Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa
File: rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa (raw, json)
Hash identifier: 91pPyyuYw+iWn/WwlKICOrKpos1He+0f6hjKAqBSgW8=
Subject key identifier: AD:FE:A2:13:D6:CB:FC:97:37:C9:41:24:DB:25:39:FA:8B:D1:9D:1C
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019EF8F5BF344FABF24C2D4A7A6234C65C8B
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa
Signing time: Wed 24 Jun 2026 09:28:35 +0000
ROA not before: Wed 24 Jun 2026 09:28:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 153.52.66.0/24 maxlen: 24
153.52.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:f5:bf:34:4f:ab:f2:4c:2d:4a:7a:62:34:c6:5c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jun 24 09:28:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adfea213d6cbfc9737c94124db2539fa8bd19d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:ec:34:7b:67:49:59:1a:e2:e8:2e:6a:a9:
0e:1e:bc:bc:52:bb:6b:f0:7d:f9:1b:47:c2:65:1c:
6e:fd:35:99:89:3d:58:6f:2e:74:4e:43:dd:72:e4:
9f:dc:83:57:6f:2e:fc:65:fc:81:26:84:6c:d6:fb:
fa:a5:25:86:3d:f4:04:21:28:6b:a8:52:31:2c:18:
1e:bf:22:16:9b:ab:10:f5:3b:80:b3:f6:41:07:cf:
ae:7f:7d:bf:11:77:10:10:02:82:d8:bb:34:77:24:
7d:29:09:10:82:87:ce:ce:fb:bd:8d:ec:6b:71:d9:
09:3d:37:5e:19:cc:0a:05:09:45:11:90:f5:23:4f:
d7:40:6e:80:f2:59:bf:f1:74:47:d3:80:2e:7a:bf:
a0:c8:eb:48:0b:e7:c1:ad:1c:15:a8:bc:15:eb:cd:
37:d2:c5:37:1f:d5:f2:ab:e7:06:06:e4:2e:67:e9:
a4:c9:a2:cb:d4:93:1d:a4:26:c8:4e:82:52:86:ac:
e7:cb:54:bd:c2:4a:17:fe:ab:11:7f:67:48:7e:8b:
17:19:87:75:0e:a8:a5:2b:e0:fe:9a:08:9c:34:d2:
63:46:43:3d:f2:b6:36:5d:71:fd:87:9b:cc:0d:47:
24:c7:88:f0:a2:f4:13:5e:62:6a:d1:23:df:d8:48:
36:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FE:A2:13:D6:CB:FC:97:37:C9:41:24:DB:25:39:FA:8B:D1:9D:1C
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.66.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:84:af:97:21:35:50:4a:a2:09:ed:81:51:5c:57:58:8b:41:
94:36:59:2a:6b:2c:df:47:b8:3f:dd:44:60:5d:ed:5a:8a:64:
8d:4d:21:76:d9:bf:59:09:82:5d:74:1a:4c:5c:18:c1:d3:57:
e9:9a:00:ce:0a:11:a0:9f:bc:e9:9b:61:33:89:fd:9e:dc:c8:
a8:8e:2a:76:28:a9:d8:7d:8b:76:04:21:71:2b:23:1e:8f:43:
d6:a8:20:32:d5:db:39:3e:9c:f7:e2:ae:e8:1a:1c:a5:8d:b0:
7b:f5:1a:a9:88:1b:c3:e5:d7:7b:c9:8f:51:07:5f:5d:ec:c0:
34:84:96:f9:ce:62:62:21:28:f2:82:5d:a0:8b:7e:5b:d9:4e:
0a:88:f1:d9:a7:a0:05:bc:73:22:f1:aa:8d:76:ab:cc:a2:7a:
6f:94:c9:bf:10:67:ec:f3:4b:7f:23:3b:f5:34:53:22:bc:4f:
fc:73:46:23:ad:61:7e:73:58:4f:ed:a3:06:cc:27:e5:d7:ce:
7e:e2:c6:15:b1:cc:5b:79:e8:48:ce:da:89:c7:11:85:50:d4:
5c:04:80:39:50:e8:9d:7b:a4:d0:72:4a:4a:a9:7e:5d:f7:cd:
76:18:61:54:0d:76:b1:6d:35:66:9f:fc:fd:4b:81:78:6e:a3:
51:e6:ff:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:16 2026 by rpki-client