e4:0f:
26:b1:d0:d1:84:35:07:d4:27:d0:d0:0b:0b:3b:be:
4b:ba:44:30:a9:38:3d:ae:9b:ab:9f:e8:88:b4:62:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2A:B7:CB:76:6B:9A:D9:72:98:5E:B5:E0:0E:84:CB:5C:A1:32:35
X509v3 Authority Key Identifier:
keyid:83:45:2B:85:BF:45:C0:63:FA:AD:5E:15:55:18:E7:24:FA:AB:33:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0Urhb9FwGP6rV4VVRjnJPqrMz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/USq3y3ZrmtlymF614A6Ey1yhMjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/g0Urhb9FwGP6rV4VVRjnJPqrMz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.253.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:bc:bb:e9:e9:4b:3f:9a:cb:b8:73:be:d7:5b:f7:72:d2:31:
0d:a4:c2:81:50:6d:52:35:92:35:9b:93:c1:3b:89:da:e4:cf:
75:70:6c:2a:6c:46:80:e6:ca:49:59:d6:4e:99:5b:4c:5c:ca:
cd:63:52:24:f9:b2:53:35:24:23:2f:bf:47:e7:00:87:27:e5:
e3:27:4f:be:cf:07:b7:8f:d8:12:d3:e9:1f:62:eb:67:19:7b:
1f:c0:d7:e2:ac:9e:6a:e7:4d:5a:0c:3a:53:a7:b6:1c:47:19:
37:d8:2f:ad:e7:e6:02:f5:e5:8e:6c:77:1a:7f:2d:3d:f8:4b:
f7:d9:cf:06:91:68:06:ed:fe:57:6c:a2:44:59:df:89:4b:2a:
6c:0a:c4:77:54:c0:ab:38:dd:a4:b5:72:49:60:b8:ba:eb:3a:
09:a0:0d:0f:97:b6:1a:2d:80:b3:81:ad:0f:c8:39:80:5e:ea:
16:5d:cf:ee:56:bb:a8:2d:1a:ad:bc:97:fe:e9:4e:b0:ea:c1:
17:4c:7f:0a:0c:f5:39:69:67:e6:d4:35:89:f1:ba:59:03:ca:
50:71:13:ee:59:ec:fe:10:d3:7a:d9:87:7b:0d:76:f0:7d:1a:
48:5e:b6:f4:1d:65:8c:29:0f:23:c4:19:16:1d:0f:6c:e2:da:
48:69:7f:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC0DGh+p5jvniffwBq7eui6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDUyYjg1YmY0NWMwNjNmYWFkNWUxNTU1MThlNzI0ZmFh
YjMzM2QwHhcNMjYwOTE4MTAyNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTJhYjdjYjc2NmI5YWQ5NzI5ODVlYjVlMDBlODRjYjVjYTEzMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33pm9ruxyI85fxVCjp3qMc5lom8i
LZsPbmtlbAWVgACs2bqIqBTY2pr9B9b72Lxxs8QPP07u5/sA2rdjUNiiQaEBsGZl
lJmDlProqDlDlGftz4DtWZMvtiEYwy9hl0TDV4VDxP+XhmK5V0yPUS66EjjJWt9U
6bgfd4PbA0mTzHjNmsGVtghZsuHSqYOUDQC9EvVTj1RU21PFC6zqSG7xOlMntJZN
268+Df2H+hSkaFMX+fhqsxTHp7h6w2XrZARL1zaqkZI0WALkQu1BsyRHhSlB2A5o
AJ+JirZzunAA5A8msdDRhDUH1CfQ0AsLO75LukQwqTg9rpurn+iItGKroQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFEqt8t2a5rZcpheteAOhMtcoTI1MB8GA1UdIwQY
MBaAFINFK4W/RcBj+q1eFVUY5yT6qzM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBVcmhiOUZ3R1A2clY0VlZSam5KUHFyTXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82YmQ2NTMtM2U4Yi00N2IwLTliODMt
N2I1OTY0ZGRjMzZlLzEvVVNxM3kzWnJtdGx5bUY2MTRBNkV5MXloTWpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82YmQ2NTMtM2U4Yi00N2IwLTliODMtN2I1OTY0ZGRjMzZl
LzEvZzBVcmhiOUZ3R1A2clY0VlZSam5KUHFyTXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+79MA0G
CSqGSIb3DQEBCwUAA4IBAQDIvLvp6Us/msu4c77XW/dy0jENpMKBUG1SNZI1m5PB
O4na5M91cGwqbEaA5spJWdZOmVtMXMrNY1Ik+bJTNSQjL79H5wCHJ+XjJ0++zwe3
j9gS0+kfYutnGXsfwNfirJ5q501aDDpTp7YcRxk32C+t5+YC9eWObHcafy09+Ev3
2c8GkWgG7f5XbKJEWd+JSypsCsR3VMCrON2ktXJJYLi66zoJoA0Pl7YaLYCzga0P
yDmAXuoWXc/uVruoLRqtvJf+6U6w6sEXTH8KDPU5aWfm1DWJ8bpZA8pQcRPuWez+
ENN62Yd7DXbwfRpIXrb0HWWMKQ8jxBkWHQ9s4tpIaX/s
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:46:34 2026 by rpki-client