Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JCVlS77YWFHjQq2gNpYaM-HMKWk.roa
File: JCVlS77YWFHjQq2gNpYaM-HMKWk.roa (raw, json)
Hash identifier: 5p6/R/foShChxEPc2LqchDe9N9eU5Vmhx5O8Y3Jf+Ps=
Subject key identifier: 24:25:65:4B:BE:D8:58:51:E3:42:AD:A0:36:96:1A:33:E1:CC:29:69
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A01916EE6D8A6068D94EFA8FA14093B88E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JCVlS77YWFHjQq2gNpYaM-HMKWk.roa
Signing time: Wed 19 Aug 2026 08:15:28 +0000
ROA not before: Wed 19 Aug 2026 08:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 264628
IP address blocks: 153.51.204.0/22 maxlen: 22
153.51.204.0/23 maxlen: 23
153.51.204.0/24 maxlen: 24
153.51.205.0/24 maxlen: 24
153.51.206.0/23 maxlen: 23
153.51.206.0/24 maxlen: 24
153.51.207.0/24 maxlen: 24
153.51.208.0/22 maxlen: 22
153.51.208.0/23 maxlen: 23
153.51.208.0/24 maxlen: 24
153.51.209.0/24 maxlen: 24
153.51.210.0/23 maxlen: 23
153.51.210.0/24 maxlen: 24
153.51.211.0/24 maxlen: 24
153.51.224.0/20 maxlen: 20
153.51.224.0/21 maxlen: 21
153.51.224.0/22 maxlen: 22
153.51.224.0/23 maxlen: 23
153.51.224.0/24 maxlen: 24
153.51.225.0/24 maxlen: 24
153.51.226.0/23 maxlen: 23
153.51.226.0/24 maxlen: 24
153.51.227.0/24 maxlen: 24
153.51.228.0/22 maxlen: 22
153.51.228.0/23 maxlen: 23
153.51.228.0/24 maxlen: 24
153.51.229.0/24 maxlen: 24
153.51.230.0/23 maxlen: 23
153.51.230.0/24 maxlen: 24
153.51.231.0/24 maxlen: 24
153.51.232.0/21 maxlen: 21
153.51.232.0/22 maxlen: 22
153.51.232.0/23 maxlen: 23
153.51.232.0/24 maxlen: 24
153.51.233.0/24 maxlen: 24
153.51.234.0/23 maxlen: 23
153.51.234.0/24 maxlen: 24
153.51.235.0/24 maxlen: 24
153.51.236.0/22 maxlen: 22
153.51.236.0/23 maxlen: 23
153.51.236.0/24 maxlen: 24
153.51.237.0/24 maxlen: 24
153.51.238.0/23 maxlen: 23
153.51.238.0/24 maxlen: 24
153.51.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:16:ee:6d:8a:60:68:d9:4e:fa:8f:a1:40:93:b8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 19 08:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2425654bbed85851e342ada036961a33e1cc2969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:1e:38:d3:11:26:d8:ef:f7:95:6c:d6:09:
de:b1:10:b8:c3:2a:35:2f:d1:ee:9e:ea:c7:cf:1b:
a1:ad:76:16:76:9a:ae:68:62:e3:6f:31:34:bd:81:
5c:5b:9e:69:9b:85:48:74:d4:af:09:14:ee:69:ed:
52:02:15:de:af:82:bb:96:94:ac:84:c0:9b:3c:f5:
12:01:64:7d:33:d2:a9:ef:27:49:30:b3:88:95:75:
f1:fe:ad:75:4e:b8:20:a6:0a:e5:79:16:00:3e:c3:
c8:79:81:30:82:09:e9:19:dc:a1:89:5e:d1:f3:c6:
7a:c3:8f:79:8f:1b:f5:8b:aa:36:b2:d2:eb:ee:f3:
c3:82:2f:65:9a:47:b4:31:2a:45:09:5e:25:72:05:
bd:3b:97:f6:c4:a6:84:3b:9e:3e:cb:3c:70:41:73:
c4:48:26:76:4a:39:b8:76:01:68:83:c5:08:9c:03:
84:2e:0c:db:d9:60:4f:24:2d:22:64:c4:f9:15:f2:
2d:2f:8a:4e:80:4e:dd:e3:24:08:6f:7b:5a:b4:42:
7c:51:d4:12:ae:13:e9:cf:bf:89:22:df:79:3f:fc:
bd:dc:31:52:62:e2:9e:2d:8a:1a:c3:7a:64:aa:cb:
36:1c:84:0e:ac:79:db:aa:59:ec:9a:5c:ec:22:30:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:25:65:4B:BE:D8:58:51:E3:42:AD:A0:36:96:1A:33:E1:CC:29:69
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JCVlS77YWFHjQq2gNpYaM-HMKWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.204.0-153.51.211.255
153.51.224.0/20
Signature Algorithm: sha256WithRSAEncryption
09:27:83:c0:34:bb:76:08:f2:d6:17:30:60:a1:40:22:00:13:
eb:cf:01:c3:06:fe:68:5b:7b:dc:dd:2c:da:f7:d4:a9:3f:a1:
fe:d3:84:83:d9:0f:fd:67:ff:f0:cc:cd:2b:e2:0e:1c:3d:ad:
05:8d:f5:fe:57:d0:6f:8f:b9:2e:e9:94:6d:cb:9e:6f:b5:ad:
f7:ec:5d:07:52:49:ad:55:86:9e:54:31:9f:24:a0:82:ab:75:
34:d4:49:4c:5b:57:aa:9d:81:83:ad:b4:4e:01:e2:6f:2e:33:
c6:a1:92:03:96:f0:e9:08:0e:9e:1f:a5:c8:b9:25:7c:04:58:
25:b2:40:83:0b:8c:f8:37:94:64:6e:44:59:80:9c:f1:b5:b8:
c3:8a:b7:f0:03:e8:89:9c:a3:73:0f:bb:65:22:fc:50:de:0e:
eb:dc:87:63:e6:f9:e3:8a:f7:15:9b:9e:3d:17:4c:27:fa:60:
90:7c:9b:23:9a:83:a1:70:9e:7c:51:06:12:99:0b:1a:58:7a:
de:2a:4e:59:d0:5b:f4:e1:20:b4:45:f2:21:7f:e7:7a:1d:62:
ac:50:35:95:14:2d:5e:a3:4a:f3:f9:47:fc:f4:f5:ef:5c:45:
8f:20:00:d6:e8:3b:f4:36:4d:be:50:a6:38:36:43:ed:ef:be:
fe:9c:35:54
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaAZFu5timBo2U76j6FAk7iOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwODE5MDgxNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDI1NjU0YmJlZDg1ODUxZTM0MmFkYTAzNjk2MWEzM2UxY2MyOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnQeONMRJtjv95Vs1gnesRC4wyo1
L9HunurHzxuhrXYWdpquaGLjbzE0vYFcW55pm4VIdNSvCRTuae1SAhXer4K7lpSs
hMCbPPUSAWR9M9Kp7ydJMLOIlXXx/q11TrggpgrleRYAPsPIeYEwggnpGdyhiV7R
88Z6w495jxv1i6o2stLr7vPDgi9lmke0MSpFCV4lcgW9O5f2xKaEO54+yzxwQXPE
SCZ2Sjm4dgFog8UInAOELgzb2WBPJC0iZMT5FfItL4pOgE7d4yQIb3tatEJ8UdQS
rhPpz7+JIt95P/y93DFSYuKeLYoaw3pkqss2HIQOrHnbqlnsmlzsIjDzDwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCQlZUu+2FhR40KtoDaWGjPhzClpMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvSkNWbFM3N1lXRkhqUXEyZ05wWWFNLUhNS1drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAKZM8wD
BAKZM9ADBASZM+AwDQYJKoZIhvcNAQELBQADggEBAAkng8A0u3YI8tYXMGChQCIA
E+vPAcMG/mhbe9zdLNr31Kk/of7ThIPZD/1n//DMzSviDhw9rQWN9f5X0G+PuS7p
lG3Lnm+1rffsXQdSSa1Vhp5UMZ8koIKrdTTUSUxbV6qdgYOttE4B4m8uM8ahkgOW
8OkIDp4fpci5JXwEWCWyQIMLjPg3lGRuRFmAnPG1uMOKt/AD6Imco3MPu2Ui/FDe
Duvch2Pm+eOK9xWbnj0XTCf6YJB8myOag6FwnnxRBhKZCxpYet4qTlnQW/ThILRF
8iF/53odYqxQNZUULV6jSvP5R/z09e9cRY8gANboO/Q2Tb5Qpjg2Q+3vvv6cNVQ=
-----END CERTIFICATE-----
Generated at Thu Sep 3 03:26:52 2026 by rpki-client