Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/jY3UCSn5SIqE6D7R33WIRi-Qpnc.roa
File: jY3UCSn5SIqE6D7R33WIRi-Qpnc.roa (raw, json)
Hash identifier: P4ee7fsjy47kxDvjwPwpXo+ufHLr43WngBeFPsDCjZc=
Subject key identifier: 8D:8D:D4:09:29:F9:48:8A:84:E8:3E:D1:DF:75:88:46:2F:90:A6:77
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019FC13AABA5E991D8BE44FEC5098B5C6465
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/jY3UCSn5SIqE6D7R33WIRi-Qpnc.roa
Signing time: Sun 02 Aug 2026 06:47:55 +0000
ROA not before: Sun 02 Aug 2026 06:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209554
IP address blocks: 152.175.1.0/24 maxlen: 24
152.175.2.0/24 maxlen: 24
152.175.4.0/22 maxlen: 24
152.175.8.0/22 maxlen: 24
152.175.12.0/22 maxlen: 24
152.175.16.0/22 maxlen: 24
152.175.33.0/24 maxlen: 24
152.175.34.0/24 maxlen: 24
152.175.65.0/24 maxlen: 24
152.175.66.0/24 maxlen: 24
152.175.97.0/24 maxlen: 24
2a0b:1187::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c1:3a:ab:a5:e9:91:d8:be:44:fe:c5:09:8b:5c:64:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Aug 2 06:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d8dd40929f9488a84e83ed1df7588462f90a677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:d9:6c:f4:86:f8:ca:d6:47:8f:53:59:9e:
68:39:1e:4c:b6:9a:f6:3a:22:ec:72:e7:69:6c:66:
ab:d4:60:7e:35:7a:ca:16:e7:ff:19:30:9a:b5:2e:
7a:ba:a3:c7:e2:fa:a8:60:de:ee:c8:e9:ad:e1:3b:
e2:36:a9:d5:4e:47:4f:b1:f4:be:be:ce:1f:70:7c:
12:8c:da:7f:8f:e5:e0:e2:f9:a1:89:d7:65:7f:ed:
c3:93:a1:22:c8:9f:70:db:c2:91:4a:fb:0a:e7:6d:
b2:39:ac:d8:4e:b0:98:e3:f8:8d:7d:4a:78:8b:73:
93:ec:47:f6:4c:bc:19:82:fd:3e:3d:fc:07:cc:b5:
0c:8c:69:5e:b4:37:b2:b9:05:d5:bd:1f:aa:01:86:
83:11:58:a9:a6:84:9d:66:a8:91:a9:23:6b:c5:f2:
48:e3:d2:e3:41:e1:e7:05:1b:78:a4:67:2c:e0:21:
06:b7:58:ab:1d:2b:8b:ff:da:d4:d4:bd:51:61:9b:
64:23:1e:37:46:69:03:a8:2a:89:ba:93:9a:63:b7:
af:26:65:f8:cd:cf:ea:36:71:16:ec:8f:b5:eb:65:
3f:9a:e4:3b:16:ea:0e:96:53:63:22:82:64:fa:0f:
f6:3d:25:16:dd:2e:f9:0b:6d:b1:13:1b:89:ca:c7:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8D:D4:09:29:F9:48:8A:84:E8:3E:D1:DF:75:88:46:2F:90:A6:77
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/jY3UCSn5SIqE6D7R33WIRi-Qpnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.1.0-152.175.2.255
152.175.4.0-152.175.19.255
152.175.33.0-152.175.34.255
152.175.65.0-152.175.66.255
152.175.97.0/24
IPv6:
2a0b:1187::/32
Signature Algorithm: sha256WithRSAEncryption
17:b1:f7:58:54:b3:b3:42:37:22:3a:27:5f:4d:b4:87:6b:3d:
a7:2a:45:93:ba:3f:10:29:70:c6:af:2d:2f:dc:8b:6b:df:68:
ce:a8:0b:26:80:ea:bd:bf:b5:67:a8:bc:da:86:e2:f8:62:0c:
b3:39:8a:9d:64:80:c4:9f:65:a7:a2:ad:ef:74:3f:05:d6:26:
99:a8:ea:3c:3a:35:90:78:83:db:77:c9:bd:33:aa:8b:c4:9f:
19:ab:9f:a5:3b:d9:ea:13:31:3a:e9:ef:2e:b3:c9:5d:42:84:
58:65:b9:3d:a7:b8:0e:d6:d4:9f:67:b0:6b:97:e4:8e:55:97:
aa:a5:80:6e:7c:2f:f5:4a:bc:83:fb:c2:2b:fd:11:52:f4:bc:
7e:86:77:fb:dd:fd:ae:ec:4b:8c:eb:9c:fe:36:9e:df:a8:2b:
04:98:d1:1b:ce:d2:f7:67:e4:1e:56:3c:75:44:6b:fe:9c:03:
ba:98:54:82:f4:59:c1:18:fa:60:31:68:b1:67:a9:62:96:a7:
95:1f:a6:10:2e:34:cc:3c:15:78:08:81:53:06:bb:38:e1:b0:
b2:7b:4c:a4:56:91:ef:3b:32:6c:ff:73:c5:10:87:67:60:8e:
17:ac:de:e1:58:f1:fa:c1:a5:e5:69:da:4b:bf:c5:c2:75:a1:
40:b7:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:22:54 2026 by rpki-client