Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/SxUr87-6qreBHbSmSHvcsRh6Qe8.roa
File: SxUr87-6qreBHbSmSHvcsRh6Qe8.roa (raw, json)
Hash identifier: PaNA4lL6qatnGjMgyP3uKnj/Wbta4zMHxMks89dqqLo=
Subject key identifier: 4B:15:2B:F3:BF:BA:AA:B7:81:1D:B4:A6:48:7B:DC:B1:18:7A:41:EF
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A115B10A1B6372043D85DA4C651E2668F4
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/SxUr87-6qreBHbSmSHvcsRh6Qe8.roa
Signing time: Wed 07 Oct 2026 09:28:06 +0000
ROA not before: Wed 07 Oct 2026 09:28:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219284
IP address blocks: 153.52.68.0/24 maxlen: 24
153.52.121.0/24 maxlen: 24
163.245.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:b1:0a:1b:63:72:04:3d:85:da:4c:65:1e:26:68:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 7 09:28:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b152bf3bfbaaab7811db4a6487bdcb1187a41ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:0a:e5:8d:82:ce:23:87:1c:fc:d1:12:c1:
38:3b:16:6e:44:0b:32:e8:37:55:65:65:bc:79:34:
cc:66:c5:85:37:7e:d2:fa:5a:cc:6b:3d:60:31:93:
55:40:38:4d:28:d7:b6:6d:1e:75:51:16:58:58:f5:
ac:0b:28:98:4f:ef:ef:a4:7f:82:f8:05:63:4b:6a:
12:a3:7a:b7:e0:0c:76:52:3c:54:aa:89:89:7a:f7:
e6:52:1f:78:93:b5:46:e9:38:61:cf:6f:e3:d0:98:
b0:1a:44:dc:37:63:18:68:0f:2d:1c:22:5f:65:0b:
1b:08:bc:49:90:29:6e:5d:6d:ef:9d:40:a8:6f:9a:
cf:32:eb:c6:69:23:b8:6b:ea:7d:50:05:79:a9:a1:
fb:d2:11:89:0e:bb:47:f3:37:7d:ea:fc:40:5f:e3:
62:1b:68:72:a0:77:49:0b:41:30:39:e6:5f:8e:d9:
08:b5:12:17:ba:14:c5:86:58:0b:c5:50:2f:f0:c1:
e9:e8:1b:0c:b5:22:d5:e6:9f:83:5c:41:d2:b1:68:
07:bd:78:e4:81:ae:54:1f:0a:e7:2b:5d:bf:c9:92:
07:90:4f:08:d1:37:71:5c:ad:0b:bf:4f:ec:7b:58:
6e:20:a9:f9:4a:a7:90:e1:d8:a4:91:fa:95:2b:c5:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:15:2B:F3:BF:BA:AA:B7:81:1D:B4:A6:48:7B:DC:B1:18:7A:41:EF
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/SxUr87-6qreBHbSmSHvcsRh6Qe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.68.0/24
153.52.121.0/24
163.245.42.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ad:22:f0:f7:08:d4:fc:4f:8d:1c:22:de:06:d2:da:43:db:
b4:63:0f:89:9f:00:df:69:0c:7f:a5:0b:bb:f2:20:3d:43:0b:
dd:95:4d:af:9c:d7:6b:3c:57:16:f6:7e:c5:73:06:81:a9:fa:
03:e8:46:08:01:d8:a9:87:41:89:37:09:cf:3a:11:03:06:3a:
35:db:c5:d8:c9:37:9e:7a:76:af:84:aa:21:fe:5f:c8:45:e6:
46:4b:ef:e9:14:2d:27:35:b9:49:d4:a4:b9:5a:4c:b2:db:1d:
f1:f0:a9:72:2a:05:e7:f1:35:0c:f9:1e:a3:59:34:e6:93:2a:
67:27:3c:ab:bd:05:0b:80:ea:e2:56:27:53:97:bb:38:7a:e4:
22:d3:81:77:9e:ed:ff:e5:11:5c:50:a9:e9:a8:bd:4c:12:cc:
c7:4a:b9:62:b6:ab:4f:2c:e0:9b:1d:44:b8:c5:13:f8:c8:04:
6e:26:95:f1:af:fa:53:f5:53:49:d3:b8:04:a8:79:2e:2e:61:
20:3d:b2:66:b5:f9:19:68:dc:a6:bb:d3:41:d6:06:74:b2:b0:
2a:50:d2:71:b1:75:3a:a7:ee:8a:ac:70:02:f0:09:6c:43:5d:
2a:33:18:14:a3:55:a8:a6:71:b3:a0:a6:67:72:a3:fc:b6:1c:
37:86:bb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:05 2026 by rpki-client