Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/dx088tz4yp8SQ2tSYQowVH2RQCE.roa
File: dx088tz4yp8SQ2tSYQowVH2RQCE.roa (raw, json)
Hash identifier: 8IVXNftvm3WNRoR3lMTcXpcMyufwOCjbFzelGNZJm5I=
Subject key identifier: 77:1D:3C:F2:DC:F8:CA:9F:12:43:6B:52:61:0A:30:54:7D:91:40:21
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019F5B75BA5AF547A7FEB02443B64A3632C4
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/dx088tz4yp8SQ2tSYQowVH2RQCE.roa
Signing time: Mon 13 Jul 2026 12:31:09 +0000
ROA not before: Mon 13 Jul 2026 12:31:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 153.52.64.0/24 maxlen: 24
153.52.78.0/24 maxlen: 24
153.52.83.0/24 maxlen: 24
153.52.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:75:ba:5a:f5:47:a7:fe:b0:24:43:b6:4a:36:32:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jul 13 12:31:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=771d3cf2dcf8ca9f12436b52610a30547d914021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:22:c1:a7:04:cd:cf:5d:66:01:4e:49:88:
9e:db:ee:8b:a7:1a:b4:35:72:ef:88:84:8f:7c:f0:
10:75:13:8d:fb:cc:06:9f:b1:f3:7d:dd:07:04:e7:
a6:57:a9:25:68:a5:bb:42:56:b7:9c:7e:e1:49:19:
02:c7:ca:b6:eb:92:d7:d9:f1:ef:d3:30:24:ed:73:
d0:05:ed:6e:36:f5:76:43:91:6f:df:85:f8:f0:3a:
4b:ad:9c:cf:82:21:3d:75:69:73:dc:79:d5:3e:01:
2f:2f:84:22:64:da:ba:7d:4c:6e:9c:a4:ed:df:3c:
30:9f:99:a2:38:84:44:bf:d9:87:f2:3c:57:1f:aa:
76:0b:a8:df:37:33:38:c0:11:b6:16:55:8f:d2:34:
e2:c0:79:f1:8e:60:07:56:e2:69:6f:ab:cb:ff:76:
58:a5:78:1c:33:bf:38:8d:2b:92:fb:32:84:5b:c1:
21:b8:f9:32:46:79:23:7f:41:d2:ca:05:90:52:de:
f8:66:3d:ac:8e:e8:31:16:15:d5:48:35:5d:2b:73:
c6:14:ea:bd:fa:97:05:7e:ea:14:e3:cf:29:0c:a8:
49:82:48:e0:d1:01:3d:20:bd:6f:c0:75:b2:09:0a:
48:e4:52:12:85:4c:db:e5:5f:58:9d:77:5a:06:c3:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1D:3C:F2:DC:F8:CA:9F:12:43:6B:52:61:0A:30:54:7D:91:40:21
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/dx088tz4yp8SQ2tSYQowVH2RQCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.64.0/24
153.52.78.0/24
153.52.83.0/24
153.52.125.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:eb:f8:e8:8d:f0:cf:35:98:a8:8b:e5:51:f7:8a:88:a3:48:
0c:20:21:26:cd:c9:93:86:64:f6:43:0b:42:58:0e:fc:1e:77:
64:62:9e:3a:6e:22:67:5a:2a:85:20:24:fc:8a:64:5b:3d:0d:
fb:35:c4:ca:61:41:4b:75:25:72:61:e2:83:66:f3:e0:0d:0f:
b6:ce:8c:f4:33:e7:94:e8:56:90:15:09:9f:89:b3:0c:d5:18:
8f:c0:1d:9a:9e:92:2d:1e:77:fc:a0:c2:0b:fb:71:a3:9f:7a:
48:60:b7:f3:90:2c:f5:f3:5a:18:36:50:42:dc:3a:22:c8:e3:
17:67:d9:6c:c3:45:a1:24:a6:c2:a0:38:d5:62:8e:98:23:7a:
4c:a0:7b:6b:09:6c:fd:f4:db:16:a8:c0:18:ef:10:ec:2a:57:
c4:ea:7c:98:de:96:51:7e:85:72:69:19:3a:44:6e:06:e8:e0:
19:59:d4:12:c0:d1:e0:51:99:3f:4c:2a:30:4c:6d:26:c5:ee:
c5:2d:c6:bc:4f:34:1a:f0:6b:75:c5:1b:04:bf:81:31:05:35:
3d:63:6f:74:3d:a2:dc:b4:d8:88:32:13:23:ae:ab:79:b1:ee:
77:a9:08:1f:07:c1:d2:83:f1:eb:8b:f6:3c:15:4e:ea:a3:d5:
6f:e2:b7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:49 2026 by rpki-client