Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/huGtq-TwlrsWgMkwCnYXBiUSweg.roa
File: huGtq-TwlrsWgMkwCnYXBiUSweg.roa (raw, json)
Hash identifier: 5p3EHDIXaD9vA9oM+gSTGnbNogqLtbPEKfIBy7VfLCg=
Subject key identifier: 86:E1:AD:AB:E4:F0:96:BB:16:80:C9:30:0A:76:17:06:25:12:C1:E8
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019F03D6AD86D9BF6A723F602DED069431D5
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/huGtq-TwlrsWgMkwCnYXBiUSweg.roa
Signing time: Fri 26 Jun 2026 12:10:28 +0000
ROA not before: Fri 26 Jun 2026 12:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 153.52.68.0/22 maxlen: 22
153.52.72.0/22 maxlen: 22
153.52.79.0/24 maxlen: 24
153.52.84.0/22 maxlen: 22
153.52.88.0/22 maxlen: 22
153.52.93.0/24 maxlen: 24
153.52.95.0/24 maxlen: 24
153.52.96.0/23 maxlen: 23
153.52.98.0/23 maxlen: 23
153.52.100.0/22 maxlen: 22
153.52.104.0/24 maxlen: 24
153.52.106.0/23 maxlen: 23
153.52.108.0/23 maxlen: 23
153.52.110.0/23 maxlen: 23
153.52.114.0/23 maxlen: 23
153.52.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:d6:ad:86:d9:bf:6a:72:3f:60:2d:ed:06:94:31:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jun 26 12:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86e1adabe4f096bb1680c9300a7617062512c1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:cb:ca:55:ac:d5:25:03:49:b6:43:96:36:
8a:82:d5:1b:93:d9:b6:47:0c:b4:3d:4d:0e:22:0a:
93:d9:42:b5:f8:3b:6b:20:80:4e:30:8d:b4:3a:8d:
44:a5:ce:28:7b:da:0a:3e:39:34:6e:48:9b:63:90:
2b:56:71:76:60:b9:f0:12:41:09:26:54:42:83:9a:
4b:aa:2b:6f:2f:d3:a9:1f:26:ea:39:f1:5a:74:95:
36:44:c5:09:6e:23:cd:da:42:4b:27:29:ab:f0:50:
48:34:4c:6f:36:da:14:5b:3f:a0:a2:a4:31:e9:3a:
93:51:ac:b8:1b:31:16:93:82:a4:59:96:4f:dd:71:
82:89:26:a0:a4:11:51:1f:e3:3e:f4:8e:76:35:60:
45:60:4b:91:a7:6e:3d:98:18:cf:aa:87:c2:eb:00:
ee:d3:29:bf:01:ca:22:c7:8c:96:35:fd:28:7a:a6:
25:c9:ec:2e:b3:f3:7c:e8:c5:4a:2e:b5:92:44:a4:
c9:0c:b7:f9:7c:c8:12:82:96:52:62:b5:06:7e:3a:
79:51:fa:a5:e6:ac:d4:bd:f9:bc:91:36:f9:ac:f3:
04:b2:f1:10:bf:ae:5b:5f:20:34:ca:fb:d4:de:e1:
e4:8e:04:83:a1:6d:09:5e:ac:70:cc:fb:0f:2f:15:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E1:AD:AB:E4:F0:96:BB:16:80:C9:30:0A:76:17:06:25:12:C1:E8
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/huGtq-TwlrsWgMkwCnYXBiUSweg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.68.0-153.52.75.255
153.52.79.0/24
153.52.84.0-153.52.91.255
153.52.93.0/24
153.52.95.0-153.52.104.255
153.52.106.0-153.52.111.255
153.52.114.0/23
153.52.120.0/22
Signature Algorithm: sha256WithRSAEncryption
93:dd:81:d6:9c:9d:85:ac:55:e8:e8:f1:aa:20:d8:43:f1:5a:
bc:34:b4:51:16:a3:06:68:9e:bb:b4:05:2d:72:14:81:bc:a3:
ae:1c:1d:be:5a:49:39:bd:51:53:92:0f:6b:42:4e:5a:7a:ca:
7b:37:72:5d:76:aa:4d:fc:17:4b:52:66:88:88:94:cc:02:fd:
1a:1e:3e:38:38:35:f9:74:d2:3e:b6:32:c2:fe:6e:3d:14:2e:
d1:06:96:31:4a:11:31:34:77:bb:55:71:a4:d5:a6:1d:d5:ee:
ab:a5:c1:5e:78:af:fb:d0:86:e9:6c:9e:e3:94:3c:cd:34:2a:
2d:e0:f1:a0:d5:ae:43:51:9c:db:14:1d:73:05:ca:5e:a2:ab:
ea:58:b5:f4:37:70:22:0f:0e:09:80:7c:9c:6e:84:f1:46:3c:
8d:f9:b3:f4:22:01:b3:4c:18:9d:5c:c2:d6:d7:a0:0b:3b:91:
f9:00:ac:e1:56:72:2c:a3:44:39:fb:8e:47:3f:3b:3d:c4:73:
5b:c0:9d:44:93:35:28:ba:f9:2d:6e:30:b3:68:8e:e1:0f:af:
ed:9a:7c:01:40:c4:a2:bd:82:4b:97:c2:f6:06:d4:ff:ab:78:
4b:a0:43:bd:a1:3c:da:22:9f:61:46:b8:9d:b5:04:6d:79:4d:
8f:68:be:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:49 2026 by rpki-client