Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/n26FbwjVrqL7AofXrpm-Hq3mXeY.roa
File: n26FbwjVrqL7AofXrpm-Hq3mXeY.roa (raw, json)
Hash identifier: LVDUzSL+yI9HO66PNyVsFWNDM7CEYLNtVRnI5rOfUS0=
Subject key identifier: 9F:6E:85:6F:08:D5:AE:A2:FB:02:87:D7:AE:99:BE:1E:AD:E6:5D:E6
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 019840D607B6176CD35AD36EE8E36C8CC042
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/n26FbwjVrqL7AofXrpm-Hq3mXeY.roa
Signing time: Fri 25 Jul 2025 09:07:05 +0000
ROA not before: Fri 25 Jul 2025 09:07:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.5.0/24 maxlen: 24
152.53.7.0/24 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.44.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.64.0/22 maxlen: 24
152.53.84.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
152.53.144.0/22 maxlen: 22
152.53.160.0/22 maxlen: 22
152.53.172.0/22 maxlen: 22
152.53.176.0/22 maxlen: 22
152.53.180.0/22 maxlen: 22
152.53.196.0/22 maxlen: 22
152.53.224.0/22 maxlen: 22
152.53.228.0/22 maxlen: 22
152.53.236.0/22 maxlen: 22
152.53.244.0/22 maxlen: 22
152.53.248.0/22 maxlen: 22
152.53.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:d6:07:b6:17:6c:d3:5a:d3:6e:e8:e3:6c:8c:c0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Jul 25 09:07:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f6e856f08d5aea2fb0287d7ae99be1eade65de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:cc:48:41:5e:3b:3b:75:d0:e3:78:7b:93:
60:87:49:b0:e4:91:8c:31:ef:2f:03:c8:f8:0f:62:
18:48:26:8f:92:e3:75:1b:cf:1b:e7:38:86:be:ad:
db:08:a7:8d:2b:ed:fb:bf:49:93:6b:ac:d0:2f:10:
c1:f1:fe:98:b4:78:17:54:9e:f9:d6:df:15:ed:44:
ee:35:74:ba:14:28:92:59:e9:82:d1:b7:f0:cd:26:
7c:a0:1d:23:ef:8a:21:33:93:51:3b:0a:65:13:c7:
dd:55:5c:6d:7f:ee:3e:63:c3:12:dd:37:4b:3b:77:
a0:bf:18:e1:27:65:b4:41:3d:c9:37:0c:56:de:ca:
32:cd:9c:eb:cc:30:90:08:4b:e0:19:f4:b5:cb:2f:
9d:f4:f7:7e:eb:38:24:ee:ca:08:ac:9e:9b:69:cd:
5c:29:52:ef:29:78:f1:7b:8a:de:3d:8d:8e:47:b5:
87:e8:25:b6:97:52:00:8f:4c:db:0d:28:89:d2:67:
16:d0:98:19:45:d4:23:7c:c1:29:17:60:fe:6d:90:
2b:04:83:ff:7a:fe:0e:c9:a9:67:ef:28:36:fc:19:
ac:e3:4d:01:34:56:d4:b5:05:f9:4d:30:3f:d8:1e:
1f:13:6d:7c:3a:af:3d:08:61:57:55:bc:13:a2:64:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6E:85:6F:08:D5:AE:A2:FB:02:87:D7:AE:99:BE:1E:AD:E6:5D:E6
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/n26FbwjVrqL7AofXrpm-Hq3mXeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:f8:c4:8f:7f:9a:75:93:0a:41:2c:c3:7e:0e:22:40:86:b6:
bb:a8:1c:51:18:de:09:3d:1e:70:00:2b:1e:43:db:ba:e2:11:
24:95:f1:d0:7b:7d:57:b2:38:99:80:ad:66:37:3e:a7:74:b0:
16:ed:76:e9:68:24:b8:2d:f3:57:d1:26:b5:a7:a2:e4:79:e7:
2f:1d:84:a5:95:1d:8c:27:03:18:7c:21:02:bc:8e:e3:e6:d3:
4e:52:33:24:bf:80:a7:aa:a3:61:dd:bf:55:46:63:63:55:d1:
12:54:d3:e5:21:5c:7b:e0:83:a3:7e:76:a1:c0:32:f5:7d:7c:
b5:a8:0b:8f:0d:b0:59:1b:96:f5:a3:94:e7:17:d0:0c:99:bd:
1f:35:4c:d9:7d:03:00:56:17:ee:c1:30:6f:9f:05:d7:4d:4b:
27:92:33:01:50:d3:ea:23:9a:81:dc:41:01:76:a6:de:bf:26:
c9:b1:64:63:39:eb:e3:e0:4a:2f:55:2f:f9:62:8b:d2:7a:f8:
39:55:ef:bc:78:73:0d:92:15:8a:61:02:2c:95:b3:d1:14:bc:
d4:76:0b:27:f1:e1:a1:b2:b7:27:18:53:bb:f7:ba:e1:a6:bb:
9d:d5:23:20:1e:c1:38:00:78:02:de:bb:5a:24:55:b1:76:ac:
b9:8b:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:06:25 2025 by rpki-client