Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/c8FTZu71b3qtNgx-7zA9OAIXIus.roa
File: c8FTZu71b3qtNgx-7zA9OAIXIus.roa (raw, json)
Hash identifier: oAkqULPbvawo05mATk6h5M5B7Cu4uAxXoM8U9Qo+Rjo=
Subject key identifier: 73:C1:53:66:EE:F5:6F:7A:AD:36:0C:7E:EF:30:3D:38:02:17:22:EB
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A1CC309CF8AC76CC874AC3656DCB35F82D
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/c8FTZu71b3qtNgx-7zA9OAIXIus.roa
Signing time: Wed 11 Nov 2026 19:58:20 +0000
ROA not before: Wed 11 Nov 2026 19:58:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 153.52.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cc:30:9c:f8:ac:76:cc:87:4a:c3:65:6d:cb:35:f8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Nov 11 19:58:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73c15366eef56f7aad360c7eef303d38021722eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:48:17:55:1e:40:1c:3e:15:ff:d3:f3:3b:
13:a6:17:20:1e:9e:3a:09:5f:5c:cf:2d:8b:ad:38:
87:da:f0:35:b5:1b:20:c8:fc:40:1e:63:c1:3b:03:
6f:87:30:bc:65:ba:c6:03:67:f1:29:16:9d:7e:e3:
ef:c5:a9:10:c7:6c:01:66:bf:1c:8f:4d:7a:3c:e5:
42:82:3e:3b:a3:b2:d1:c9:f9:6b:c4:7b:f6:40:0a:
32:b3:64:82:9e:de:c9:fe:3f:b1:d1:ec:be:55:a6:
4e:20:35:7c:fe:40:8a:ed:ed:49:dc:d5:7a:0c:3c:
5c:45:20:d8:fc:ef:70:6d:40:bc:4c:8a:6c:5e:af:
b1:a0:b9:94:83:aa:36:b8:14:cc:b5:9a:66:d5:f8:
f2:60:79:d6:ea:fa:75:93:d1:6d:f8:78:47:2c:e7:
d6:d6:bd:11:e8:88:e4:a7:de:45:e4:58:9b:b2:4b:
b2:f9:43:8d:bc:fd:71:e3:f1:77:03:5d:81:dc:11:
51:1f:6a:d1:7c:8b:10:95:74:66:21:73:e5:82:25:
60:ab:39:73:ce:5e:3f:6f:fc:16:0d:cf:1b:59:3a:
d1:95:4b:20:2a:f8:22:41:02:45:08:05:25:bc:fc:
9b:04:af:a1:a4:bc:91:f1:37:1f:0f:ab:b1:b9:3d:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C1:53:66:EE:F5:6F:7A:AD:36:0C:7E:EF:30:3D:38:02:17:22:EB
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/c8FTZu71b3qtNgx-7zA9OAIXIus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2a:b7:89:75:19:c5:11:9a:fd:2e:d0:09:89:b8:7a:34:02:
2e:a0:7a:7c:14:e4:67:b6:2d:7e:f5:bd:0b:52:df:fd:2c:c2:
39:18:9b:1e:d8:7d:1b:6c:4e:ea:15:c8:c2:a2:e1:51:9f:3c:
01:fc:f2:e6:73:6c:e5:ca:53:e0:ba:ab:79:c6:82:2e:81:42:
e0:97:6b:56:79:49:44:96:27:52:19:e6:65:e6:b2:71:04:1a:
a6:18:0f:f2:12:83:f7:f7:80:d7:81:3b:89:54:bb:a3:d9:26:
d8:4a:01:c2:25:25:49:b2:85:0f:88:47:0d:5e:eb:1f:da:14:
ea:06:40:87:ad:b4:2a:5f:8f:5a:dd:eb:ef:f9:0b:61:3e:b5:
d4:6d:9a:9d:fa:54:a9:64:d8:ff:7b:f1:d9:ac:71:0c:e9:2b:
ac:93:2d:4f:69:d2:69:84:a9:29:6a:ed:29:5b:9a:30:24:84:
b0:13:ef:67:d2:72:30:d0:45:e3:e9:98:3b:8e:0f:45:1d:8e:
25:c8:53:f4:66:58:de:41:a3:94:21:4f:be:91:63:3a:f6:74:
d7:2d:5e:78:20:a5:a6:32:f1:e3:0b:27:f8:83:32:aa:ac:96:
8b:cb:f1:94:ff:18:cc:0d:37:d5:76:91:1c:04:1e:8b:5a:83:
fa:1e:b7:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaHMMJz4rHbMh0rDZW3LNfgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYxMTExMTk1ODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2MxNTM2NmVlZjU2ZjdhYWQzNjBjN2VlZjMwM2QzODAyMTcyMmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZRIF1UeQBw+Ff/T8zsTphcgHp46
CV9czy2LrTiH2vA1tRsgyPxAHmPBOwNvhzC8ZbrGA2fxKRadfuPvxakQx2wBZr8c
j016POVCgj47o7LRyflrxHv2QAoys2SCnt7J/j+x0ey+VaZOIDV8/kCK7e1J3NV6
DDxcRSDY/O9wbUC8TIpsXq+xoLmUg6o2uBTMtZpm1fjyYHnW6vp1k9Ft+HhHLOfW
1r0R6Ijkp95F5Fibskuy+UONvP1x4/F3A12B3BFRH2rRfIsQlXRmIXPlgiVgqzlz
zl4/b/wWDc8bWTrRlUsgKvgiQQJFCAUlvPybBK+hpLyR8TcfD6uxuT2E3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHPBU2bu9W96rTYMfu8wPTgCFyLrMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvYzhGVFp1NzFiM3F0Tmd4LTd6QTlPQUlYSXVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmTR9MA0G
CSqGSIb3DQEBCwUAA4IBAQAvKreJdRnFEZr9LtAJibh6NAIuoHp8FORnti1+9b0L
Ut/9LMI5GJse2H0bbE7qFcjCouFRnzwB/PLmc2zlylPguqt5xoIugULgl2tWeUlE
lidSGeZl5rJxBBqmGA/yEoP394DXgTuJVLuj2SbYSgHCJSVJsoUPiEcNXusf2hTq
BkCHrbQqX49a3evv+QthPrXUbZqd+lSpZNj/e/HZrHEM6Susky1PadJphKkpau0p
W5owJISwE+9n0nIw0EXj6Zg7jg9FHY4lyFP0ZljeQaOUIU++kWM69nTXLV54IKWm
MvHjCyf4gzKqrJaLy/GU/xjMDTfVdpEcBB6LWoP6Hrde
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:11:58 2026 by rpki-client