Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/SFmMWiPKyVrk7wDrGQeHBSzSmn8.roa
File: SFmMWiPKyVrk7wDrGQeHBSzSmn8.roa (raw, json)
Hash identifier: lmRL2asJRlbY+ZFlr4N0H80+1oPQD8GnG9gTXtfaMv0=
Subject key identifier: 48:59:8C:5A:23:CA:C9:5A:E4:EF:00:EB:19:07:87:05:2C:D2:9A:7F
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0ECDA820EADD25A5C90130AA1329170C1
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/SFmMWiPKyVrk7wDrGQeHBSzSmn8.roa
Signing time: Tue 29 Sep 2026 11:08:58 +0000
ROA not before: Tue 29 Sep 2026 11:08:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24768
IP address blocks: 153.52.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:da:82:0e:ad:d2:5a:5c:90:13:0a:a1:32:91:70:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 29 11:08:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48598c5a23cac95ae4ef00eb190787052cd29a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:35:d1:7f:59:2f:04:04:b8:c9:c1:61:60:
30:63:f0:ed:17:56:8d:17:a8:16:e9:05:91:5e:f2:
fd:ef:b3:cb:24:12:bf:09:8b:29:53:02:11:e2:76:
66:37:8e:6d:ec:7a:d2:10:bd:3f:e1:b3:b9:a2:b3:
ee:35:30:04:a6:6a:e2:c6:63:c3:27:c5:8d:07:92:
0b:09:37:2a:46:e8:56:e2:5d:ae:33:db:49:27:69:
e8:78:4f:7c:dd:14:49:1f:54:17:cf:54:77:93:3d:
dc:ba:bc:5a:c6:3c:31:7c:4c:b1:7a:c7:13:3a:22:
4f:e8:cb:81:fb:bd:16:5b:6d:45:90:2d:c7:66:fa:
07:1f:d8:dd:cf:6e:c1:3e:41:6c:bd:7c:09:90:ec:
b6:ed:58:99:d1:f8:1d:ce:8b:e6:75:8b:10:f5:4c:
00:b8:27:5a:da:0f:c5:9b:b9:ef:f1:70:5b:eb:f4:
74:a6:8d:04:3e:ef:00:4e:7b:cf:ab:fb:39:c5:5c:
ee:1c:4f:97:13:c6:00:46:33:0b:e3:1c:45:d0:89:
18:25:72:36:07:a9:1b:57:f9:5d:b4:6d:d6:cb:4d:
19:c0:5d:e0:7e:11:61:4b:b4:b4:54:bc:cf:3a:55:
8f:b3:13:66:f6:ef:9e:96:b1:de:b5:cd:d9:4c:af:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:59:8C:5A:23:CA:C9:5A:E4:EF:00:EB:19:07:87:05:2C:D2:9A:7F
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/SFmMWiPKyVrk7wDrGQeHBSzSmn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.88.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b0:e7:87:43:63:76:8d:67:80:0f:19:46:5b:45:8e:bc:fd:
ab:be:e6:f2:86:5a:e3:f0:7d:55:66:e9:8f:f3:67:d4:81:c7:
14:c0:6d:4c:6a:37:d1:dc:36:63:7d:76:ba:27:4e:7e:4d:eb:
61:ef:e1:d7:9a:f8:68:37:b7:f6:be:09:6a:fb:26:b7:19:d0:
54:55:7a:7a:0e:5f:11:8b:31:70:9d:10:74:df:41:b7:12:cf:
2b:d4:72:3d:50:4f:1b:ec:6c:87:ff:69:83:63:66:94:6a:b0:
c6:b9:7f:81:bd:1a:34:c7:f1:ae:5c:d7:af:1c:a7:93:be:f9:
73:3a:d5:91:4a:9c:ce:52:1b:5d:b3:74:80:b5:49:ba:de:53:
26:06:0d:e6:c3:e4:f1:f1:12:bb:e5:40:5e:4e:04:ef:14:d1:
e6:d0:91:17:97:71:18:0e:d4:9d:16:cf:72:ed:b2:fc:b8:91:
c2:2d:74:77:35:ef:0b:8c:ac:ff:c1:a5:b1:56:12:8c:68:f2:
5e:b7:14:c5:e3:f3:05:e9:31:6d:24:4c:b1:33:b7:46:d3:00:
10:31:86:5f:0d:60:dd:f1:cf:bc:48:0d:4c:71:eb:65:40:e1:
76:87:b9:f0:9f:b7:f1:ef:3a:6e:7f:4a:37:86:01:55:eb:a9:
c9:f5:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:31 2026 by rpki-client