Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/ZI1C6kpl1fygAOupoQLDpI2qIHk.roa
File: ZI1C6kpl1fygAOupoQLDpI2qIHk.roa (raw, json)
Hash identifier: 2rDkKTdgpnSAscOgBKZLbFYT0EC5MtpFd3ePaAsy4fA=
Subject key identifier: 64:8D:42:EA:4A:65:D5:FC:A0:00:EB:A9:A1:02:C3:A4:8D:AA:20:79
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019F5BC98ED2668F0D20C856F4B40E8FB034
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/ZI1C6kpl1fygAOupoQLDpI2qIHk.roa
Signing time: Mon 13 Jul 2026 14:02:43 +0000
ROA not before: Mon 13 Jul 2026 14:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 153.52.65.0/24 maxlen: 24
153.52.80.0/24 maxlen: 24
153.52.127.0/24 maxlen: 24
206.204.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:c9:8e:d2:66:8f:0d:20:c8:56:f4:b4:0e:8f:b0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jul 13 14:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=648d42ea4a65d5fca000eba9a102c3a48daa2079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d1:aa:0b:8f:f4:71:e4:42:cc:b4:d6:ed:fd:
b9:db:b2:0e:e5:45:a2:27:07:81:e2:3d:ed:90:da:
0e:7f:72:a1:7b:c3:3b:be:cc:eb:80:cb:b7:08:a9:
6c:f2:05:71:15:b9:5d:c2:8a:6d:31:a6:c4:f2:fc:
38:22:b3:8a:46:ec:bb:97:6d:31:f9:71:e6:6b:3d:
f3:58:b5:cc:95:52:bc:d3:dc:bd:d4:c6:93:c1:94:
6e:38:b5:cc:f3:fb:3b:a4:2a:57:cb:d5:d4:71:a4:
9c:6e:e6:bd:8a:21:bb:65:40:d8:74:d4:da:76:44:
53:26:f4:a5:c0:dd:42:0b:93:9f:d4:a2:73:09:d1:
1a:a5:fc:1d:f9:6c:70:1a:3b:71:6e:b5:07:c2:2c:
cc:b4:10:1f:a3:bc:0c:fa:61:7c:1f:67:9c:0d:26:
97:ed:4f:2c:e5:b4:1a:91:52:da:e6:b6:1d:2d:f5:
e5:10:6d:ba:c2:2c:98:8e:50:cd:6d:65:7a:2d:14:
b3:c5:a9:b7:55:1a:a0:cd:23:ff:f6:ee:3e:b0:14:
a7:00:8b:2a:5e:f8:d3:2c:cf:60:f2:b0:e8:46:b9:
e1:2f:61:56:14:3b:e3:7a:3f:b3:a4:42:29:ae:b1:
96:d8:a1:ae:24:0a:e2:8b:94:1a:a0:fb:75:7d:c7:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8D:42:EA:4A:65:D5:FC:A0:00:EB:A9:A1:02:C3:A4:8D:AA:20:79
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/ZI1C6kpl1fygAOupoQLDpI2qIHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.65.0/24
153.52.80.0/24
153.52.127.0/24
206.204.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:a4:3d:95:46:30:fd:30:32:85:c7:11:6a:ca:5e:7a:b2:de:
51:b5:22:57:7c:a7:d0:7d:94:18:5b:10:5e:3d:8e:c2:de:9a:
d8:fb:9f:ac:1a:0b:56:5b:bf:b5:bb:11:ca:df:e5:15:45:09:
5e:9b:26:46:f1:89:c6:98:7e:33:56:a1:96:f0:c1:39:98:04:
5f:ab:c1:38:89:c6:6f:ee:f4:1e:df:68:7e:7b:ee:ac:ab:f9:
f2:86:97:5d:e3:a2:7a:49:ae:f4:32:80:11:e0:b8:a3:05:71:
a0:5c:d2:f5:bb:4f:ea:17:b4:cd:22:40:70:22:a8:d6:33:cf:
3d:40:1b:7e:93:ae:c1:4a:81:8c:8c:2b:9a:c6:40:3d:f3:a3:
98:62:54:5e:59:50:b5:32:78:82:0b:92:30:28:91:e7:a0:ba:
f0:99:f2:f0:6a:17:fb:db:fe:c4:44:09:35:0d:46:29:c3:b0:
55:bf:11:47:6d:56:1a:cd:9e:75:ef:9e:8e:28:12:06:ef:be:
81:b3:a8:80:e6:63:9f:70:77:ac:c8:db:42:e1:d1:97:d5:84:
3a:63:46:7e:af:f4:7c:e9:8c:e7:a8:ea:17:bf:6e:31:a8:5c:
88:6c:9e:5b:eb:35:50:5f:17:fd:e4:aa:9e:f5:98:d9:4f:f1:
81:b7:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:09 2026 by rpki-client