Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/pMhmiprhheozwfK0l1AxiwQmSdE.roa
File: pMhmiprhheozwfK0l1AxiwQmSdE.roa (raw, json)
Hash identifier: 5eo/nYNZUCP3L072cX5mds7XbPsmQJEoTT02n9QBDe0=
Subject key identifier: A4:C8:66:8A:9A:E1:85:EA:33:C1:F2:B4:97:50:31:8B:04:26:49:D1
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 019E8B1FF224CC7C9D66E0E9BCD43FCA0E79
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/pMhmiprhheozwfK0l1AxiwQmSdE.roa
Signing time: Wed 03 Jun 2026 01:36:27 +0000
ROA not before: Wed 03 Jun 2026 01:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262287
IP address blocks: 152.236.10.0/24 maxlen: 24
152.236.13.0/24 maxlen: 24
152.236.22.0/24 maxlen: 24
152.236.23.0/24 maxlen: 24
152.236.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8b:1f:f2:24:cc:7c:9d:66:e0:e9:bc:d4:3f:ca:0e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Jun 3 01:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4c8668a9ae185ea33c1f2b49750318b042649d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:c6:5d:6f:f7:36:6b:f9:b1:f4:58:8e:21:
a8:cc:c7:35:79:e4:c5:2a:40:4d:2f:17:8f:ec:6b:
5b:03:bf:cb:f9:1f:58:bf:2b:74:38:e0:5b:c0:be:
f8:b4:09:06:da:33:8d:40:11:a3:16:9d:ea:e8:20:
5c:f6:71:95:3a:3c:e2:5f:2f:50:3d:54:ee:18:c3:
ed:10:7a:c2:68:68:40:b7:10:20:b4:dc:8a:ad:cb:
65:a9:2e:e2:ff:75:5a:be:47:20:0f:62:e0:20:c5:
bf:5d:6c:9c:8d:29:c3:8b:26:e0:eb:63:54:a5:2f:
78:b0:6b:1d:32:ee:07:2a:8b:23:3e:38:ca:f1:8f:
85:6d:fc:b2:1c:b0:c0:ff:51:eb:3f:c3:df:cb:ab:
63:09:e4:4e:13:b3:26:3b:ae:52:da:49:b6:1d:af:
b8:ef:f3:c0:22:eb:02:9a:cb:83:b8:0b:46:8b:92:
c8:25:2d:fc:25:31:d5:c0:96:cd:22:30:ae:89:a7:
29:ec:e7:bd:20:dc:23:91:30:60:c3:1b:fa:63:c5:
43:7a:0e:45:9e:c0:eb:bf:af:a7:a0:7e:74:c0:7f:
9e:bf:25:4b:3f:33:03:da:ea:e2:2b:55:f4:63:77:
a0:7f:92:f8:69:74:dc:c5:ff:2a:77:4c:23:f3:f3:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C8:66:8A:9A:E1:85:EA:33:C1:F2:B4:97:50:31:8B:04:26:49:D1
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/pMhmiprhheozwfK0l1AxiwQmSdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.236.10.0/24
152.236.13.0/24
152.236.22.0/23
152.236.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bb:7d:fa:c2:d5:9a:4b:d4:4d:e2:81:bd:e8:0e:28:48:8d:
7e:55:68:ea:91:81:b6:41:d8:c7:1d:d6:16:06:ff:16:66:9e:
f1:97:9a:c5:a5:83:04:b4:79:f2:0e:7a:49:2e:b4:68:e9:40:
e4:5d:35:9d:fd:19:e9:ab:bf:70:f4:a3:22:33:2e:d6:93:e4:
58:c5:57:2a:92:aa:a8:c7:d7:77:96:28:9e:31:70:04:00:0f:
c0:72:19:00:e8:64:09:3f:e3:d7:82:a1:b5:17:26:0e:f1:fe:
16:e9:4b:89:19:c1:3d:7f:8e:77:95:2d:68:01:d6:51:08:5a:
9e:10:38:59:ce:5f:b7:6c:e6:d5:92:a4:6e:38:d3:7e:40:f7:
57:6e:80:b1:cd:37:98:78:cb:82:49:3e:af:33:d2:d2:9c:3c:
7f:62:0b:f9:4b:fb:a6:70:d5:d7:f7:58:20:d1:74:01:f6:67:
bb:3a:21:e9:3c:75:b7:4c:fb:71:6a:58:fa:4f:4e:c1:e9:e4:
34:30:43:11:ee:0e:a2:16:ca:73:67:ac:51:43:f4:21:34:53:
0b:32:92:1f:a2:42:60:11:87:d0:33:ee:05:7f:93:7e:17:61:
8d:00:27:e4:50:0a:bb:8f:62:5a:f5:22:a6:30:2b:7d:f6:d3:
5b:f9:84:57
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ6LH/IkzHydZuDpvNQ/yg55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODgzYTc5Nzg5ZDlmNjU4MTUyOTJmMThkNDk4MGJhOWM1
ZWQyMjEwHhcNMjYwNjAzMDEzNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGM4NjY4YTlhZTE4NWVhMzNjMWYyYjQ5NzUwMzE4YjA0MjY0OWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRvGXW/3Nmv5sfRYjiGozMc1eeTF
KkBNLxeP7GtbA7/L+R9Yvyt0OOBbwL74tAkG2jONQBGjFp3q6CBc9nGVOjziXy9Q
PVTuGMPtEHrCaGhAtxAgtNyKrctlqS7i/3VavkcgD2LgIMW/XWycjSnDiybg62NU
pS94sGsdMu4HKosjPjjK8Y+FbfyyHLDA/1HrP8Pfy6tjCeROE7MmO65S2km2Ha+4
7/PAIusCmsuDuAtGi5LIJS38JTHVwJbNIjCuiacp7Oe9INwjkTBgwxv6Y8VDeg5F
nsDrv6+noH50wH+evyVLPzMD2uriK1X0Y3egf5L4aXTcxf8qd0wj8/P1NQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKTIZoqa4YXqM8HytJdQMYsEJknRMB8GA1UdIwQY
MBaAFGOIOnl4nZ9lgVKS8Y1JgLqcXtIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYt
MzVkMDU5NWUxMmYwLzEvcE1obWlwcmhoZW96d2ZLMGwxQXhpd1FtU2RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYtMzVkMDU5NWUxMmYw
LzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmOwKAwQA
mOwNAwQBmOwWAwQAmOwdMA0GCSqGSIb3DQEBCwUAA4IBAQAeu336wtWaS9RN4oG9
6A4oSI1+VWjqkYG2QdjHHdYWBv8WZp7xl5rFpYMEtHnyDnpJLrRo6UDkXTWd/Rnp
q79w9KMiMy7Wk+RYxVcqkqqox9d3liieMXAEAA/AchkA6GQJP+PXgqG1FyYO8f4W
6UuJGcE9f453lS1oAdZRCFqeEDhZzl+3bObVkqRuONN+QPdXboCxzTeYeMuCST6v
M9LSnDx/Ygv5S/umcNXX91gg0XQB9me7OiHpPHW3TPtxalj6T07B6eQ0MEMR7g6i
FspzZ6xRQ/QhNFMLMpIfokJgEYfQM+4Ff5N+F2GNACfkUAq7j2Ja9SKmMCt99tNb
+YRX
-----END CERTIFICATE-----
Generated at Thu Jun 4 03:19:44 2026 by rpki-client