Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/9yQGkkXLY2SjMk3ofHN9n9AOjAw.roa
File: 9yQGkkXLY2SjMk3ofHN9n9AOjAw.roa (raw, json)
Hash identifier: 6v5FooBFPlNcj3CIoSY6V5TUldi3HdcfQsKbbuK5ckw=
Subject key identifier: F7:24:06:92:45:CB:63:64:A3:32:4D:E8:7C:73:7D:9F:D0:0E:8C:0C
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019F22388FA02008641435CBB18146C935AE
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/9yQGkkXLY2SjMk3ofHN9n9AOjAw.roa
Signing time: Thu 02 Jul 2026 09:45:59 +0000
ROA not before: Thu 02 Jul 2026 09:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 153.52.82.0/24 maxlen: 24
153.52.112.0/24 maxlen: 24
153.52.124.0/24 maxlen: 24
2a07:4680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:38:8f:a0:20:08:64:14:35:cb:b1:81:46:c9:35:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jul 2 09:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f724069245cb6364a3324de87c737d9fd00e8c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c8:9c:4d:b2:b2:e2:61:ca:1d:11:13:1a:6a:
57:c6:bc:a7:a1:29:d5:20:cf:e9:46:c2:0f:d4:95:
13:75:4f:ac:14:6f:0e:87:b0:77:1f:5e:c5:a5:7b:
f9:3a:4c:a8:a1:e0:9e:7c:43:a2:4a:e1:96:ba:03:
c3:18:d8:1e:c0:9b:c2:b8:35:2d:19:10:3c:c7:71:
41:87:ea:0b:11:53:3c:40:15:fc:1f:b1:02:1d:39:
f4:f4:b8:bd:86:da:11:30:86:b5:0e:6e:ca:a3:12:
be:d9:bb:31:cb:0e:32:44:71:74:27:80:fb:4c:04:
29:7e:21:87:d9:f7:62:30:dd:3d:02:da:95:55:93:
fe:3f:0a:ca:cc:12:4b:84:be:5a:92:1e:e8:30:71:
60:db:93:ff:63:8b:79:83:76:6d:3a:cb:40:90:eb:
33:4e:ba:f6:a7:03:f1:00:a1:a1:58:78:7f:5f:b8:
67:e5:cc:6c:0b:30:aa:07:8c:d3:88:f8:18:f0:01:
04:fe:72:55:49:82:5a:ea:f9:53:54:60:fe:ee:2e:
39:66:14:48:b9:60:17:0f:2e:9e:f1:68:93:61:3b:
6a:fd:15:59:30:98:b6:58:a1:f8:cd:90:19:5b:7a:
80:29:48:e6:b6:da:25:1f:a5:83:6a:19:e3:fa:13:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:24:06:92:45:CB:63:64:A3:32:4D:E8:7C:73:7D:9F:D0:0E:8C:0C
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/9yQGkkXLY2SjMk3ofHN9n9AOjAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.82.0/24
153.52.112.0/24
153.52.124.0/24
IPv6:
2a07:4680::/48
Signature Algorithm: sha256WithRSAEncryption
79:bc:c8:d7:a3:1f:fc:b7:85:77:75:7f:bd:e9:9c:9a:99:04:
e1:2d:ca:61:73:64:b2:11:f1:cc:c1:b2:7a:dc:54:4b:01:c6:
01:04:65:01:06:eb:cb:c7:6d:7f:1a:09:4a:e7:f4:ee:b9:08:
f6:1d:6a:9d:f4:a1:0d:47:53:55:a4:b2:55:3f:a9:fd:84:88:
c2:a4:16:46:4d:c8:bc:0a:0f:dd:87:a2:20:4f:c1:99:1b:49:
f0:3f:1e:64:e5:42:37:44:7f:e2:07:12:ff:50:d3:73:1c:f0:
86:16:31:19:e2:76:5e:13:d2:39:36:a6:4e:67:fb:8e:38:6b:
89:2b:5c:f4:9f:0e:b7:bd:e5:fe:8a:4d:ef:7a:59:22:cc:20:
ea:84:e9:32:51:36:fd:c2:0a:db:df:ef:46:11:98:3e:08:e5:
42:02:d5:53:9a:23:78:d4:d9:96:99:54:49:65:db:18:5e:ed:
ba:45:53:3d:ef:fd:a6:74:a3:26:2e:ee:aa:25:a0:3e:29:aa:
d6:c3:ed:15:4d:3e:b1:85:85:e6:46:94:de:46:7c:bc:78:aa:
30:20:85:cb:81:e6:6c:d7:7d:b9:7b:95:2e:52:40:9d:e0:9f:
04:d0:d0:00:be:ec:ca:46:f9:89:13:6a:1c:1c:9c:f9:87:5a:
4c:12:c8:c2
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ8iOI+gIAhkFDXLsYFGyTWuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYwNzAyMDk0NTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzI0MDY5MjQ1Y2I2MzY0YTMzMjRkZTg3YzczN2Q5ZmQwMGU4YzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sicTbKy4mHKHRETGmpXxrynoSnV
IM/pRsIP1JUTdU+sFG8Oh7B3H17FpXv5OkyooeCefEOiSuGWugPDGNgewJvCuDUt
GRA8x3FBh+oLEVM8QBX8H7ECHTn09Li9htoRMIa1Dm7KoxK+2bsxyw4yRHF0J4D7
TAQpfiGH2fdiMN09AtqVVZP+PwrKzBJLhL5akh7oMHFg25P/Y4t5g3ZtOstAkOsz
Trr2pwPxAKGhWHh/X7hn5cxsCzCqB4zTiPgY8AEE/nJVSYJa6vlTVGD+7i45ZhRI
uWAXDy6e8WiTYTtq/RVZMJi2WKH4zZAZW3qAKUjmttolH6WDahnj+hMQ2QIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFPckBpJFy2NkozJN6HxzfZ/QDowMMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvOXlRR2trWExZMlNqTWszb2ZITjluOUFPakF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAmTRSAwQA
mTRwAwQAmTR8MA8EAgACMAkDBwAqB0aAAAAwDQYJKoZIhvcNAQELBQADggEBAHm8
yNejH/y3hXd1f73pnJqZBOEtymFzZLIR8czBsnrcVEsBxgEEZQEG68vHbX8aCUrn
9O65CPYdap30oQ1HU1WkslU/qf2EiMKkFkZNyLwKD92HoiBPwZkbSfA/HmTlQjdE
f+IHEv9Q03Mc8IYWMRnidl4T0jk2pk5n+444a4krXPSfDre95f6KTe96WSLMIOqE
6TJRNv3CCtvf70YRmD4I5UIC1VOaI3jU2ZaZVEll2xhe7bpFUz3v/aZ0oyYu7qol
oD4pqtbD7RVNPrGFheZGlN5GfLx4qjAghcuB5mzXfbl7lS5SQJ3gnwTQ0AC+7MpG
+YkTahwcnPmHWkwSyMI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:53:53 2026 by rpki-client