Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/dwIdTGaV-nWLGk9zk-qVYMG1tPg.roa
File: dwIdTGaV-nWLGk9zk-qVYMG1tPg.roa (raw, json)
Hash identifier: 15WVxS/3NN0VxJlyxqgdrez6Nm2fY569l0rwn2h+CQY=
Subject key identifier: 77:02:1D:4C:66:95:FA:75:8B:1A:4F:73:93:EA:95:60:C1:B5:B4:F8
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A081CDC2D57169FBBD65753D96EE5716B2
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/dwIdTGaV-nWLGk9zk-qVYMG1tPg.roa
Signing time: Tue 08 Sep 2026 16:15:40 +0000
ROA not before: Tue 08 Sep 2026 16:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 264628
IP address blocks: 153.51.224.0/20 maxlen: 20
153.51.224.0/21 maxlen: 21
153.51.224.0/22 maxlen: 22
153.51.224.0/23 maxlen: 23
153.51.224.0/24 maxlen: 24
153.51.225.0/24 maxlen: 24
153.51.226.0/23 maxlen: 23
153.51.226.0/24 maxlen: 24
153.51.227.0/24 maxlen: 24
153.51.228.0/22 maxlen: 22
153.51.228.0/23 maxlen: 23
153.51.228.0/24 maxlen: 24
153.51.229.0/24 maxlen: 24
153.51.230.0/23 maxlen: 23
153.51.230.0/24 maxlen: 24
153.51.231.0/24 maxlen: 24
153.51.232.0/21 maxlen: 21
153.51.232.0/22 maxlen: 22
153.51.232.0/23 maxlen: 23
153.51.232.0/24 maxlen: 24
153.51.233.0/24 maxlen: 24
153.51.234.0/23 maxlen: 23
153.51.234.0/24 maxlen: 24
153.51.235.0/24 maxlen: 24
153.51.236.0/22 maxlen: 22
153.51.236.0/23 maxlen: 23
153.51.236.0/24 maxlen: 24
153.51.237.0/24 maxlen: 24
153.51.238.0/23 maxlen: 23
153.51.238.0/24 maxlen: 24
153.51.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:cd:c2:d5:71:69:fb:bd:65:75:3d:96:ee:57:16:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 8 16:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77021d4c6695fa758b1a4f7393ea9560c1b5b4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:42:ac:cc:89:bf:69:79:c2:fa:64:d5:35:ef:
34:1e:bb:96:9e:ad:5d:06:4b:e4:34:c5:88:22:e0:
4a:bc:9b:23:1e:64:89:4e:62:32:e6:e4:23:93:30:
fc:91:8d:f5:e9:4f:48:b5:c3:22:73:9f:2a:e9:a9:
b5:32:bb:07:d9:95:24:d3:86:af:4d:37:3d:ea:6c:
ef:1a:b8:12:48:ed:c2:4c:a6:2a:6a:83:e2:e9:04:
7e:95:75:83:19:e0:eb:e3:02:51:39:97:18:0c:d9:
41:1c:c8:c0:df:ac:76:b8:fc:f6:24:59:2a:2b:a5:
02:fb:30:fc:32:80:87:53:e4:90:8a:26:d4:05:f7:
48:0d:1b:70:d5:6b:53:aa:3b:d2:0e:d9:c6:50:0b:
55:ee:1a:43:21:08:20:b8:c2:8e:82:c9:f9:39:82:
15:81:84:ed:b5:87:6f:31:2a:a6:5c:6c:9f:ed:70:
49:e9:ee:76:67:64:88:ec:16:5a:ef:a3:46:23:c4:
8f:a8:a8:cd:dd:e2:a3:b0:4b:d1:1e:88:74:c6:0d:
67:4d:e5:0b:5f:ea:e6:0d:ce:cf:02:94:c1:c0:00:
18:5a:20:6d:a1:fa:40:af:07:02:44:a9:96:58:8b:
28:ce:1f:96:fb:a0:ca:7e:5d:23:ec:d5:5a:88:1b:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:02:1D:4C:66:95:FA:75:8B:1A:4F:73:93:EA:95:60:C1:B5:B4:F8
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/dwIdTGaV-nWLGk9zk-qVYMG1tPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.224.0/20
Signature Algorithm: sha256WithRSAEncryption
86:e7:a8:19:5e:a8:f6:d4:0d:0d:f0:79:47:d5:c4:69:2e:91:
fc:3c:60:d9:cd:06:ae:af:cf:25:12:5f:c2:55:3a:9d:e6:2a:
6b:d9:70:31:0e:ab:1a:72:50:7d:fa:67:c7:e8:66:a0:86:a3:
bd:64:59:60:fa:aa:1d:87:04:6f:f2:90:fa:6c:4d:00:60:75:
b2:b7:44:60:7e:d1:0f:39:3f:c4:bd:8f:83:88:6a:b1:48:0f:
49:2b:da:2b:ad:43:69:5b:8c:8b:35:a0:3e:07:aa:89:92:2f:
f6:6e:5c:d2:40:b9:a2:11:6a:49:f7:d0:bb:b2:5d:da:6a:2a:
8c:91:d6:cb:ec:75:40:d7:83:a2:0a:88:2a:34:58:0d:9e:d3:
1a:18:32:f0:e0:fc:d0:aa:c5:09:2a:26:8a:0f:a1:c3:c4:76:
ed:f7:89:a1:98:69:b8:8b:87:2a:b4:8a:83:bd:43:f1:98:68:
0d:17:c6:fd:08:03:5e:4e:30:cb:86:c2:b4:d6:7a:22:f9:b0:
5e:8a:05:ed:fe:6a:2b:87:fa:52:0a:2e:71:80:ad:51:96:1f:
bf:27:ec:ad:5b:37:54:98:4b:47:c3:ed:19:b9:aa:7e:06:4d:
9b:fc:17:e2:ab:46:13:0e:fe:a7:a9:e0:00:43:bf:41:82:cd:
57:a2:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 14:27:05 2026 by rpki-client