Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/CNE-8IAAgWwPMwLS-CNNAO81hGQ.roa
File: CNE-8IAAgWwPMwLS-CNNAO81hGQ.roa (raw, json)
Hash identifier: VeC/PpYj5puHDU/4QWRO3djaifCWLoC3cPJ+dyDt748=
Subject key identifier: 08:D1:3E:F0:80:00:81:6C:0F:33:02:D2:F8:23:4D:00:EF:35:84:64
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0FD3D56905A8117C01001D5F6D1706444
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/CNE-8IAAgWwPMwLS-CNNAO81hGQ.roa
Signing time: Fri 02 Oct 2026 15:30:50 +0000
ROA not before: Fri 02 Oct 2026 15:30:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 153.52.82.0/24 maxlen: 24
153.52.112.0/24 maxlen: 24
153.52.124.0/24 maxlen: 24
153.76.153.0/24 maxlen: 24
153.76.156.0/24 maxlen: 24
153.76.157.0/24 maxlen: 24
153.79.72.0/24 maxlen: 24
153.79.73.0/24 maxlen: 24
153.79.74.0/24 maxlen: 24
153.79.77.0/24 maxlen: 24
153.79.78.0/24 maxlen: 24
153.79.79.0/24 maxlen: 24
163.245.32.0/24 maxlen: 24
163.245.33.0/24 maxlen: 24
163.245.38.0/24 maxlen: 24
163.245.39.0/24 maxlen: 24
2a07:4680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:3d:56:90:5a:81:17:c0:10:01:d5:f6:d1:70:64:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 2 15:30:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08d13ef08000816c0f3302d2f8234d00ef358464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:52:23:30:76:f7:43:f1:b2:6e:e6:9d:57:
ef:09:ed:aa:5e:4d:e7:11:a0:d0:9d:20:9d:84:df:
9c:35:65:2e:23:d5:31:ff:fc:ab:a1:33:3c:23:0f:
29:17:c7:c2:30:27:01:7c:44:b4:2e:e2:16:e0:c8:
03:ae:ff:94:6a:d6:c5:7e:da:62:48:08:37:2a:7d:
f2:12:89:13:84:a2:6a:5a:73:a7:ad:83:17:43:52:
15:f8:f9:7a:d2:19:59:31:c0:be:7a:43:d0:38:e0:
4d:63:1a:a7:49:09:31:c4:a7:bb:fa:5e:d8:60:5d:
c4:52:39:d8:04:c6:e9:e1:7f:d4:60:df:29:6f:d3:
5b:29:f4:26:8c:11:e9:22:a7:1a:9f:7e:f4:52:c2:
5e:ff:eb:74:eb:95:9b:48:df:49:7d:05:ec:c5:f2:
63:82:eb:ea:8e:d6:79:36:a2:48:0c:ca:1a:07:c2:
e7:1b:86:6b:fd:f1:8f:12:47:8a:c4:e7:51:8c:ae:
f6:4b:d0:ba:56:8f:57:c3:7b:69:32:89:0d:94:94:
fa:5b:89:73:7b:6d:d9:e5:89:78:46:91:9f:af:c0:
dc:0a:2f:35:04:2d:5b:85:ee:f5:e1:c4:37:ad:fb:
b7:54:2f:b2:3e:65:4b:81:02:27:c1:6c:da:00:e2:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D1:3E:F0:80:00:81:6C:0F:33:02:D2:F8:23:4D:00:EF:35:84:64
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/CNE-8IAAgWwPMwLS-CNNAO81hGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.82.0/24
153.52.112.0/24
153.52.124.0/24
153.76.153.0/24
153.76.156.0/23
153.79.72.0-153.79.74.255
153.79.77.0-153.79.79.255
163.245.32.0/23
163.245.38.0/23
IPv6:
2a07:4680::/48
Signature Algorithm: sha256WithRSAEncryption
25:5d:36:2e:b2:89:db:89:5e:23:de:7b:bd:08:d0:a7:59:2c:
74:c5:9f:e2:ec:88:aa:c4:0a:62:4d:14:e5:90:44:1a:7a:91:
7b:77:82:88:c8:93:cd:f5:4a:99:4d:73:a8:fc:2a:62:61:c8:
50:19:f1:df:da:e0:15:d0:21:1f:b1:71:81:6e:a4:f7:16:8a:
9e:4d:90:e5:91:0f:d9:c2:88:94:81:41:4d:96:05:1a:e0:30:
df:d7:bd:8e:a3:9b:de:8f:82:db:04:b1:0f:61:30:23:72:3d:
ee:5f:21:28:d4:8d:46:c5:d6:83:eb:95:f5:b7:a7:cf:1c:7f:
54:f4:cb:51:62:6b:31:0f:bf:03:d7:11:97:fe:e1:6b:cb:53:
af:af:db:bc:33:8e:7d:3f:c7:dc:47:be:7b:5e:d5:04:9f:ec:
14:06:c3:93:84:dd:69:a4:3c:b5:e7:e2:77:fa:d6:75:fd:79:
be:2f:23:81:b5:29:d8:46:29:13:a5:2b:ff:fe:1e:c6:0a:7d:
d6:8d:71:b5:b7:bd:d9:80:80:28:fc:f7:7c:9c:e1:08:e1:79:
06:b4:84:b9:af:d3:fe:3d:b2:54:69:ff:c4:d8:99:b6:fc:05:
e7:c6:80:e3:17:ed:93:6f:a5:93:a9:c6:ae:44:2f:c1:71:98:
c2:01:ab:11
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAaD9PVaQWoEXwBAB1fbRcGREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYxMDAyMTUzMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGQxM2VmMDgwMDA4MTZjMGYzMzAyZDJmODIzNGQwMGVmMzU4NDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQlSIzB290Pxsm7mnVfvCe2qXk3n
EaDQnSCdhN+cNWUuI9Ux//yroTM8Iw8pF8fCMCcBfES0LuIW4MgDrv+UatbFftpi
SAg3Kn3yEokThKJqWnOnrYMXQ1IV+Pl60hlZMcC+ekPQOOBNYxqnSQkxxKe7+l7Y
YF3EUjnYBMbp4X/UYN8pb9NbKfQmjBHpIqcan370UsJe/+t065WbSN9JfQXsxfJj
guvqjtZ5NqJIDMoaB8LnG4Zr/fGPEkeKxOdRjK72S9C6Vo9Xw3tpMokNlJT6W4lz
e23Z5Yl4RpGfr8DcCi81BC1bhe714cQ3rfu3VC+yPmVLgQInwWzaAOKxYwIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFAjRPvCAAIFsDzMC0vgjTQDvNYRkMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvQ05FLThJQUFnV3dQTXdMUy1DTk5BTzgxaEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBMBAIAATBGAwQAmTRSAwQA
mTRwAwQAmTR8AwQAmUyZAwQBmUycMAwDBAOZT0gDBACZT0owDAMEAJlPTQMEBJlP
QAMEAaP1IAMEAaP1JjAPBAIAAjAJAwcAKgdGgAAAMA0GCSqGSIb3DQEBCwUAA4IB
AQAlXTYusonbiV4j3nu9CNCnWSx0xZ/i7IiqxApiTRTlkEQaepF7d4KIyJPN9UqZ
TXOo/CpiYchQGfHf2uAV0CEfsXGBbqT3FoqeTZDlkQ/ZwoiUgUFNlgUa4DDf172O
o5vej4LbBLEPYTAjcj3uXyEo1I1GxdaD65X1t6fPHH9U9MtRYmsxD78D1xGX/uFr
y1Ovr9u8M459P8fcR757XtUEn+wUBsOThN1ppDy15+J3+tZ1/Xm+LyOBtSnYRikT
pSv//h7GCn3WjXG1t73ZgIAo/Pd8nOEI4XkGtIS5r9P+PbJUaf/E2Jm2/AXnxoDj
F+2Tb6WTqcauRC/BcZjCAasR
-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:16 2026 by rpki-client