Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/1-P3l4_Zo8cQbbqGew9xt_5wR1N8.roa
File: 1-P3l4_Zo8cQbbqGew9xt_5wR1N8.roa (raw, json)
Hash identifier: deTLN7Rt0F+CpSlidIRnFT/ywhKUyo+OuNSilVGSbp0=
Subject key identifier: F8:FD:E5:E3:F6:68:F1:C4:1B:6E:A1:9E:C3:DC:6D:FF:9C:11:D4:DF
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 01992EAD71F1C89F976EB958D134C9D71717
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/1-P3l4_Zo8cQbbqGew9xt_5wR1N8.roa
Signing time: Tue 09 Sep 2025 13:32:22 +0000
ROA not before: Tue 09 Sep 2025 13:32:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.5.0/24 maxlen: 24
152.53.7.0/24 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.42.0/24 maxlen: 24
152.53.42.0/27 maxlen: 27
152.53.42.64/28 maxlen: 28
152.53.43.0/24 maxlen: 24
152.53.43.64/27 maxlen: 27
152.53.44.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.64.0/22 maxlen: 24
152.53.84.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
152.53.144.0/22 maxlen: 22
152.53.148.0/22 maxlen: 22
152.53.152.0/22 maxlen: 22
152.53.160.0/22 maxlen: 22
152.53.172.0/22 maxlen: 22
152.53.176.0/22 maxlen: 22
152.53.180.0/22 maxlen: 22
152.53.188.0/22 maxlen: 22
152.53.196.0/22 maxlen: 22
152.53.200.0/24 maxlen: 24
152.53.202.0/24 maxlen: 24
152.53.204.0/22 maxlen: 22
152.53.224.0/22 maxlen: 22
152.53.228.0/22 maxlen: 22
152.53.236.0/22 maxlen: 22
152.53.244.0/22 maxlen: 22
152.53.248.0/22 maxlen: 22
152.53.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:ad:71:f1:c8:9f:97:6e:b9:58:d1:34:c9:d7:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Sep 9 13:32:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8fde5e3f668f1c41b6ea19ec3dc6dff9c11d4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:21:93:8b:64:90:93:e9:42:fd:a9:f2:82:
2e:62:ba:96:11:b2:e6:e8:25:ef:b1:c8:05:9f:dd:
e8:97:28:6c:9a:7d:be:a9:06:e5:0f:7a:1d:b4:10:
2c:35:e0:ba:59:5a:83:ec:38:09:e4:0f:9e:35:95:
bc:a4:6a:b2:8a:99:f5:ef:62:04:a8:2a:45:cc:0a:
29:81:e4:05:c6:ac:db:f7:04:a7:42:28:b3:03:b3:
92:23:3f:9e:44:f6:dc:f6:d6:5f:3c:c8:74:2a:e3:
f2:0d:86:4e:ff:d2:08:0f:8d:43:0f:fc:d1:52:fc:
e0:65:7f:f2:9b:d3:65:eb:b4:6a:f3:3a:a5:bc:48:
b8:05:4f:7e:03:62:a2:64:62:a3:12:8c:f5:0d:67:
e1:4e:d2:90:17:68:0e:ee:76:fa:72:cd:62:64:d5:
95:0a:f1:dc:86:43:33:a7:d6:49:10:a9:7a:6a:81:
b6:64:9c:21:f8:c5:32:1c:ee:ae:c9:b3:a5:63:a3:
cc:e3:f4:0c:a8:5d:20:00:88:77:73:ec:b2:18:c8:
9d:f8:74:68:53:46:74:94:ab:e6:97:0b:ec:1d:dd:
ef:4b:33:a2:93:e5:46:90:4c:7b:f3:ff:39:4d:fd:
fc:ee:6b:05:59:8e:87:84:11:a3:18:82:d7:74:d3:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FD:E5:E3:F6:68:F1:C4:1B:6E:A1:9E:C3:DC:6D:FF:9C:11:D4:DF
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/1-P3l4_Zo8cQbbqGew9xt_5wR1N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:ce:f7:93:cc:03:c4:85:34:8a:d6:44:82:82:f1:b1:81:ef:
07:9c:b6:59:34:ce:46:ca:8c:81:eb:02:9e:83:42:d7:59:3e:
97:f2:da:07:18:b9:c6:a7:cf:71:2c:56:92:d4:fa:d0:78:d2:
5e:be:78:e5:18:d5:be:1a:b5:78:ca:8e:25:58:c6:c6:ba:a9:
3d:9f:7f:11:fb:45:6e:4d:1b:a8:c9:5e:6b:1f:22:8b:8a:06:
7f:8a:a8:21:5b:4a:97:6e:1c:ef:ff:1a:32:ba:f5:c2:6c:9b:
66:53:64:b6:b2:75:46:b0:3c:45:d2:30:f2:49:ab:95:c6:5b:
10:00:bf:30:bf:c7:d9:ce:2e:ce:c0:30:07:b1:7a:79:72:7c:
69:a2:e5:2f:88:b9:b3:2b:c6:a4:62:5a:a3:20:45:ec:f1:57:
da:81:be:fa:12:0c:8c:c7:19:46:1c:43:1d:01:c5:bf:0b:d5:
f3:7e:8c:04:00:3d:c5:fb:ed:2d:3b:15:f0:77:c5:00:ea:49:
4c:88:1f:4c:b3:97:11:51:d4:5a:fc:5a:8b:1f:5f:33:b0:6c:
23:db:92:61:e0:c0:8d:02:ec:c1:d2:a4:e2:df:b3:26:18:1a:
3e:bc:6b:aa:0f:20:20:2a:0a:83:75:06:33:e8:27:a3:27:4e:
1a:66:2e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:47:23 2025 by rpki-client