Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/1-B55FjQOvL8zo7V6UlPHVfvybr4.roa
File: 1-B55FjQOvL8zo7V6UlPHVfvybr4.roa (raw, json)
Hash identifier: TVcKjlLkk7fp4KUduHKT//GpRgEZkUFY0EE7s7Cy4jQ=
Subject key identifier: F8:1E:79:16:34:0E:BC:BF:33:A3:B5:7A:52:53:C7:55:FB:F2:6E:BE
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A14A292B6D3F6A0DA94EA497F44D0B173D
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/1-B55FjQOvL8zo7V6UlPHVfvybr4.roa
Signing time: Sat 17 Oct 2026 13:59:34 +0000
ROA not before: Sat 17 Oct 2026 13:59:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 153.52.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:29:2b:6d:3f:6a:0d:a9:4e:a4:97:f4:4d:0b:17:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 17 13:59:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f81e7916340ebcbf33a3b57a5253c755fbf26ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:65:aa:ee:74:30:6d:29:24:1c:65:98:04:
44:e6:b7:8c:11:f1:f2:95:5f:ad:ed:a3:06:36:31:
04:73:9f:a1:77:36:20:c0:79:9b:b4:0f:09:4f:ec:
d8:90:31:11:b4:1d:aa:40:f4:21:9b:9b:ae:da:34:
69:e6:b9:17:c8:46:41:ae:1b:f8:b1:98:21:94:78:
4f:b3:2b:3e:b6:0e:49:ae:85:39:45:9b:d4:bd:e5:
c5:c0:67:7b:f7:d8:b1:62:df:6a:a1:4b:ed:da:87:
9e:65:80:7a:ae:5e:16:47:0b:10:bf:78:e8:0e:ef:
af:f1:0d:e1:24:3d:4e:db:cd:b5:04:da:de:cd:06:
06:17:d9:12:ef:9d:51:ed:f9:02:fb:01:b9:21:f0:
41:6c:81:65:27:55:29:e9:88:0c:51:2a:33:e6:5b:
fa:50:b5:cc:dd:1f:02:fb:23:dd:0e:91:a0:47:34:
3e:87:51:ec:b0:99:c9:43:01:a7:16:68:c4:2e:52:
f5:7f:58:17:de:e3:ee:b7:e1:94:66:52:05:f5:66:
46:14:88:45:44:32:a2:ae:9a:23:04:55:4b:cd:7a:
4e:8d:34:fb:10:9f:0b:7c:6d:c6:37:90:ea:b4:05:
47:1c:bd:8b:04:20:49:b2:50:3f:72:ad:bf:29:c5:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:79:16:34:0E:BC:BF:33:A3:B5:7A:52:53:C7:55:FB:F2:6E:BE
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/1-B55FjQOvL8zo7V6UlPHVfvybr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c6:42:dd:96:1d:47:64:21:bc:3c:f1:be:fb:22:0e:52:99:
3f:08:5c:70:89:a9:4f:db:82:d3:5a:66:ba:66:0d:5c:06:52:
51:4a:65:06:7b:a9:30:b2:13:66:8f:7d:aa:61:5e:a0:62:e5:
f0:88:9d:3f:8b:c7:2d:6e:a5:9e:92:23:86:0d:e8:bd:52:eb:
f9:b1:c4:07:39:2e:4e:42:52:1b:19:41:94:5e:76:db:98:22:
04:6b:a9:0f:26:e3:b5:c4:d1:ea:ef:8b:d6:63:d9:c6:82:bd:
45:5e:29:cd:fb:9d:26:8a:89:d5:31:ec:9e:7c:17:68:82:18:
76:0e:3a:e9:01:9e:ad:bf:76:4c:57:7e:92:5b:e7:01:88:12:
5e:c3:a3:25:e1:24:af:2d:c8:06:b4:c6:8d:30:16:f2:bd:ea:
5b:ac:dd:4d:66:70:58:05:b2:ad:86:ce:95:29:6b:98:af:ac:
d6:3b:56:c5:dc:77:6e:b8:54:31:df:e6:c5:69:8b:26:ff:3d:
2d:f2:58:1c:2b:7a:e5:60:4a:0f:99:41:1f:b0:17:1c:f3:ed:
0e:a1:a3:37:24:94:e1:6d:40:a3:fe:e9:82:c2:9c:b8:c4:68:
09:ac:10:89:63:ad:1c:82:51:75:a4:38:93:08:68:40:bc:8e:
44:6d:bb:27
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaFKKSttP2oNqU6kl/RNCxc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYxMDE3MTM1OTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODFlNzkxNjM0MGViY2JmMzNhM2I1N2E1MjUzYzc1NWZiZjI2ZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWtlqu50MG0pJBxlmARE5reMEfHy
lV+t7aMGNjEEc5+hdzYgwHmbtA8JT+zYkDERtB2qQPQhm5uu2jRp5rkXyEZBrhv4
sZghlHhPsys+tg5JroU5RZvUveXFwGd799ixYt9qoUvt2oeeZYB6rl4WRwsQv3jo
Du+v8Q3hJD1O2821BNrezQYGF9kS751R7fkC+wG5IfBBbIFlJ1Up6YgMUSoz5lv6
ULXM3R8C+yPdDpGgRzQ+h1HssJnJQwGnFmjELlL1f1gX3uPut+GUZlIF9WZGFIhF
RDKirpojBFVLzXpOjTT7EJ8LfG3GN5DqtAVHHL2LBCBJslA/cq2/KcXD7wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgeeRY0Dry/M6O1elJTx1X78m6+MB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvMS1CNTVGalFPdkw4em83VjZVbFBIVmZ2eWJyNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzQvM2UzZDQwLTJhZTQtNDNmMy1hZTdjLWJjNTQwM2FjMmE5
NS8xL1FpT2Z1YThTaENqNFQtMmZOWWFHY1g3WmRnRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJk0QTAN
BgkqhkiG9w0BAQsFAAOCAQEAWsZC3ZYdR2QhvDzxvvsiDlKZPwhccImpT9uC01pm
umYNXAZSUUplBnupMLITZo99qmFeoGLl8IidP4vHLW6lnpIjhg3ovVLr+bHEBzku
TkJSGxlBlF5225giBGupDybjtcTR6u+L1mPZxoK9RV4pzfudJoqJ1THsnnwXaIIY
dg466QGerb92TFd+klvnAYgSXsOjJeEkry3IBrTGjTAW8r3qW6zdTWZwWAWyrYbO
lSlrmK+s1jtWxdx3brhUMd/mxWmLJv89LfJYHCt65WBKD5lBH7AXHPPtDqGjNySU
4W1Ao/7pgsKcuMRoCawQiWOtHIJRdaQ4kwhoQLyORG27Jw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:58 2026 by rpki-client