Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/DeZPTYm5JoNakI39cB5KxuAUCL0.roa
File: DeZPTYm5JoNakI39cB5KxuAUCL0.roa (raw, json)
Hash identifier: USHSrlVP2AN0dmNwAtV+wMrtVvIQqfahOgBtJqRhvi4=
Subject key identifier: 0D:E6:4F:4D:89:B9:26:83:5A:90:8D:FD:70:1E:4A:C6:E0:14:08:BD
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0DA49085B322BABDB13CA641F09D91A7A
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/DeZPTYm5JoNakI39cB5KxuAUCL0.roa
Signing time: Fri 25 Sep 2026 20:36:54 +0000
ROA not before: Fri 25 Sep 2026 20:36:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 153.76.227.0/24 maxlen: 24
153.76.231.0/24 maxlen: 24
163.245.46.0/24 maxlen: 24
163.245.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:49:08:5b:32:2b:ab:db:13:ca:64:1f:09:d9:1a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 25 20:36:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0de64f4d89b926835a908dfd701e4ac6e01408bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:15:82:15:54:d8:c3:c7:6d:d9:49:c5:72:
3a:8a:b5:e4:5b:a9:09:38:bc:c6:32:f3:2c:5c:cc:
3f:2d:d0:61:72:4c:a1:f5:f7:a6:1e:51:ef:25:b3:
a8:78:53:b5:f5:79:0c:b1:71:15:f3:0a:39:39:9e:
aa:63:a8:a9:a7:d0:11:c9:64:6d:9f:18:76:a5:4e:
f5:9e:71:aa:77:18:04:7b:82:46:a1:7c:c7:81:d8:
4e:48:76:95:bf:d9:8d:3d:1f:6f:6a:f1:5c:be:7a:
3a:ec:ef:47:17:d8:6d:45:63:46:36:61:10:6e:8e:
1a:ba:cf:7e:cf:8f:e5:7d:f9:ae:e4:f2:5c:c5:dd:
1c:c6:d8:8c:c7:a6:25:7c:0e:ca:3f:36:49:45:73:
1c:44:11:22:5c:18:9d:fe:16:01:be:56:94:f2:ad:
cf:4f:d1:8b:ec:e6:34:a2:cd:7a:c5:a3:8c:1b:79:
d3:bf:c5:14:7c:27:f7:22:8a:18:5d:ce:b1:e7:dc:
f8:c6:d9:4c:62:20:6c:97:c4:12:2f:04:c5:2f:fa:
65:b5:09:b3:e4:44:24:ad:b7:76:17:39:63:53:a9:
38:7c:79:b0:f4:cc:17:3d:e0:6b:26:71:a3:25:89:
04:56:ae:18:14:b6:d0:98:b7:18:38:a5:b5:6b:8e:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E6:4F:4D:89:B9:26:83:5A:90:8D:FD:70:1E:4A:C6:E0:14:08:BD
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/DeZPTYm5JoNakI39cB5KxuAUCL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.227.0/24
153.76.231.0/24
163.245.46.0/24
163.245.50.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e2:e5:29:33:e6:66:b4:44:28:58:62:fa:95:bb:0d:ce:ed:
87:e9:65:38:45:ed:09:b5:94:36:03:1b:23:e4:d8:e1:67:19:
71:79:bd:45:c0:d9:c9:25:c0:33:b5:c6:c0:b4:f9:c8:a9:c8:
6d:40:a1:95:3f:61:48:74:5b:ce:05:e5:fe:ec:fa:82:b2:ef:
c5:ce:88:ab:ea:c0:00:c3:d5:f8:49:8a:de:96:d9:21:fc:62:
b0:bb:e3:a7:2b:c6:a3:3f:1d:af:cc:2e:e4:e4:98:cf:cd:af:
7f:03:27:54:71:84:dd:39:a3:45:53:93:bb:3b:fd:2e:89:09:
bc:0b:8a:ea:70:b2:d3:fd:f6:2b:37:91:4e:1d:cb:49:f7:44:
e7:9b:3c:00:0d:12:28:e3:df:e3:97:1d:c4:28:f9:6f:11:a2:
b7:2f:03:cb:19:c8:e0:a7:84:7a:26:ce:32:a9:fa:5f:95:4b:
13:7b:25:9e:f9:5e:64:cf:aa:06:30:30:5b:f4:8b:8e:17:18:
24:66:24:f3:11:78:e6:f4:4c:06:41:c7:80:a1:20:cf:ba:8c:
fd:ef:3b:9d:46:bb:c0:0d:a3:44:73:44:10:f1:24:ce:a9:9a:
cc:a5:24:42:cd:20:97:c3:41:5c:83:1a:28:10:14:71:07:41:
7b:1b:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:13 2026 by rpki-client