Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/4xaUPT5u4Oq6Vftwqzw1p48kbyA.roa
File: 4xaUPT5u4Oq6Vftwqzw1p48kbyA.roa (raw, json)
Hash identifier: f8/ImQO/5Dme+rN3wmBnhHH8eyvTIg6FiL4Mn9NBCFA=
Subject key identifier: E3:16:94:3D:3E:6E:E0:EA:BA:55:FB:70:AB:3C:35:A7:8F:24:6F:20
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A154D6640BAE07CAD54DC714667BE12368
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/4xaUPT5u4Oq6Vftwqzw1p48kbyA.roa
Signing time: Mon 19 Oct 2026 15:44:58 +0000
ROA not before: Mon 19 Oct 2026 15:44:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218721
IP address blocks: 153.52.95.0/24 maxlen: 24
153.52.103.0/24 maxlen: 24
163.245.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:d6:64:0b:ae:07:ca:d5:4d:c7:14:66:7b:e1:23:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 19 15:44:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e316943d3e6ee0eaba55fb70ab3c35a78f246f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:6e:df:e4:6f:59:9e:6c:65:06:02:9e:ab:
58:a4:75:3b:33:9b:69:2a:b9:cc:03:3e:71:a5:9c:
b9:ac:40:3c:cf:e5:f1:ad:75:32:c6:2b:26:05:42:
0a:bc:33:f7:a3:77:01:72:82:5d:32:d0:6a:03:92:
74:6d:53:b6:51:de:c7:bc:dc:43:41:db:59:e9:d1:
81:21:fb:39:64:0b:f9:eb:77:32:1d:40:2f:8d:dd:
bc:fd:cc:be:c1:20:91:f2:ee:4c:ef:6f:dd:54:7f:
ca:b0:da:b1:74:9e:7c:15:23:7b:e8:0a:e3:1a:a5:
68:d3:31:f4:41:a3:08:6e:08:8a:70:8b:4d:77:30:
a5:66:55:16:73:58:0d:b7:3e:e5:9d:61:1f:d9:30:
de:dd:69:ac:f2:c9:ef:d3:ac:c9:80:f5:b4:c6:f8:
39:92:09:67:36:14:8f:28:52:70:13:59:39:bc:d3:
1e:be:dc:f5:ea:4b:74:eb:0b:25:8e:19:ec:2d:bf:
c4:cf:6b:4e:99:ea:7b:eb:de:18:0f:77:5a:d1:bc:
ac:b7:39:b2:3b:92:b3:0d:14:f5:20:61:8c:f5:28:
9b:65:87:a7:ca:9b:20:2a:2c:c9:6e:a0:02:a4:52:
67:d8:36:8f:de:16:d0:c2:3d:45:b6:ab:3d:59:31:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:16:94:3D:3E:6E:E0:EA:BA:55:FB:70:AB:3C:35:A7:8F:24:6F:20
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/4xaUPT5u4Oq6Vftwqzw1p48kbyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.95.0/24
153.52.103.0/24
163.245.41.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b5:61:a0:2d:d7:f9:a2:f0:4e:71:e2:ef:5a:28:fd:89:38:
71:5d:87:05:49:74:0c:58:d9:6f:02:25:50:af:5a:97:c2:b8:
66:f2:7b:36:de:84:c3:83:c6:ab:d7:4a:d9:3d:8b:aa:7c:04:
14:2f:9a:2c:c3:3a:3e:57:70:d0:f4:50:7c:f3:5b:cb:cc:94:
d9:ab:01:1b:47:5d:38:46:1d:ca:4f:0d:e3:a8:16:85:35:b4:
ec:d6:b6:f2:53:be:76:2f:f1:db:ba:18:4e:30:d6:24:9f:be:
c6:79:20:10:ac:46:35:71:de:dd:15:ad:b7:62:ed:5a:da:5e:
5d:ab:51:ce:56:3e:52:52:ab:6e:01:6a:3a:33:35:2f:59:48:
7a:ec:4d:1e:b1:64:20:b6:67:f8:64:60:d9:98:9b:f4:2c:7e:
ce:72:d3:92:d1:4b:2c:bd:da:89:0d:3a:f1:32:c1:36:70:13:
e5:1c:30:20:6d:67:e5:54:46:59:36:35:48:c5:81:55:81:19:
fa:94:5c:a4:d3:63:d1:37:06:c7:ba:47:d2:3b:8e:3e:3a:8a:
b8:59:dd:91:36:3b:14:5a:38:54:d9:16:cd:d5:48:10:9f:ae:
59:18:90:2b:23:b1:fb:1d:3a:7b:b1:0b:81:f9:de:d9:a1:c9:
12:fd:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:53 2026 by rpki-client