Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/SS4txg_2StDwK48AVogbe_LiWKM.roa
File: SS4txg_2StDwK48AVogbe_LiWKM.roa (raw, json)
Hash identifier: w8gGVsrCzxxSwFzeMeWOpEYm1Ij+vG9eYwgs/zG1XYE=
Subject key identifier: 49:2E:2D:C6:0F:F6:4A:D0:F0:2B:8F:00:56:88:1B:7B:F2:E2:58:A3
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0FD38C2BFD3AD2729CB2C8312390FDD84
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/SS4txg_2StDwK48AVogbe_LiWKM.roa
Signing time: Fri 02 Oct 2026 15:25:50 +0000
ROA not before: Fri 02 Oct 2026 15:25:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207057
IP address blocks: 153.52.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:38:c2:bf:d3:ad:27:29:cb:2c:83:12:39:0f:dd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 2 15:25:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=492e2dc60ff64ad0f02b8f0056881b7bf2e258a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:54:7e:a9:44:12:ae:b2:c6:0c:7f:4f:43:
7c:de:2a:1b:8d:f6:1e:7d:e4:70:4d:7c:32:99:b7:
37:7b:d3:33:91:d1:be:ed:6c:78:3d:7c:1e:df:a2:
d2:89:e2:c4:b8:ee:a4:bc:36:d6:31:57:11:77:cb:
91:aa:95:fc:cd:db:d4:36:52:80:b0:83:ac:70:86:
41:06:63:91:e2:52:de:a3:7e:c4:1e:ea:a5:c8:e7:
f8:b2:85:6b:0d:df:fa:d4:c1:44:a6:04:82:3f:22:
dc:c9:da:8c:b6:64:27:c8:d3:8d:20:17:be:12:f3:
6b:db:86:80:a6:ee:a5:ec:ed:52:1b:fd:74:29:14:
7d:b7:5e:80:aa:04:03:b5:7b:ef:05:ed:1d:43:63:
d4:fd:94:bd:5d:19:e5:3b:9a:d6:e8:8f:7a:67:28:
6e:97:5f:49:a9:27:cc:60:75:68:de:20:9c:13:a3:
b5:7b:91:f0:bd:6b:6c:86:f0:1e:f7:83:40:15:1f:
9d:9b:ec:09:2a:d4:2b:37:99:dc:4d:38:cf:53:57:
79:12:77:83:7c:cf:64:ee:06:f3:32:07:f4:36:6d:
92:e1:fa:eb:d3:62:52:15:65:75:91:18:10:dc:07:
24:f7:11:02:b7:d4:55:66:3e:0c:87:97:ac:1c:f5:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2E:2D:C6:0F:F6:4A:D0:F0:2B:8F:00:56:88:1B:7B:F2:E2:58:A3
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/SS4txg_2StDwK48AVogbe_LiWKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.79.0/24
Signature Algorithm: sha256WithRSAEncryption
28:dc:d8:59:fb:5f:80:67:b5:e1:15:a1:7d:52:0b:93:11:85:
03:ae:74:b0:cb:7d:e1:b2:60:cf:76:2d:ad:ff:a0:6a:91:68:
95:6e:3d:7a:99:2e:72:ab:17:7d:29:81:8e:4b:46:0d:7c:e7:
c5:79:6c:f4:4d:2e:e3:c9:a0:95:76:85:d4:36:6a:f2:4d:1a:
25:97:dc:3a:08:fd:61:a0:29:6e:0e:f5:64:61:6c:28:f7:58:
f4:fc:68:81:f7:0e:72:c8:32:6e:93:5b:41:f1:b6:be:4d:28:
fa:cf:b5:b7:a1:9d:cf:28:da:1e:24:fb:40:6a:3e:a4:a7:22:
2f:7f:77:53:0f:51:88:a5:1d:f6:4f:d5:a0:c6:1d:a7:21:10:
f1:f1:da:6a:30:27:79:b6:d7:ab:2d:5d:1c:27:f2:95:48:9b:
83:52:54:df:8f:31:b0:ad:fc:ec:3e:7f:ae:65:0c:f8:4a:3f:
de:8e:9b:e5:04:2b:68:35:4c:47:d0:21:6c:19:38:fa:06:89:
08:d8:a9:5e:75:8a:44:35:27:d9:35:af:11:a9:a5:68:07:21:
20:a6:a9:f8:8a:b3:9e:71:93:b9:2d:a4:1a:96:54:64:d7:c3:
c1:f9:fd:1a:04:81:b6:c0:91:a5:f6:20:62:79:f7:36:a1:c3:
0f:1a:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:12 2026 by rpki-client