Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/PR33T4YXjO-tZqAZiQgeGwJ_Ca0.roa
File: PR33T4YXjO-tZqAZiQgeGwJ_Ca0.roa (raw, json)
Hash identifier: oPbU4Y8mKlBiefAqAJRo4HbwcVF9Ad3zQ3/NkA85j/Q=
Subject key identifier: 3D:1D:F7:4F:86:17:8C:EF:AD:66:A0:19:89:08:1E:1B:02:7F:09:AD
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 019F2384A5C33B060F01BE14547C813C3DF8
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/PR33T4YXjO-tZqAZiQgeGwJ_Ca0.roa
Signing time: Thu 02 Jul 2026 15:48:43 +0000
ROA not before: Thu 02 Jul 2026 15:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262287
IP address blocks: 152.236.10.0/24 maxlen: 24
152.236.13.0/24 maxlen: 24
152.236.19.0/24 maxlen: 24
152.236.22.0/24 maxlen: 24
152.236.23.0/24 maxlen: 24
152.236.29.0/24 maxlen: 24
152.236.32.0/24 maxlen: 24
152.236.34.0/24 maxlen: 24
152.236.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:84:a5:c3:3b:06:0f:01:be:14:54:7c:81:3c:3d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Jul 2 15:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d1df74f86178cefad66a01989081e1b027f09ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:f8:fe:3a:05:dd:f9:ff:75:73:fc:76:66:
fa:bb:2e:1d:93:a3:06:a4:b5:b5:3b:fa:41:c2:1d:
93:fa:29:51:ae:02:25:8d:c3:06:2d:0e:62:c1:d2:
ba:d8:a0:4c:33:42:d7:df:cd:38:ee:8c:f9:b6:5f:
6d:93:a2:b3:55:e0:c1:84:e9:83:f0:e4:7c:78:9b:
a1:5b:09:de:c0:b2:67:fd:86:a0:75:0a:40:4a:24:
da:9e:a6:0e:de:f1:50:8c:81:70:7d:01:26:3d:e1:
d4:d0:7e:a2:84:60:b9:38:09:16:fc:0e:56:a4:e1:
9a:4e:a6:c1:cf:90:75:34:ab:c9:2b:01:f9:bb:4b:
eb:59:a4:48:45:ed:7d:5a:6e:7f:d8:02:08:b7:2b:
7d:d9:0a:33:93:0b:f3:81:06:a5:1e:f5:e5:cd:5b:
e3:dd:8c:4e:3c:23:6c:70:e7:0e:c9:fb:6e:13:60:
d3:4c:ed:c2:6c:0c:75:0f:e8:79:41:71:49:e2:de:
83:39:03:de:0f:78:9f:86:8a:76:49:42:5b:07:d3:
0f:fc:d0:26:42:93:d6:2e:a2:e8:40:15:d6:1f:d2:
be:4d:0e:e7:35:ff:64:6d:c2:0c:c0:d4:55:0e:4c:
27:63:bd:be:00:f2:6c:17:83:f6:77:4d:0f:77:e4:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1D:F7:4F:86:17:8C:EF:AD:66:A0:19:89:08:1E:1B:02:7F:09:AD
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/PR33T4YXjO-tZqAZiQgeGwJ_Ca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.236.10.0/24
152.236.13.0/24
152.236.19.0/24
152.236.22.0/23
152.236.29.0/24
152.236.32.0/24
152.236.34.0/24
152.236.36.0/23
Signature Algorithm: sha256WithRSAEncryption
80:ed:fe:33:bd:99:eb:64:ab:83:48:55:b4:15:6e:ab:bd:87:
99:13:38:8b:0d:cb:e8:b5:d0:fb:d8:a4:b3:3b:8a:f9:9d:63:
c8:a8:3a:fa:5a:0a:c5:0e:8c:82:fb:15:4c:88:bf:4a:79:1e:
27:a5:00:c7:07:1c:59:ba:05:68:6e:99:e1:b4:9f:da:04:a8:
b6:21:eb:15:a4:e1:64:2d:ad:a4:a7:2c:b7:6e:09:c3:77:90:
7a:48:aa:24:d8:8e:c1:43:54:ea:1a:39:84:88:cc:cd:ac:af:
91:66:03:e6:56:b3:1f:59:1f:44:99:3c:e4:c0:0e:ff:d9:47:
64:4c:6b:19:24:9b:b0:46:8a:bd:b4:06:c5:a3:fe:c5:00:fb:
70:3b:5a:6d:47:2a:ed:dd:d3:00:2f:73:97:37:03:d7:b1:88:
58:08:b0:c1:16:4a:00:d1:84:c5:29:13:9b:11:4b:e2:97:25:
4e:80:39:e8:16:cd:ca:6a:be:31:50:fd:25:7b:83:19:0d:55:
e5:81:9b:b6:6c:2d:14:84:fe:71:19:e3:a4:6d:bc:7a:91:e4:
7a:4f:e8:45:b4:6d:a5:e9:bc:56:99:a3:e6:2c:b5:8f:52:c4:
9a:c2:90:05:97:5a:94:f1:5f:f1:f8:17:e1:88:60:ed:de:42:
75:e4:92:fc
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ8jhKXDOwYPAb4UVHyBPD34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODgzYTc5Nzg5ZDlmNjU4MTUyOTJmMThkNDk4MGJhOWM1
ZWQyMjEwHhcNMjYwNzAyMTU0ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDFkZjc0Zjg2MTc4Y2VmYWQ2NmEwMTk4OTA4MWUxYjAyN2YwOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso74/joF3fn/dXP8dmb6uy4dk6MG
pLW1O/pBwh2T+ilRrgIljcMGLQ5iwdK62KBMM0LX38047oz5tl9tk6KzVeDBhOmD
8OR8eJuhWwnewLJn/YagdQpASiTanqYO3vFQjIFwfQEmPeHU0H6ihGC5OAkW/A5W
pOGaTqbBz5B1NKvJKwH5u0vrWaRIRe19Wm5/2AIItyt92QozkwvzgQalHvXlzVvj
3YxOPCNscOcOyftuE2DTTO3CbAx1D+h5QXFJ4t6DOQPeD3ifhop2SUJbB9MP/NAm
QpPWLqLoQBXWH9K+TQ7nNf9kbcIMwNRVDkwnY72+APJsF4P2d00Pd+Tw/wIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFD0d90+GF4zvrWagGYkIHhsCfwmtMB8GA1UdIwQY
MBaAFGOIOnl4nZ9lgVKS8Y1JgLqcXtIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYt
MzVkMDU5NWUxMmYwLzEvUFIzM1Q0WVhqTy10WnFBWmlRZ2VHd0pfQ2EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYtMzVkMDU5NWUxMmYw
LzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAmOwKAwQA
mOwNAwQAmOwTAwQBmOwWAwQAmOwdAwQAmOwgAwQAmOwiAwQBmOwkMA0GCSqGSIb3
DQEBCwUAA4IBAQCA7f4zvZnrZKuDSFW0FW6rvYeZEziLDcvotdD72KSzO4r5nWPI
qDr6WgrFDoyC+xVMiL9KeR4npQDHBxxZugVobpnhtJ/aBKi2IesVpOFkLa2kpyy3
bgnDd5B6SKok2I7BQ1TqGjmEiMzNrK+RZgPmVrMfWR9EmTzkwA7/2UdkTGsZJJuw
Roq9tAbFo/7FAPtwO1ptRyrt3dMAL3OXNwPXsYhYCLDBFkoA0YTFKRObEUvilyVO
gDnoFs3Kar4xUP0le4MZDVXlgZu2bC0UhP5xGeOkbbx6keR6T+hFtG2l6bxWmaPm
LLWPUsSawpAFl1qU8V/x+BfhiGDt3kJ15JL8
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:50:18 2026 by rpki-client