Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/1AC-Am43eISVETyEF2dNQSt9YnI.roa
File: 1AC-Am43eISVETyEF2dNQSt9YnI.roa (raw, json)
Hash identifier: oT5rEDU+aaRokyEN1YVbv/fErnDMEaMVFGMuRPRDRcQ=
Subject key identifier: D4:00:BE:02:6E:37:78:84:95:11:3C:84:17:67:4D:41:2B:7D:62:72
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A18968D2258105D8FAE36E3E43CD6DC451
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/1AC-Am43eISVETyEF2dNQSt9YnI.roa
Signing time: Thu 29 Oct 2026 20:45:10 +0000
ROA not before: Thu 29 Oct 2026 20:45:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218897
IP address blocks: 153.76.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:68:d2:25:81:05:d8:fa:e3:6e:3e:43:cd:6d:c4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 29 20:45:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d400be026e37788495113c8417674d412b7d6272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:42:43:81:5b:8b:57:7a:2d:5f:bc:b7:80:
8a:d1:a1:1c:bd:65:fc:e9:34:bd:56:fd:45:e0:da:
66:52:2c:21:ac:91:08:44:6a:ef:96:ae:98:38:2f:
05:49:cb:cd:f3:83:f7:a0:7c:2e:68:e6:3c:57:17:
77:10:cb:c5:e7:9a:d9:df:26:a5:a3:4f:b5:3a:63:
30:03:b4:71:66:3f:5c:1d:dd:eb:b6:74:bc:d0:eb:
b7:aa:78:bd:8f:04:95:b4:79:98:a7:08:4c:36:19:
4b:ee:93:8c:85:88:2b:58:f2:38:9c:d1:0b:18:76:
6c:45:58:fb:49:b2:97:56:95:86:65:97:fa:95:f2:
75:50:25:76:67:b9:7f:71:2b:ad:ab:ed:87:d0:79:
1d:14:96:6f:69:02:fc:be:c0:9e:47:53:40:e4:40:
8a:a2:e8:5d:d0:30:d1:e7:27:eb:f9:7d:1e:14:71:
3c:ad:04:25:31:62:5b:73:38:96:da:81:af:a4:47:
f4:db:d5:81:c2:9b:25:b3:ec:e8:c9:82:39:3a:19:
9d:53:91:e0:95:03:3f:62:46:bf:80:8c:b8:38:25:
1d:f9:c2:23:91:d4:36:60:90:92:5e:1a:24:a3:f8:
b6:93:e3:0e:7c:a0:a0:72:ad:15:43:ed:60:89:9b:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:BE:02:6E:37:78:84:95:11:3C:84:17:67:4D:41:2B:7D:62:72
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/1AC-Am43eISVETyEF2dNQSt9YnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.158.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c3:1e:ff:db:b6:62:b6:a3:b4:07:c9:91:d8:be:91:3a:c6:
81:1a:67:de:c8:15:cc:35:2e:1e:a0:e8:7a:9b:d3:e9:d2:c7:
0d:76:18:ff:fe:34:83:fa:c2:86:83:b2:90:d8:8f:f5:03:5e:
d8:5d:41:16:84:15:79:a2:a1:15:08:6d:0b:1a:af:19:84:bc:
a0:2b:dd:ff:b3:9c:66:b2:87:60:9d:59:e1:6e:12:db:4a:ca:
20:df:50:f3:36:3b:c4:6b:d6:82:30:0b:e7:94:71:22:c8:6d:
7d:2d:ca:15:41:d2:11:66:21:1a:90:9b:eb:71:3c:2d:75:75:
f6:64:71:c4:46:04:7e:95:7e:ff:5f:70:13:6d:ab:bb:01:16:
1a:0b:cf:67:2f:2f:80:37:de:d2:b1:12:a1:c3:45:3f:e8:d4:
06:b4:cb:78:11:5d:68:e0:75:25:72:23:1f:87:80:bf:b8:61:
c4:a5:a1:46:95:d8:1a:38:56:df:58:7e:a4:67:09:3c:69:ce:
d7:99:c1:da:c2:1b:7b:4f:36:5b:4f:47:3a:c6:6f:bd:d1:90:
24:5e:6c:5c:3c:ae:46:37:49:eb:e2:e5:ee:50:e5:25:c2:0f:
2e:0e:1a:e6:3b:8b:84:82:46:e2:93:c7:4e:d5:5b:1f:e1:1a:
e8:01:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:07 2026 by rpki-client