Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PVPkXW-s-jRmPlVGBaUVIsKOF5M.roa
File: PVPkXW-s-jRmPlVGBaUVIsKOF5M.roa (raw, json)
Hash identifier: YMSqCki8PAsGL8v2zaQBdhS5uv2kQngLOsZbCHSosMQ=
Subject key identifier: 3D:53:E4:5D:6F:AC:FA:34:66:3E:55:46:05:A5:15:22:C2:8E:17:93
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019F9A261317D43CFE977428211AD63BD02C
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PVPkXW-s-jRmPlVGBaUVIsKOF5M.roa
Signing time: Sat 25 Jul 2026 16:40:14 +0000
ROA not before: Sat 25 Jul 2026 16:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219153
IP address blocks: 153.76.252.0/23 maxlen: 23
153.76.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9a:26:13:17:d4:3c:fe:97:74:28:21:1a:d6:3b:d0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jul 25 16:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d53e45d6facfa34663e554605a51522c28e1793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:6b:fd:39:6a:03:ae:35:a1:c5:8a:65:db:
ad:7b:3f:2b:79:9b:ce:19:18:6b:b4:c4:4c:40:67:
ec:f0:81:e3:3b:0b:70:f7:a1:27:a8:9b:20:99:77:
71:67:34:90:f0:d8:36:c2:99:b9:c8:92:f3:39:9f:
c8:6f:a3:66:b8:37:a8:b2:c9:ac:79:c3:8f:91:97:
1c:a3:7e:3e:f4:92:c3:63:f0:92:58:0f:33:88:2f:
57:82:1e:83:f3:4e:90:ca:fa:94:eb:41:27:6c:ff:
75:db:d6:ec:21:46:7a:8e:4e:36:d8:79:8a:87:44:
b2:a8:dc:24:81:f7:2b:fa:6d:c5:33:7f:9b:41:3a:
40:39:21:90:8b:b4:53:5a:97:45:7b:32:ad:e6:1e:
22:87:0b:5d:e7:9a:05:2d:da:bf:42:65:e4:81:47:
9f:f1:38:39:f5:78:e5:06:77:0c:1c:de:15:a1:cf:
d2:25:90:14:d1:f7:44:1a:ce:7a:62:ae:33:86:50:
1e:16:4a:59:0c:2d:fc:9b:c5:65:cd:39:cc:cf:6b:
0a:7c:ca:fa:00:0e:4a:f8:5b:74:1b:5d:c3:0a:6f:
1a:ea:7d:c5:8c:c2:58:e0:ed:d6:08:30:05:45:7a:
89:a4:81:f9:e4:35:54:4a:cd:f4:4f:0f:fd:a5:c3:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:53:E4:5D:6F:AC:FA:34:66:3E:55:46:05:A5:15:22:C2:8E:17:93
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PVPkXW-s-jRmPlVGBaUVIsKOF5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.252.0/22
Signature Algorithm: sha256WithRSAEncryption
14:b8:e0:ad:52:bc:67:af:21:61:8c:9e:cb:56:48:c5:d5:7e:
38:8a:d2:b7:2f:26:27:b2:0f:25:e7:e2:d7:a3:74:68:86:21:
d2:f5:4c:7a:cc:b5:94:1a:e5:d6:eb:8e:dc:d3:99:23:fc:83:
91:d2:1d:ef:33:f0:b3:bf:00:bc:9b:86:0a:ee:d2:eb:72:cc:
8d:9f:ba:b6:cd:a2:7e:6e:58:89:2b:e1:6c:a1:c0:6c:6b:88:
b4:38:a8:c5:f3:9e:de:44:59:b3:09:92:ba:eb:68:ac:de:6f:
ff:73:c8:f1:21:f1:bb:fb:54:f4:32:c9:36:60:a1:9b:1f:ed:
5e:4a:f2:3a:9c:cd:47:95:90:2f:68:6b:5d:4f:0a:f2:5e:8c:
35:34:20:ca:44:61:43:5d:25:2d:04:e4:4f:a5:25:a6:64:dc:
60:51:84:2d:5b:ff:17:85:83:a3:5e:37:f4:8e:74:c2:49:64:
c0:92:19:8a:e8:df:8a:e2:49:c7:ef:23:b9:c8:fa:bd:cf:81:
af:f9:4b:5f:d9:d5:cb:25:fd:77:84:82:e8:1c:e0:28:8a:a1:
94:ae:fb:c9:49:1d:43:8a:e7:c4:df:4b:69:cc:ab:65:46:75:
52:16:9a:75:cf:40:7e:99:ec:cc:27:10:1c:6f:02:91:99:d9:
76:c0:16:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:27:39 2026 by rpki-client