Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PJ_jioxmLxcDnha-FB_7Vus0t90.roa
File: PJ_jioxmLxcDnha-FB_7Vus0t90.roa (raw, json)
Hash identifier: usfBZ7XbPR3qgBCcWBidJH7g+h7DoTle8N8w4lI8oi8=
Subject key identifier: 3C:9F:E3:8A:8C:66:2F:17:03:9E:16:BE:14:1F:FB:56:EB:34:B7:DD
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019F4227F9482909FBD0028114853013E890
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PJ_jioxmLxcDnha-FB_7Vus0t90.roa
Signing time: Wed 08 Jul 2026 14:35:43 +0000
ROA not before: Wed 08 Jul 2026 14:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 153.52.118.0/24 maxlen: 24
153.52.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:27:f9:48:29:09:fb:d0:02:81:14:85:30:13:e8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jul 8 14:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c9fe38a8c662f17039e16be141ffb56eb34b7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:f2:b4:18:9d:e2:1a:31:b4:af:b9:80:de:
58:1a:23:ba:f8:40:c4:c7:78:13:6a:45:01:f5:de:
33:21:89:f9:b4:ae:9c:61:76:84:b5:e8:e9:3a:46:
fc:f5:ae:65:23:25:50:89:39:7d:8a:bc:c2:a7:23:
f8:d5:77:78:9f:a6:b2:c0:04:eb:d0:21:1e:fc:d4:
27:89:e3:be:44:a2:9f:27:11:61:91:bd:28:0f:f7:
48:3d:49:36:29:96:75:67:2f:ee:99:a5:4b:c2:cd:
33:c5:a6:65:cf:cd:cd:02:41:b1:28:c6:7c:7a:7a:
2f:68:e9:75:1e:73:19:79:80:39:18:25:66:df:f5:
ad:b2:07:da:b1:10:79:85:62:45:61:9d:21:cf:d3:
94:9a:47:dc:85:f8:e9:66:23:1d:e0:b0:cb:3b:1a:
de:66:dc:8c:18:76:0d:ba:b3:c9:0b:9f:fc:69:9d:
9b:89:ef:3b:85:8f:d6:94:ac:e5:69:b7:14:13:9c:
9e:09:a9:f5:7f:f6:61:33:23:15:13:64:58:c8:ff:
99:25:e0:5f:ab:68:0a:37:0e:4b:ab:a3:c4:48:89:
2b:4a:d6:9a:9f:80:ee:ab:df:86:b1:c1:38:a2:0f:
5a:c5:1c:a6:6f:70:60:f2:f8:b5:e0:76:0d:f7:37:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:E3:8A:8C:66:2F:17:03:9E:16:BE:14:1F:FB:56:EB:34:B7:DD
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PJ_jioxmLxcDnha-FB_7Vus0t90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.118.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:bb:de:ef:18:ba:92:1c:67:68:b7:6f:c8:05:f0:b8:7b:3e:
03:ff:4c:35:04:6c:f0:3d:41:72:0d:7f:67:95:88:a7:e3:56:
c5:68:5e:be:19:ee:4f:27:ac:fe:02:be:02:e4:21:40:b2:4d:
5e:f6:96:53:8b:aa:39:59:f0:ec:34:53:43:c6:2c:be:19:d8:
05:bf:a3:ef:88:54:2d:ed:79:53:59:25:2d:d1:d3:06:50:71:
55:cd:3e:03:44:df:a5:4b:42:5a:c8:97:16:83:58:97:3e:74:
96:f0:cc:f8:1b:f8:8b:42:71:c1:94:df:a3:aa:dc:7c:4f:f0:
91:eb:2e:b0:83:f9:3f:a1:e4:be:86:68:52:89:94:fb:29:85:
ff:c8:4e:e2:9a:7c:bb:50:03:d9:c1:01:00:20:fe:2f:2a:6a:
8c:3b:ec:57:95:b0:fe:c5:c1:e9:e0:c8:8c:a0:09:77:fe:c5:
cb:c0:39:03:79:50:a5:1f:c3:f0:e2:4f:9a:8d:b0:17:b9:4b:
60:2a:4f:f7:ae:bb:17:73:f7:94:67:56:30:87:4a:c5:99:72:
04:9d:2e:9f:f0:2e:fe:a3:2d:1b:cd:c4:0c:ff:46:ca:ae:69:
2f:e0:ef:4b:72:59:c9:e6:76:80:a1:0a:1d:f1:c6:7d:55:23:
65:d8:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:57 2026 by rpki-client