Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/6g5rTwxdjOxdQg10ljLDWgGmtCs.roa
File: 6g5rTwxdjOxdQg10ljLDWgGmtCs.roa (raw, json)
Hash identifier: wyRTs9gdZoVPosSR+/knefOvfAW3btuipE/yqb6jwUA=
Subject key identifier: EA:0E:6B:4F:0C:5D:8C:EC:5D:42:0D:74:96:32:C3:5A:01:A6:B4:2B
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0F194DE49A705DDEFC7F65052C1818428
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/6g5rTwxdjOxdQg10ljLDWgGmtCs.roa
Signing time: Wed 30 Sep 2026 09:11:00 +0000
ROA not before: Wed 30 Sep 2026 09:11:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216070
IP address blocks: 153.52.71.0/24 maxlen: 24
153.52.98.0/24 maxlen: 24
153.52.104.0/24 maxlen: 24
153.52.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:94:de:49:a7:05:dd:ef:c7:f6:50:52:c1:81:84:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 30 09:11:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea0e6b4f0c5d8cec5d420d749632c35a01a6b42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6d:2c:09:f7:6c:4a:90:d5:98:b9:49:1e:e5:
c3:6c:a9:9b:11:23:fb:bc:d8:8a:e5:3e:52:3e:32:
a6:69:bc:aa:4c:ab:a2:08:c4:19:6a:d0:d3:dd:6b:
04:73:28:9f:ee:25:4d:fd:d3:18:61:c6:d0:09:56:
aa:8f:be:82:c6:d0:61:f3:56:f6:48:03:3a:7f:c7:
2d:5e:ea:9a:1d:de:89:dd:69:8a:5a:00:aa:c3:09:
a3:5d:67:42:47:2b:09:82:af:61:cf:e2:59:b4:21:
63:e4:a5:bf:03:bb:3e:a2:24:fa:08:f6:88:5c:6e:
1c:73:ec:34:2a:65:77:2d:3b:6e:02:43:47:0c:27:
f9:c7:6f:ac:af:85:74:53:64:8d:4c:71:69:93:ef:
77:cc:a6:05:1a:72:31:b1:ab:f0:e5:f0:79:9d:4b:
be:ae:58:81:a5:fa:0d:e6:92:43:62:b7:58:fa:f1:
30:6b:da:b4:79:5e:3d:4e:0a:8f:93:1c:d0:58:92:
43:b3:5b:4a:a4:fe:d2:55:8e:4c:d2:65:0b:10:98:
30:36:a2:c9:c1:3c:cc:11:e6:de:38:9a:d9:26:b8:
aa:05:b7:7b:d9:b3:ea:62:6b:41:eb:4a:fb:11:cf:
f6:0b:97:09:ea:2a:ff:aa:f8:98:c0:c9:c1:8b:f6:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0E:6B:4F:0C:5D:8C:EC:5D:42:0D:74:96:32:C3:5A:01:A6:B4:2B
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/6g5rTwxdjOxdQg10ljLDWgGmtCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.71.0/24
153.52.98.0/24
153.52.104.0/24
153.52.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:12:cf:1b:a4:56:d8:0a:d3:92:7e:4c:c1:24:86:cf:63:2b:
a3:c0:8b:f8:84:39:1e:37:8d:95:93:33:ee:98:c9:4d:f1:bd:
2b:c5:48:6b:cf:a5:70:d6:d9:4d:41:4c:83:59:8a:b2:88:60:
94:89:f5:66:98:b9:96:a8:91:a8:32:dd:4d:16:46:e0:e9:a2:
9e:56:fd:51:6b:b1:2f:2d:6a:f0:1b:a6:0d:42:7b:bd:5f:42:
31:4a:6f:c7:d7:bc:8b:ab:7f:2f:e5:5b:69:31:f0:67:bb:4e:
52:b8:37:83:ee:1d:5d:b9:24:93:a0:23:4f:81:c9:b8:50:77:
df:b4:e3:01:2c:05:c6:38:0b:47:41:ca:61:41:fa:cd:58:8f:
c8:54:dc:2e:c2:19:26:ff:e8:04:95:d2:a7:6f:9a:fe:a1:d2:
20:9f:fd:0c:7d:d9:fd:ec:67:30:44:6c:36:9d:85:8d:66:b5:
d1:dd:7b:3b:6c:c9:e4:d1:b0:1b:58:51:8f:43:a0:8b:a6:80:
2f:88:44:cb:85:d0:35:6f:27:3d:c1:38:ff:4c:65:31:df:ef:
d0:00:34:47:04:57:d5:b6:28:63:0e:bd:d4:d6:f6:ed:12:b3:
71:a5:f5:c9:cb:56:7d:ff:e3:8c:c1:82:83:c7:b5:4c:91:8f:
d9:c4:7e:02
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaDxlN5JpwXd78f2UFLBgYQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYwOTMwMDkxMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTBlNmI0ZjBjNWQ4Y2VjNWQ0MjBkNzQ5NjMyYzM1YTAxYTZiNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8W0sCfdsSpDVmLlJHuXDbKmbESP7
vNiK5T5SPjKmabyqTKuiCMQZatDT3WsEcyif7iVN/dMYYcbQCVaqj76CxtBh81b2
SAM6f8ctXuqaHd6J3WmKWgCqwwmjXWdCRysJgq9hz+JZtCFj5KW/A7s+oiT6CPaI
XG4cc+w0KmV3LTtuAkNHDCf5x2+sr4V0U2SNTHFpk+93zKYFGnIxsavw5fB5nUu+
rliBpfoN5pJDYrdY+vEwa9q0eV49TgqPkxzQWJJDs1tKpP7SVY5M0mULEJgwNqLJ
wTzMEebeOJrZJriqBbd72bPqYmtB60r7Ec/2C5cJ6ir/qviYwMnBi/bi3QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOoOa08MXYzsXUINdJYyw1oBprQrMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvNmc1clR3eGRqT3hkUWcxMGxqTERXZ0dtdENzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmTRHAwQA
mTRiAwQAmTRoAwQAmTR4MA0GCSqGSIb3DQEBCwUAA4IBAQAuEs8bpFbYCtOSfkzB
JIbPYyujwIv4hDkeN42VkzPumMlN8b0rxUhrz6Vw1tlNQUyDWYqyiGCUifVmmLmW
qJGoMt1NFkbg6aKeVv1Ra7EvLWrwG6YNQnu9X0IxSm/H17yLq38v5VtpMfBnu05S
uDeD7h1duSSToCNPgcm4UHfftOMBLAXGOAtHQcphQfrNWI/IVNwuwhkm/+gEldKn
b5r+odIgn/0Mfdn97GcwRGw2nYWNZrXR3Xs7bMnk0bAbWFGPQ6CLpoAviETLhdA1
byc9wTj/TGUx3+/QADRHBFfVtihjDr3U1vbtErNxpfXJy1Z9/+OMwYKDx7VMkY/Z
xH4C
-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:14 2026 by rpki-client