Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/sCEAxknZqHojuPgI-hamnESni0Q.roa
File: sCEAxknZqHojuPgI-hamnESni0Q.roa (raw, json)
Hash identifier: +6bM4LTd2rktWJg2HPrxf5zyLZEKCJSlzH9OXq9Pipc=
Subject key identifier: B0:21:00:C6:49:D9:A8:7A:23:B8:F8:08:FA:16:A6:9C:44:A7:8B:44
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019F0DD78776B1C0CFABAD99744AEE28D6F8
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/sCEAxknZqHojuPgI-hamnESni0Q.roa
Signing time: Sun 28 Jun 2026 10:47:36 +0000
ROA not before: Sun 28 Jun 2026 10:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 153.52.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:d7:87:76:b1:c0:cf:ab:ad:99:74:4a:ee:28:d6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jun 28 10:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b02100c649d9a87a23b8f808fa16a69c44a78b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:7c:2c:5d:f4:81:6f:7a:6f:32:88:0c:4c:
5b:1a:c7:5a:df:5f:35:6d:50:99:6c:70:2c:d0:b2:
40:d0:ac:b9:73:68:3e:66:93:e7:65:ee:02:71:a5:
c9:b3:22:d3:b2:0b:3e:e3:f7:6b:1a:4d:1f:34:81:
2b:36:96:84:51:18:48:39:1e:79:26:b8:50:23:48:
5a:22:b8:3f:52:fb:ba:7d:04:1e:87:11:70:69:77:
78:3d:f3:8e:04:5b:6b:0c:47:87:21:86:32:a8:1c:
ab:1c:1a:0b:7d:bb:ca:d9:dc:60:d6:66:c1:0b:61:
45:56:c0:b9:19:61:9c:dc:3f:a4:eb:6c:69:7e:e9:
44:d8:51:f0:18:2a:f7:7a:8f:a7:e3:e5:9e:ec:d9:
37:4d:5b:27:c6:0f:62:6a:be:a1:19:d5:64:9a:a7:
b4:ec:a7:87:e7:50:ab:91:d4:3c:e7:28:0f:d3:b3:
a6:b0:54:97:7a:fc:a2:f6:7c:53:b5:f1:ea:c6:55:
b0:ea:0b:e1:8a:d8:41:db:c5:da:5f:17:63:9d:a0:
d9:0a:ea:21:09:4e:37:d8:af:2a:f7:fa:d2:17:2f:
c4:80:dc:95:36:d5:57:d2:cf:4a:89:0b:ac:be:a7:
0f:7e:9d:f7:65:44:ab:aa:0a:6f:16:a0:04:b5:d3:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:21:00:C6:49:D9:A8:7A:23:B8:F8:08:FA:16:A6:9C:44:A7:8B:44
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/sCEAxknZqHojuPgI-hamnESni0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.116.0/24
Signature Algorithm: sha256WithRSAEncryption
47:dd:b6:48:a1:65:0e:1d:ec:52:b3:20:0b:62:c4:0c:9e:27:
70:b0:64:4c:43:6c:b9:66:b8:5b:53:3d:76:18:6b:49:f9:b0:
89:47:c9:c2:31:6c:7b:81:77:f3:30:3e:4c:8c:83:a9:2f:4d:
0a:8f:c9:5f:df:8d:d2:41:27:b6:b0:9a:41:fb:c9:9a:4e:cd:
46:bb:74:bb:00:5e:23:15:60:8f:f5:f5:7c:c8:fa:cf:34:03:
e1:5d:46:0b:4e:17:a6:22:9e:5e:20:83:6e:12:14:a5:38:94:
f3:ed:85:16:45:60:43:ff:a3:72:6c:3f:a7:a8:49:4d:9b:02:
d8:90:b8:d3:77:db:50:c6:b5:a4:73:6e:66:24:7c:d9:80:2b:
e5:a5:47:f7:d0:f3:33:8b:51:fa:80:68:fc:e0:c1:a9:47:e7:
4c:63:18:a3:c9:e7:bd:8b:44:49:52:ea:c0:29:3a:9a:a6:7a:
0d:cf:ef:0b:cf:63:41:b2:d2:89:39:71:ec:c4:3c:2e:24:a4:
7f:3b:7c:7c:ad:5e:39:3e:8f:3c:d5:58:6c:96:35:30:ea:b5:
08:cf:cc:be:78:a2:38:e5:fa:81:d1:2e:2b:67:f6:6c:3e:4e:
26:0e:71:eb:dc:06:06:7a:f2:63:6d:be:14:b5:0c:03:34:52:
16:13:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:54 2026 by rpki-client