Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/zhVIATy6RaKJ9NsMT7jT08uRwoY.roa
File: zhVIATy6RaKJ9NsMT7jT08uRwoY.roa (raw, json)
Hash identifier: WIrcfCMCPEQa2w76ufg9kRLp+sMzFSM7Tk10LB1VXA0=
Subject key identifier: CE:15:48:01:3C:BA:45:A2:89:F4:DB:0C:4F:B8:D3:D3:CB:91:C2:86
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A1BD8B5933F630347BB6D04CD1A11B6519
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/zhVIATy6RaKJ9NsMT7jT08uRwoY.roa
Signing time: Sun 08 Nov 2026 23:43:08 +0000
ROA not before: Sun 08 Nov 2026 23:43:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 153.52.76.0/24 maxlen: 24
153.52.105.0/24 maxlen: 24
153.52.106.0/24 maxlen: 24
153.52.107.0/24 maxlen: 24
153.52.108.0/24 maxlen: 24
153.52.109.0/24 maxlen: 24
153.52.113.0/24 maxlen: 24
153.52.114.0/24 maxlen: 24
153.52.126.0/24 maxlen: 24
153.76.224.0/24 maxlen: 24
153.76.225.0/24 maxlen: 24
153.76.226.0/24 maxlen: 24
153.76.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bd:8b:59:33:f6:30:34:7b:b6:d0:4c:d1:a1:1b:65:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Nov 8 23:43:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce1548013cba45a289f4db0c4fb8d3d3cb91c286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:61:9f:de:18:be:e1:a4:ff:aa:e7:81:48:
1c:42:81:53:fb:8a:1e:20:a2:4b:a4:43:2f:fc:6b:
55:17:8c:da:ac:91:00:cb:2d:ed:fc:5e:b1:10:11:
de:cf:01:bf:77:b0:ec:0e:00:82:bd:88:82:c1:dd:
d1:7a:4c:0b:2a:ce:a1:03:3e:fd:5d:e8:b7:e8:22:
6d:00:0f:98:6d:30:35:01:36:95:4e:3d:63:d3:ce:
18:ba:1c:c8:92:f8:8c:9e:44:d8:13:fa:ac:ac:bb:
7b:c5:2c:ff:20:0b:4b:5d:6d:71:a7:df:10:94:e9:
d3:ce:42:d5:89:6f:0b:4a:5a:d8:a1:ce:d0:47:dd:
b2:ee:d3:a0:8f:93:e6:16:29:45:92:99:ee:fe:12:
e3:0b:0e:82:d8:f6:4a:e7:73:ca:61:4e:17:34:91:
b6:f6:72:08:25:27:30:74:01:ff:91:6b:b6:85:45:
36:d5:c4:8e:08:e9:af:bd:51:d9:8b:a1:50:83:da:
8e:35:a2:6d:4f:82:1e:52:e9:2b:99:c4:a4:0a:dd:
0c:18:1e:6e:7f:04:89:ad:f9:1f:2b:cb:da:a3:08:
a9:a2:78:dc:33:3a:22:40:90:46:22:1e:f1:bc:9d:
ad:53:ca:bf:fa:d4:7b:5c:d0:15:fe:b3:30:25:56:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:48:01:3C:BA:45:A2:89:F4:DB:0C:4F:B8:D3:D3:CB:91:C2:86
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/zhVIATy6RaKJ9NsMT7jT08uRwoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.76.0/24
153.52.105.0-153.52.109.255
153.52.113.0-153.52.114.255
153.52.126.0/24
153.76.224.0-153.76.226.255
153.76.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c7:9a:2f:65:ce:1f:ca:17:e7:f5:51:de:c1:98:e0:5f:69:
a6:37:0d:ff:00:91:10:c8:62:5e:4b:97:f8:91:f9:eb:75:c6:
e5:b9:70:5a:92:82:62:fe:06:8d:a4:bc:fb:d3:0d:a8:6d:f9:
35:a1:88:ff:7a:26:cf:3b:af:56:b4:22:3c:28:c7:11:f6:62:
4f:a8:67:6a:bf:f2:d9:66:28:d4:d3:78:0d:6f:e9:03:40:bb:
a1:0f:e6:c3:dd:e2:b7:42:d1:1d:7b:10:81:3e:23:d1:67:4e:
f7:ff:fe:dd:c6:44:75:82:c5:50:f1:d0:4c:f1:a5:7e:5a:18:
d0:f5:1c:44:3a:ac:42:3a:02:39:5d:2d:4b:ce:9a:92:53:f6:
36:ae:0d:fd:de:5e:7f:4e:eb:0f:ad:ad:f1:ac:c7:e7:92:ca:
f4:e6:02:63:95:c6:05:34:64:50:ec:ae:76:a1:8f:27:b4:da:
d3:a9:53:25:72:c0:2a:74:2f:66:8f:eb:c5:3e:21:1c:08:2b:
b5:db:96:c2:b2:2f:de:4d:26:80:f2:40:75:f1:00:69:95:70:
90:44:85:a8:15:4e:78:44:b9:f7:2f:e0:9f:34:e8:41:de:de:
fd:bd:a1:3f:9a:71:6d:09:fc:4f:24:29:93:69:a3:78:50:04:
43:38:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:15 2026 by rpki-client