Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PyEiKXW-MFeUsxgJvPSxSypMYzA.roa
File: PyEiKXW-MFeUsxgJvPSxSypMYzA.roa (raw, json)
Hash identifier: fYqA6TVnMyOPbIxiZxa+pJruj5C7sxyk5Sn3OnstCZc=
Subject key identifier: 3F:21:22:29:75:BE:30:57:94:B3:18:09:BC:F4:B1:4B:2A:4C:63:30
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0D3CB5AB3EA5F1C38E2093B52071C710F
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PyEiKXW-MFeUsxgJvPSxSypMYzA.roa
Signing time: Thu 24 Sep 2026 14:21:54 +0000
ROA not before: Thu 24 Sep 2026 14:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 153.52.82.0/24 maxlen: 24
153.52.112.0/24 maxlen: 24
153.52.124.0/24 maxlen: 24
163.245.32.0/24 maxlen: 24
163.245.33.0/24 maxlen: 24
163.245.38.0/24 maxlen: 24
163.245.39.0/24 maxlen: 24
2a07:4680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:cb:5a:b3:ea:5f:1c:38:e2:09:3b:52:07:1c:71:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 24 14:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f21222975be305794b31809bcf4b14b2a4c6330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:9b:a0:0f:7c:40:ad:0f:25:eb:8f:c5:24:
85:ef:5e:b1:23:21:98:17:04:ab:f8:a4:0e:41:f7:
03:4f:66:69:ab:d5:a5:85:51:ed:6f:ed:7c:6e:34:
00:5b:8b:f6:17:e7:88:b1:27:45:1c:1e:43:55:1a:
89:c5:f9:bd:6f:81:1e:4c:81:25:b1:cb:ce:85:d3:
7e:65:4b:a8:be:91:27:08:99:1a:1e:c6:9b:c7:1c:
09:a0:5e:3a:e1:4b:fd:23:12:de:c9:ba:0d:22:0c:
80:4f:93:45:f7:44:f3:5b:63:15:69:10:d2:a7:dc:
f5:24:6f:3e:f7:7f:2e:cc:13:28:2e:14:12:c1:32:
5e:4a:1f:0c:5a:74:04:bb:7e:12:ae:f4:6b:ee:20:
7d:6a:9a:aa:e2:81:92:6d:85:a1:54:cc:da:b0:85:
36:fa:b6:62:e4:b5:8a:ec:58:ca:36:c3:39:a5:34:
c6:13:97:cb:84:ff:1b:7e:7d:25:5c:3f:4f:74:30:
6a:dc:a7:d1:4d:7d:d0:47:ee:48:27:08:c3:35:bf:
d4:50:4d:a7:23:d9:53:e5:93:1e:61:fb:69:47:82:
6f:38:89:2d:d8:0a:22:1e:cd:79:88:c5:06:c9:8c:
3b:51:09:cf:22:7d:43:20:a7:3d:01:e1:e4:44:96:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:21:22:29:75:BE:30:57:94:B3:18:09:BC:F4:B1:4B:2A:4C:63:30
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PyEiKXW-MFeUsxgJvPSxSypMYzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.82.0/24
153.52.112.0/24
153.52.124.0/24
163.245.32.0/23
163.245.38.0/23
IPv6:
2a07:4680::/48
Signature Algorithm: sha256WithRSAEncryption
05:35:1d:f9:4a:fa:30:76:95:22:38:f3:9b:ba:09:8e:2e:bc:
d5:79:80:8e:1b:62:ec:8c:a4:5c:1b:d6:3e:2b:56:57:fb:16:
ca:85:55:dd:aa:f4:79:8b:4e:ad:43:db:70:d8:1f:4b:f6:9d:
dd:34:44:c0:d4:8f:79:7a:7d:e4:23:87:4c:28:26:30:0f:58:
f1:59:e6:7a:c1:a1:0d:ce:80:04:9a:82:17:9c:74:86:58:c0:
54:74:ef:94:ed:18:bd:65:30:09:1e:ae:2f:49:3b:ab:5d:f3:
38:e4:92:37:da:da:51:e3:1e:09:fd:93:d6:91:b9:e4:21:13:
30:79:45:9a:51:24:06:c4:4b:aa:b1:6e:c4:91:74:67:3b:2e:
7b:1e:a3:56:69:73:60:2d:59:b5:8e:cd:dc:5f:ec:bc:90:72:
8e:9e:74:a1:94:f0:03:7d:a4:96:7b:4f:23:ac:a1:14:de:1e:
2c:2c:47:1d:55:f9:43:86:1b:40:0f:f1:00:9f:dd:72:3a:5d:
3b:08:6a:36:05:82:38:e8:2b:df:de:03:b1:00:cb:9c:18:1c:
50:a4:73:99:86:2f:3d:59:df:2b:79:6f:9b:06:95:b6:23:98:
6d:b4:d8:32:17:4a:bf:b8:0f:52:87:c3:da:e3:72:2c:43:5a:
16:9c:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:45:09 2026 by rpki-client