Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa
File: mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa (raw, json)
Hash identifier: l98XRtS1wgtlcBD6oEDM0WuwXV7XXU7PGiNFDVtdljc=
Subject key identifier: 99:7C:E4:15:EF:5B:6A:E4:D8:21:A4:C3:C0:E2:9D:38:9D:32:7C:05
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019EFB17641E09BBE39AE1BF4F48149CA7D4
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa
Signing time: Wed 24 Jun 2026 19:24:34 +0000
ROA not before: Wed 24 Jun 2026 19:24:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209378
IP address blocks: 153.52.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:17:64:1e:09:bb:e3:9a:e1:bf:4f:48:14:9c:a7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jun 24 19:24:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=997ce415ef5b6ae4d821a4c3c0e29d389d327c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:a8:7a:7e:0f:45:a4:87:2d:a0:97:46:88:
44:19:44:38:26:ac:ea:a3:34:fe:06:da:a8:fa:57:
59:ce:a0:bc:20:c0:1f:52:8b:8f:04:1e:7d:b2:14:
a2:7c:a8:3c:f2:6f:8b:8e:bc:8f:32:63:f8:97:cf:
28:10:a3:dd:36:21:16:fe:d1:e6:ad:12:6c:8d:83:
ba:4e:d5:bb:cb:71:d8:f6:c1:30:73:d6:3e:6a:21:
84:7f:c0:60:e0:96:4c:ab:af:15:e1:ba:2c:da:c6:
a4:88:0f:82:50:a3:20:ae:d5:00:f2:c8:14:3c:a9:
d8:73:b8:d0:5e:5d:c3:74:a0:2a:26:94:51:46:0e:
86:6d:4a:64:34:6d:87:c8:18:ff:f3:d8:b3:59:26:
38:00:7f:be:3d:80:d8:ae:be:88:cf:57:aa:65:98:
0a:a3:62:47:41:ef:79:31:f4:52:8e:b1:dc:35:ba:
aa:17:26:ab:39:a7:93:cd:22:75:b3:73:09:49:45:
29:1d:0c:eb:61:39:6d:2c:ed:b3:ec:a1:92:33:7d:
b3:81:9f:29:26:bd:5c:1e:77:bb:10:8e:7d:88:d3:
3e:10:ed:89:3c:ab:a4:f4:e2:3c:46:f9:b8:85:64:
e7:20:7d:a9:4c:d2:aa:f8:45:53:a2:64:99:a1:85:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7C:E4:15:EF:5B:6A:E4:D8:21:A4:C3:C0:E2:9D:38:9D:32:7C:05
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.117.0/24
Signature Algorithm: sha256WithRSAEncryption
16:55:27:8d:90:af:9b:83:05:02:52:26:ee:25:6a:3d:94:24:
5a:99:90:d1:33:55:41:e7:b2:25:7c:6a:ab:7c:ad:b2:59:d2:
c1:c6:a2:88:41:be:5f:36:a9:38:cd:10:98:2e:f5:20:4f:40:
b1:5e:e2:86:f2:da:b6:5a:79:8f:a8:34:c1:5d:86:9f:7b:e8:
f1:e3:41:ed:58:a6:1c:2b:27:9b:04:19:c1:b7:76:75:0a:83:
03:7c:e2:e6:ff:bd:49:5f:f2:65:30:9f:84:09:e1:24:de:42:
78:3d:59:01:6e:83:34:1b:83:e3:8e:06:10:d6:7f:09:3c:ad:
fa:a1:d4:18:c0:f9:92:27:59:7b:99:1a:39:33:50:a7:19:a1:
d6:79:ff:46:df:b4:1d:23:48:84:c0:69:b1:5a:f8:45:f3:39:
35:b8:b4:f3:5c:2b:43:fe:69:b4:ea:0b:92:3e:8d:9a:a3:ce:
50:3c:9a:c5:f5:f7:a1:24:3c:6d:3b:a0:c9:e5:5f:9a:73:f3:
21:3b:85:ea:c2:61:92:1a:d3:a5:b9:ee:f4:bc:cc:08:a7:a2:
d9:70:d5:d5:f6:b8:01:e9:d0:1e:e6:72:71:c6:be:83:40:d3:
58:3f:78:3b:d7:3b:3f:50:81:9b:50:6d:ae:45:7a:ca:8d:53:
f3:04:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:59 2026 by rpki-client