Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/6TUfKf58-fN3KW6nFQaWxOIahkk.roa
File: 6TUfKf58-fN3KW6nFQaWxOIahkk.roa (raw, json)
Hash identifier: Injv2UTFg7753D1JJEsNCvzvfoWnxa9Oum31XMc7Pxg=
Subject key identifier: E9:35:1F:29:FE:7C:F9:F3:77:29:6E:A7:15:06:96:C4:E2:1A:86:49
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0ECDF158C91322CF50C0565C9B1828E82
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/6TUfKf58-fN3KW6nFQaWxOIahkk.roa
Signing time: Tue 29 Sep 2026 11:13:58 +0000
ROA not before: Tue 29 Sep 2026 11:13:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210654
IP address blocks: 153.76.144.0/23 maxlen: 23
153.76.146.0/23 maxlen: 23
153.76.148.0/23 maxlen: 23
153.76.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:df:15:8c:91:32:2c:f5:0c:05:65:c9:b1:82:8e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 29 11:13:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9351f29fe7cf9f377296ea7150696c4e21a8649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:50:76:56:91:86:6d:e1:75:5a:49:50:e5:78:
ce:9c:d7:c7:43:3a:e2:14:9d:3e:4c:de:4d:4e:c0:
68:34:a2:ad:ad:74:97:6e:53:b0:4f:a7:62:14:80:
7e:7a:cb:60:61:bb:02:33:38:77:4e:95:76:10:14:
d5:25:a5:87:a7:44:08:fd:04:5f:12:98:ea:f6:8c:
61:f8:31:8a:7f:d5:ff:34:53:7d:57:26:5e:78:83:
21:3c:f0:25:9e:54:ce:09:39:bf:0f:17:33:b2:f8:
14:e9:6a:63:13:f8:79:86:b7:18:e3:09:a8:25:fa:
25:54:7e:74:30:a5:db:e7:27:75:87:55:d3:4c:68:
31:da:69:cc:a8:a7:33:b5:b5:32:e3:b5:66:82:73:
c9:3e:e4:1a:13:51:82:86:d1:db:34:6b:fa:22:f0:
93:2e:9a:b6:f9:47:ee:93:a2:f5:99:6a:9e:ff:3d:
6b:56:ae:28:17:31:21:01:71:33:a7:e1:ad:1d:13:
f4:ff:33:b4:aa:dd:ee:69:4e:1b:de:4b:15:2a:62:
ed:32:51:5c:4c:28:07:d5:97:e0:c8:0d:dd:7a:3c:
e5:77:3e:56:e3:37:a3:73:34:94:a5:a6:aa:e5:f3:
46:01:c7:93:90:6d:cd:31:e5:55:02:90:1f:df:6f:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:35:1F:29:FE:7C:F9:F3:77:29:6E:A7:15:06:96:C4:E2:1A:86:49
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/6TUfKf58-fN3KW6nFQaWxOIahkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.144.0/21
Signature Algorithm: sha256WithRSAEncryption
48:ce:e8:e7:64:da:21:b4:18:40:0d:ae:e5:d0:2f:d2:aa:6f:
24:ad:54:7f:58:b8:92:6c:41:86:65:78:01:7e:0c:f9:29:0f:
dd:40:0d:ea:f1:11:52:38:22:63:9e:5f:50:90:6b:8d:19:22:
97:ef:80:68:7e:32:d1:ad:61:b8:db:d3:c4:07:d2:e1:64:46:
44:f5:28:da:dd:66:94:c7:48:9a:4f:c1:4b:c0:f3:3c:76:2a:
7e:2b:cb:16:cf:01:26:d2:56:55:7a:42:ed:d7:d0:53:0e:ce:
3d:70:e8:a4:43:49:74:34:d9:30:7c:02:03:ba:7d:67:87:d6:
0a:8d:9c:78:80:d8:81:b4:b1:f3:85:03:ee:b8:90:b8:cc:f8:
88:a9:dd:8c:2a:51:77:81:42:9a:74:cc:b6:aa:d2:61:a1:db:
94:d4:ad:2e:58:04:00:b4:74:5a:23:59:0c:a2:f2:7b:2c:c3:
c3:b4:d5:5b:11:6d:79:2c:b4:44:fb:d1:9d:04:e6:b5:ac:8f:
9d:1c:42:09:45:05:3c:da:c0:3b:55:d8:1e:81:55:ac:b5:9d:
f0:57:c4:87:d9:fa:70:49:3d:a8:ba:70:6d:2e:89:37:5b:db:
1f:e8:05:9c:7a:ac:ab:f8:ad:97:1f:d4:ef:a8:7a:82:04:4b:
0f:8c:3a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:15 2026 by rpki-client