Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/vj-CnS2eD-mKhxj15kU5Iw7O-m0.roa
File: vj-CnS2eD-mKhxj15kU5Iw7O-m0.roa (raw, json)
Hash identifier: 9Zrvlk93HfFFexDP9WgjOb/FIItY1zvP6jk5M74kDcE=
Subject key identifier: BE:3F:82:9D:2D:9E:0F:E9:8A:87:18:F5:E6:45:39:23:0E:CE:FA:6D
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019EFB1763D412C53D7F27C670AC3616EBB7
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/vj-CnS2eD-mKhxj15kU5Iw7O-m0.roa
Signing time: Wed 24 Jun 2026 19:24:34 +0000
ROA not before: Wed 24 Jun 2026 19:24:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 153.52.76.0/24 maxlen: 24
153.52.105.0/24 maxlen: 24
153.52.113.0/24 maxlen: 24
153.52.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:17:63:d4:12:c5:3d:7f:27:c6:70:ac:36:16:eb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jun 24 19:24:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be3f829d2d9e0fe98a8718f5e64539230ecefa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:f2:ac:b8:f1:91:ca:df:13:01:e7:90:f8:
aa:e2:2e:01:d8:ef:95:85:a5:98:63:7c:e0:02:b8:
f8:f3:31:3e:90:36:12:e7:d4:63:d1:13:15:e0:33:
ab:13:60:48:f0:92:5c:19:43:aa:27:71:99:6e:c7:
00:74:11:25:1a:48:91:16:e2:f3:03:36:d7:35:91:
61:a4:cb:3f:a5:55:7e:8c:46:ed:b7:05:af:4a:cf:
5a:03:9f:be:e9:7d:7d:9e:e9:43:ec:a7:8c:fd:3b:
1e:09:23:6e:a7:38:db:30:4e:71:c3:19:a1:77:9e:
8f:45:e8:fc:32:6e:ce:e6:63:f4:8d:7c:ce:05:90:
b5:54:2f:a4:2e:c7:79:d3:f4:67:f2:8c:16:f1:a6:
4f:6d:32:66:7c:c0:74:5d:5c:32:8e:65:c5:6c:9d:
a6:35:80:4c:6a:16:c1:69:4c:cf:f5:76:8f:2f:da:
9d:a4:a6:3b:f9:fe:9d:f8:3b:11:33:0e:5e:14:d4:
df:77:a2:e2:1f:0d:af:26:47:8b:b3:92:76:82:e6:
fe:be:65:cd:f6:58:d5:0d:f5:52:0e:75:72:81:30:
99:77:82:05:67:4f:0e:19:17:16:15:f4:b9:de:c3:
c1:b1:59:74:85:d9:af:84:9b:5d:9b:6b:96:22:f8:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3F:82:9D:2D:9E:0F:E9:8A:87:18:F5:E6:45:39:23:0E:CE:FA:6D
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/vj-CnS2eD-mKhxj15kU5Iw7O-m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.76.0/24
153.52.105.0/24
153.52.113.0/24
153.52.126.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ea:a1:30:58:91:bc:5a:ec:23:5a:f7:5b:dc:91:e2:fc:f8:
72:04:95:52:ec:64:c4:a1:1e:57:d0:6c:b4:ca:f9:45:92:a4:
42:1d:08:f8:91:16:58:2a:59:70:f4:7b:3f:c9:69:c4:7e:8c:
2b:bc:23:fa:22:fc:64:82:1e:7d:5e:5a:d7:fa:a5:13:f7:26:
a6:f4:f9:f4:fd:f4:15:0b:59:42:98:b3:a4:6f:ae:93:9d:d5:
d3:23:00:19:72:07:c1:50:05:67:48:1f:9f:a5:ca:a5:2e:d8:
9f:63:79:df:e1:46:78:82:c8:83:75:e2:c9:e2:f9:f0:d1:99:
e4:83:2b:4a:f0:c3:63:f7:40:fb:3e:8e:c9:d0:88:3d:94:ec:
1e:c7:a2:5d:c6:38:4e:a5:40:74:39:dc:17:79:f9:22:c0:9f:
2c:5a:7c:3e:46:2c:fe:cc:29:8b:c4:48:80:5e:bd:7f:54:43:
4b:89:dc:51:f7:a7:fb:55:f1:69:a7:e4:67:34:68:0c:9f:b2:
74:80:ab:10:10:0c:84:08:12:dd:8a:ee:1c:c3:1b:62:06:e9:
12:a8:23:70:ba:d0:36:f7:11:00:19:1d:cd:47:33:a7:1e:da:
cd:6f:dc:4d:9e:29:3b:1c:9a:7e:6e:8b:a3:cb:71:bb:9b:d6:
ce:f1:10:2d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ77F2PUEsU9fyfGcKw2Fuu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYwNjI0MTkyNDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTNmODI5ZDJkOWUwZmU5OGE4NzE4ZjVlNjQ1MzkyMzBlY2VmYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/PyrLjxkcrfEwHnkPiq4i4B2O+V
haWYY3zgArj48zE+kDYS59Rj0RMV4DOrE2BI8JJcGUOqJ3GZbscAdBElGkiRFuLz
AzbXNZFhpMs/pVV+jEbttwWvSs9aA5++6X19nulD7KeM/TseCSNupzjbME5xwxmh
d56PRej8Mm7O5mP0jXzOBZC1VC+kLsd50/Rn8owW8aZPbTJmfMB0XVwyjmXFbJ2m
NYBMahbBaUzP9XaPL9qdpKY7+f6d+DsRMw5eFNTfd6LiHw2vJkeLs5J2gub+vmXN
9ljVDfVSDnVygTCZd4IFZ08OGRcWFfS53sPBsVl0hdmvhJtdm2uWIvj5yQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFL4/gp0tng/piocY9eZFOSMOzvptMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvdmotQ25TMmVELW1LaHhqMTVrVTVJdzdPLW0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmTRMAwQA
mTRpAwQAmTRxAwQAmTR+MA0GCSqGSIb3DQEBCwUAA4IBAQAH6qEwWJG8WuwjWvdb
3JHi/PhyBJVS7GTEoR5X0Gy0yvlFkqRCHQj4kRZYKllw9Hs/yWnEfowrvCP6Ivxk
gh59XlrX+qUT9yam9Pn0/fQVC1lCmLOkb66TndXTIwAZcgfBUAVnSB+fpcqlLtif
Y3nf4UZ4gsiDdeLJ4vnw0ZnkgytK8MNj90D7Po7J0Ig9lOwex6JdxjhOpUB0OdwX
efkiwJ8sWnw+Riz+zCmLxEiAXr1/VENLidxR96f7VfFpp+RnNGgMn7J0gKsQEAyE
CBLdiu4cwxtiBukSqCNwutA29xEAGR3NRzOnHtrNb9xNnik7HJp+boujy3G7m9bO
8RAt
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:28 2026 by rpki-client