Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/3F59lvQhRhC7OslYNoZZRT8P80s.roa
File: 3F59lvQhRhC7OslYNoZZRT8P80s.roa (raw, json)
Hash identifier: HGWAJoWGaUwGoSgUB6fjS2UEyHqI2sqF2GVj3StJwK0=
Subject key identifier: DC:5E:7D:96:F4:21:46:10:BB:3A:C9:58:36:86:59:45:3F:0F:F3:4B
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A11D3A0E6C0BACD2F13F1B68AE7D8D1339
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/3F59lvQhRhC7OslYNoZZRT8P80s.roa
Signing time: Thu 08 Oct 2026 20:35:06 +0000
ROA not before: Thu 08 Oct 2026 20:35:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 153.52.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:3a:0e:6c:0b:ac:d2:f1:3f:1b:68:ae:7d:8d:13:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 8 20:35:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc5e7d96f4214610bb3ac958368659453f0ff34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:46:64:db:83:91:3e:76:2d:7c:07:2b:48:
67:d8:91:93:57:25:a7:0d:4a:b1:3d:50:04:70:ca:
c0:8f:ab:20:2f:ba:4c:e0:bc:bc:4c:68:47:7d:f2:
17:14:d4:08:57:bf:07:a4:c6:89:26:77:e1:32:b3:
4a:e2:1d:e9:0e:f8:5a:2f:fb:a8:c8:a2:0b:d4:6f:
7b:7a:9e:a5:c1:13:72:98:03:92:9e:20:c6:5c:17:
46:a3:29:0d:3d:ed:61:98:65:fa:18:34:d3:41:27:
9f:13:5f:a2:0b:d0:52:36:e9:25:d7:6e:83:7a:f1:
a8:19:37:3c:e2:82:06:5e:98:3a:a2:4a:40:63:1b:
8d:fe:b0:b4:83:de:8a:64:5e:25:54:be:1e:39:42:
05:df:d0:9f:4e:99:5c:a6:b3:a6:d9:33:37:a0:b2:
8a:d6:4b:20:28:65:6e:3f:13:9b:bd:9d:2a:09:67:
47:45:f6:e9:33:ce:32:01:bd:19:d3:fa:e9:04:a4:
fc:49:6d:2c:d4:6e:d8:65:ad:ac:f6:83:0d:79:b0:
93:96:15:41:a2:88:ea:f5:88:89:2c:07:9a:52:ab:
7c:0d:bf:d0:12:82:99:02:3d:88:e0:10:ae:39:7a:
92:a3:2b:c3:45:c6:21:af:a9:b7:2c:a0:6d:d1:93:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5E:7D:96:F4:21:46:10:BB:3A:C9:58:36:86:59:45:3F:0F:F3:4B
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/3F59lvQhRhC7OslYNoZZRT8P80s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.110.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:f6:e1:dc:b9:65:c7:ba:36:75:17:be:09:02:d0:d4:61:a0:
21:5f:d8:5c:ec:c7:2a:8d:f3:37:c0:08:87:01:b0:7d:42:c4:
af:1d:82:76:c0:77:21:1d:7f:b6:15:24:9d:8a:a0:bc:d2:80:
43:5f:a7:a3:64:bc:d1:82:31:d4:01:d1:cf:d7:7a:b6:96:4f:
eb:8f:a9:6d:b5:cc:f8:6c:74:60:00:07:16:be:cc:b1:2e:8f:
eb:e2:69:9a:76:49:31:09:de:5e:d2:14:02:32:ea:08:f3:00:
4c:27:f5:a9:f6:27:88:05:5c:4f:71:c5:3b:cd:96:1f:64:4e:
77:34:f8:91:7f:eb:d7:60:04:b2:29:a6:e2:50:9b:71:92:0a:
90:24:1f:23:02:be:a3:39:43:bf:7a:79:63:3d:4b:6a:cf:3e:
06:04:07:ef:64:1e:1b:b5:d1:5a:25:14:6c:fa:7d:11:ac:74:
aa:f7:07:06:1c:9a:8f:b6:33:15:57:4f:94:71:4d:e4:7d:27:
15:ba:78:e8:b2:43:2c:da:26:4f:03:64:f9:95:77:f9:d8:fc:
55:fa:2d:5b:d6:78:16:ad:a3:77:17:29:57:a1:04:ad:46:a2:
a0:d1:3c:65:e1:45:b1:05:de:44:b0:19:73:d3:37:7f:7e:68:
ae:69:aa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:52:10 2026 by rpki-client