Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/1-VKebJ6-QHE8J6bBnka06nsEKrk.roa
File: 1-VKebJ6-QHE8J6bBnka06nsEKrk.roa (raw, json)
Hash identifier: ZITsMCXMR1Z2BEaqVh0MX6r/bVT+fA6ggF9urUQBDIY=
Subject key identifier: F9:52:9E:6C:9E:BE:40:71:3C:27:A6:C1:9E:46:B4:EA:7B:04:2A:B9
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 019EAC63074ED19E68689381C90035E0EE76
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/1-VKebJ6-QHE8J6bBnka06nsEKrk.roa
Signing time: Tue 09 Jun 2026 12:37:11 +0000
ROA not before: Tue 09 Jun 2026 12:37:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19750
IP address blocks: 152.53.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:63:07:4e:d1:9e:68:68:93:81:c9:00:35:e0:ee:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Jun 9 12:37:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9529e6c9ebe40713c27a6c19e46b4ea7b042ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:37:e5:2a:35:3b:1b:05:1c:4a:5c:36:fb:
6b:82:58:cd:f8:0d:18:1b:dd:bb:2c:70:06:76:56:
2a:55:34:63:ea:30:d6:77:60:59:3c:63:74:9f:bd:
2d:50:02:e0:b0:85:bc:91:0e:d5:0f:20:ca:fd:54:
d2:46:90:34:cb:c3:c8:d7:9b:ca:d8:68:37:a8:3e:
3f:2a:70:91:f8:61:0f:fc:0b:50:ab:5f:8a:7c:9c:
06:6b:d5:a8:80:74:80:4c:4d:52:53:e2:8b:b5:cb:
55:2a:4c:c5:f6:1d:2d:f5:03:c0:36:80:0d:1d:0b:
23:91:e6:35:cc:70:64:3c:48:42:46:09:68:bb:5d:
a1:38:6c:6d:d3:bf:f5:f8:21:86:58:36:4d:87:f6:
59:bf:4a:f0:1e:71:fa:87:de:33:76:d1:cc:f6:b7:
5c:15:55:df:69:45:34:56:c6:a3:98:c4:e6:5a:b3:
64:97:92:a6:65:77:02:ca:bf:85:b9:fc:c7:f4:02:
5a:64:9c:04:4e:90:a2:06:c1:76:21:85:94:15:a7:
5f:da:91:f2:e5:37:8d:64:89:2c:58:c3:ea:11:b7:
aa:61:c0:9f:0c:a1:3d:fd:25:29:ec:5b:69:19:3a:
ad:4a:d1:37:08:c8:e9:b9:5e:ea:ff:58:ee:34:c3:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:9E:6C:9E:BE:40:71:3C:27:A6:C1:9E:46:B4:EA:7B:04:2A:B9
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/1-VKebJ6-QHE8J6bBnka06nsEKrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.68.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d9:c2:1c:8c:9c:8d:89:22:23:a9:18:2a:5f:20:0f:86:a4:
69:6e:ba:cd:17:f7:94:75:92:1d:32:e0:d8:de:42:1d:36:07:
75:31:aa:d7:d1:64:39:10:7c:da:bc:1c:d0:27:84:46:75:fb:
d4:d0:78:40:89:43:bb:b4:e3:ae:34:8a:e7:f4:0e:cc:bf:7b:
50:a7:c9:b0:9b:df:4b:ac:41:21:f4:6f:7d:d7:e3:af:40:ce:
cf:5b:53:2d:50:a9:ce:7b:29:63:1d:ac:9f:f6:0d:dd:ac:89:
57:e0:1c:a9:6b:05:61:01:23:61:36:d1:e5:9e:df:92:80:23:
85:91:2f:ae:f6:23:eb:66:69:28:32:42:9c:02:8e:96:b4:1c:
06:f6:2c:96:90:46:78:16:78:90:a9:8b:e5:91:c2:81:29:a4:
c3:1a:07:eb:6b:9b:17:e9:a2:e9:cf:bc:99:2e:ef:88:50:eb:
73:0d:ca:d7:17:03:c0:47:e9:21:4f:67:02:95:82:e7:85:0b:
3e:bc:be:dd:86:dd:9b:9d:a4:41:66:ea:b9:4c:21:60:9a:6b:
c7:d7:d9:f5:8f:24:02:6e:5c:d8:81:a0:db:88:32:a0:08:11:
85:1a:ef:e6:52:ae:ee:b5:2a:26:94:5f:af:af:7a:46:d9:48:
fc:68:9c:3c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ6sYwdO0Z5oaJOByQA14O52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0
MjVmMGUwHhcNMjYwNjA5MTIzNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTUyOWU2YzllYmU0MDcxM2MyN2E2YzE5ZTQ2YjRlYTdiMDQyYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6c35So1OxsFHEpcNvtrgljN+A0Y
G927LHAGdlYqVTRj6jDWd2BZPGN0n70tUALgsIW8kQ7VDyDK/VTSRpA0y8PI15vK
2Gg3qD4/KnCR+GEP/AtQq1+KfJwGa9WogHSATE1SU+KLtctVKkzF9h0t9QPANoAN
HQsjkeY1zHBkPEhCRglou12hOGxt07/1+CGGWDZNh/ZZv0rwHnH6h94zdtHM9rdc
FVXfaUU0VsajmMTmWrNkl5KmZXcCyr+FufzH9AJaZJwETpCiBsF2IYWUFadf2pHy
5TeNZIksWMPqEbeqYcCfDKE9/SUp7FtpGTqtStE3CMjpuV7q/1juNMPcVQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPlSnmyevkBxPCemwZ5GtOp7BCq5MB8GA1UdIwQY
MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt
N2RiNjg2OGQ4NDc0LzEvMS1WS2ViSjYtUUhFOEo2YkJua2EwNm5zRUtyay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODAvNzMwZmM1LTczMDEtNGE2MC04NmQxLTdkYjY4NjhkODQ3
NC8xLzBBczN0dlMwUldSZWFaT3B4ZXhnaEpKQ1h3NC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJg1RDAN
BgkqhkiG9w0BAQsFAAOCAQEAVdnCHIycjYkiI6kYKl8gD4akaW66zRf3lHWSHTLg
2N5CHTYHdTGq19FkORB82rwc0CeERnX71NB4QIlDu7TjrjSK5/QOzL97UKfJsJvf
S6xBIfRvfdfjr0DOz1tTLVCpznspYx2sn/YN3ayJV+AcqWsFYQEjYTbR5Z7fkoAj
hZEvrvYj62ZpKDJCnAKOlrQcBvYslpBGeBZ4kKmL5ZHCgSmkwxoH62ubF+mi6c+8
mS7viFDrcw3K1xcDwEfpIU9nApWC54ULPry+3Ybdm52kQWbquUwhYJprx9fZ9Y8k
Am5c2IGg24gyoAgRhRrv5lKu7rUqJpRfr696RtlI/GicPA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:40 2026 by rpki-client