Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/Ae9NgFUrZ24-MFo9mbb0PNVhf0o.roa
File: Ae9NgFUrZ24-MFo9mbb0PNVhf0o.roa (raw, json)
Hash identifier: nzXxYj43d9I7O16caiUA6up/fb49HJG+wWUtle/NK7s=
Subject key identifier: 01:EF:4D:80:55:2B:67:6E:3E:30:5A:3D:99:B6:F4:3C:D5:61:7F:4A
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A02A768E9D2797B3CA1078CDEB9EEDBAB6
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/Ae9NgFUrZ24-MFo9mbb0PNVhf0o.roa
Signing time: Sat 22 Aug 2026 17:13:27 +0000
ROA not before: Sat 22 Aug 2026 17:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219153
IP address blocks: 153.76.228.0/23 maxlen: 23
153.76.252.0/23 maxlen: 23
153.76.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:76:8e:9d:27:97:b3:ca:10:78:cd:eb:9e:ed:ba:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Aug 22 17:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01ef4d80552b676e3e305a3d99b6f43cd5617f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:fe:07:0d:95:ac:ee:9e:67:10:a8:c5:db:
26:00:fe:65:ed:93:f9:86:13:03:f7:7a:08:06:18:
f5:2f:ac:40:c6:d6:c2:07:20:c8:a1:ae:bb:6a:36:
2d:9f:ff:68:fa:55:f8:ce:f5:48:3d:db:ad:0f:88:
ae:20:d6:4c:d0:53:3f:55:36:4d:4c:0b:63:db:64:
9f:59:4c:63:11:d0:6b:e7:26:98:0b:90:5f:9a:54:
91:22:96:d5:a7:2b:39:b7:6b:05:e9:80:f5:fc:51:
1d:ea:f9:c3:ab:61:e8:d1:85:5e:5c:25:3a:5e:ff:
cd:4d:a7:3a:3d:ec:3e:a7:18:12:99:2d:19:8f:4e:
f9:5a:88:69:13:17:aa:49:98:70:b9:72:d2:cf:41:
f8:98:16:a7:a4:f2:9c:d5:c0:61:bc:6f:74:27:c9:
7b:a2:29:e7:57:56:a1:49:c8:46:3a:09:82:3d:80:
65:8d:3d:9e:6c:bb:88:e0:bf:4a:a0:64:37:f3:c2:
96:8d:5b:2b:32:65:6d:16:d3:04:9f:02:b4:d5:c4:
50:1d:cf:29:38:c2:7a:b4:f1:ad:32:5b:99:c3:a4:
6b:f6:95:fe:d8:40:c9:cb:ae:f5:73:d1:ff:c1:70:
69:b1:ab:da:b3:2d:64:b3:ec:0b:0e:f3:a9:a6:ba:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:4D:80:55:2B:67:6E:3E:30:5A:3D:99:B6:F4:3C:D5:61:7F:4A
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/Ae9NgFUrZ24-MFo9mbb0PNVhf0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.228.0/23
153.76.252.0/22
Signature Algorithm: sha256WithRSAEncryption
18:b9:22:8c:2a:f0:3e:3f:ba:b7:da:64:18:2a:4d:1d:f7:14:
03:de:0f:29:4c:2c:fc:89:37:3b:df:5b:ad:1b:e4:c6:aa:f0:
16:9e:b0:60:82:e6:8f:f1:78:91:b6:15:36:47:e1:74:ae:5b:
31:4f:26:d8:54:71:31:30:88:0d:a2:00:e5:4d:fa:6d:08:2c:
1e:b5:0f:b8:26:4a:80:13:63:26:61:7e:51:f9:e3:61:2c:29:
44:c7:59:de:dc:48:81:d4:6d:fe:f0:a6:37:0c:2b:bf:38:2a:
a3:dd:46:14:f9:34:7b:1b:87:67:74:66:30:06:3b:61:52:b5:
5c:80:c8:6c:0f:f3:46:d9:f4:3c:c2:7a:ce:c5:70:c2:0c:78:
6d:c7:75:70:4a:7a:31:c3:6b:eb:a8:fd:77:6a:91:c3:a0:f6:
6d:b5:73:8c:2c:19:e4:51:b9:1d:ca:b3:21:d5:15:36:b2:38:
6f:73:9d:33:48:c0:82:f5:db:fe:f1:c3:4d:bb:0b:7c:b0:b4:
36:bf:11:ae:eb:fc:c6:bd:7d:66:14:20:c7:f0:3a:01:ca:a1:
d2:2f:a6:f7:33:e6:9f:f9:26:af:ea:00:8d:ed:f6:de:f3:79:
f1:d5:23:d9:11:da:a9:a4:fd:23:28:6c:22:88:a2:56:a9:5a:
3d:27:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:00:27 2026 by rpki-client