Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/C8GLItBTc7LeEh4YEv8MJPqqn-A.roa
File: C8GLItBTc7LeEh4YEv8MJPqqn-A.roa (raw, json)
Hash identifier: l23szhZCC7lohODost6cu88YHLhEqP3V82zlkvFSQlM=
Subject key identifier: 0B:C1:8B:22:D0:53:73:B2:DE:12:1E:18:12:FF:0C:24:FA:AA:9F:E0
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0334AFD91A429CC2307E8F3B5945C3164
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/C8GLItBTc7LeEh4YEv8MJPqqn-A.roa
Signing time: Mon 24 Aug 2026 10:22:27 +0000
ROA not before: Mon 24 Aug 2026 10:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 153.52.76.0/24 maxlen: 24
153.52.105.0/24 maxlen: 24
153.52.113.0/24 maxlen: 24
153.52.126.0/24 maxlen: 24
153.76.224.0/24 maxlen: 24
153.76.225.0/24 maxlen: 24
153.76.226.0/24 maxlen: 24
153.76.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:4a:fd:91:a4:29:cc:23:07:e8:f3:b5:94:5c:31:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Aug 24 10:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bc18b22d05373b2de121e1812ff0c24faaa9fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:80:31:cf:f4:b4:74:de:22:c8:ed:98:f1:
9f:ff:bf:11:4a:f1:6f:7d:8d:5c:78:bd:1e:73:f3:
05:c3:05:1e:a3:ce:28:db:4f:f5:17:0d:3d:2e:8e:
1a:2e:0c:d0:25:88:dc:ac:d7:91:ad:c2:a8:af:61:
a3:9c:86:d9:73:9a:39:82:d5:19:43:30:64:3f:ed:
22:ca:a7:3c:89:60:db:2a:84:a3:84:56:19:32:af:
73:f6:06:23:25:04:88:3c:ec:88:45:d2:42:79:c6:
38:af:04:d9:fc:71:37:22:44:5a:ab:fc:9a:e4:e3:
fc:5a:8f:8b:f9:31:e8:11:f4:0e:f8:46:01:d1:e1:
a4:56:58:90:8e:7b:2a:02:5b:68:0a:a6:e4:d0:63:
6a:2c:58:28:97:40:f9:47:0b:fe:fd:2c:78:fa:ac:
a2:90:a2:82:33:31:61:91:51:40:6f:da:94:06:e5:
09:4d:1d:7f:a5:ea:fb:9f:7c:fb:20:81:4e:68:45:
0d:da:98:d2:0e:21:55:94:1f:3b:e8:4c:c0:6d:ce:
90:73:58:7a:9b:47:9b:a7:8c:c9:3e:60:66:47:b1:
6d:1b:03:8f:00:d5:ef:bf:e4:fe:f3:c7:48:eb:e8:
b1:13:23:b8:0b:04:e8:f7:0f:55:9b:9f:66:b2:7f:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C1:8B:22:D0:53:73:B2:DE:12:1E:18:12:FF:0C:24:FA:AA:9F:E0
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/C8GLItBTc7LeEh4YEv8MJPqqn-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.76.0/24
153.52.105.0/24
153.52.113.0/24
153.52.126.0/24
153.76.224.0-153.76.226.255
153.76.230.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ec:24:e7:95:92:a4:f2:b0:f4:37:61:a4:a8:08:a3:68:0c:
84:45:71:2f:80:6f:da:ac:a1:aa:e6:8d:b9:69:2d:e8:09:3d:
0a:bb:32:65:bc:66:02:2e:e2:35:e0:93:6a:6f:17:1a:94:f7:
2e:8f:1a:e3:14:73:fd:a1:26:36:53:89:da:b9:bb:84:61:91:
34:db:15:9c:cd:37:93:24:4d:a0:d1:ff:83:1b:e3:55:7b:e6:
a1:13:aa:7c:9c:af:be:a3:e6:7d:0e:c3:01:77:24:9d:3a:98:
d9:b8:25:33:dc:ca:a3:49:1c:47:b3:df:55:20:eb:c7:15:d2:
b4:0b:08:07:01:fd:9e:2a:f2:31:dd:f0:8e:71:4f:54:70:1b:
47:3e:66:f6:08:91:73:b9:99:89:98:fd:99:94:d3:0b:37:73:
59:99:c4:76:90:fa:89:1d:16:ba:75:71:8d:30:65:75:fa:b6:
ac:32:3d:32:44:e6:b9:e6:55:2e:a9:5e:d4:7b:3a:ff:db:3d:
dd:c5:62:37:47:ca:98:0a:97:7a:a1:d0:0a:5b:7e:63:58:15:
78:44:2e:2f:4b:9d:93:a6:87:06:69:8c:26:f5:18:63:43:e2:
e0:6d:ce:7e:60:52:c4:3e:79:56:1e:61:1e:4f:bb:70:1a:dd:
cf:a4:9a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:09:55 2026 by rpki-client