Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/XPJ8M6LGq48OTmV9cU3bs9WvMpE.roa
File: XPJ8M6LGq48OTmV9cU3bs9WvMpE.roa (raw, json)
Hash identifier: P9U4NbPjrTWCDlLyYW1rCv/+UAPZSwzVRyzxAdGUpPg=
Subject key identifier: 5C:F2:7C:33:A2:C6:AB:8F:0E:4E:65:7D:71:4D:DB:B3:D5:AF:32:91
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0ECD9E0F2B8B13780E27B51DC082EAF3D
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/XPJ8M6LGq48OTmV9cU3bs9WvMpE.roa
Signing time: Tue 29 Sep 2026 11:08:16 +0000
ROA not before: Tue 29 Sep 2026 11:08:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 153.52.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d9:e0:f2:b8:b1:37:80:e2:7b:51:dc:08:2e:af:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 29 11:08:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cf27c33a2c6ab8f0e4e657d714ddbb3d5af3291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:e5:52:e0:79:90:ed:79:17:58:a6:d9:bd:
f0:e0:c8:a4:fe:bc:36:26:57:df:09:b2:25:14:f0:
f4:10:42:a6:5e:b7:d0:67:69:b9:8d:94:2a:1a:37:
4a:62:6d:59:5e:ad:f8:b6:d8:b8:94:40:d5:07:7e:
a3:7a:e0:8e:58:dd:b1:c7:60:4d:10:1b:14:58:3b:
24:46:19:4f:fd:85:3d:14:92:e6:5f:09:95:d5:70:
fb:35:38:82:d7:20:ba:3a:b7:6f:43:62:f1:8e:86:
2d:7b:82:69:80:dc:8b:67:51:61:70:d9:be:a5:86:
1d:45:68:f1:cf:9f:3c:38:20:d0:2a:cd:ea:bf:14:
03:e2:91:bf:81:5d:38:a2:6f:f7:c3:e0:29:7b:99:
47:00:e3:1b:70:b7:c7:11:8f:02:6a:6b:7d:43:44:
5e:12:45:19:39:f6:c7:ee:c8:4d:1b:b3:88:bc:38:
08:6d:eb:4f:d9:cc:a6:f9:9f:9d:0d:27:a9:28:ae:
fb:67:7b:a0:a1:ea:f8:d5:e3:9b:36:ec:4d:67:41:
96:cf:dd:c5:20:ab:e8:55:12:9d:05:dd:30:68:35:
28:71:2a:07:89:37:90:2a:70:3a:75:66:ed:6e:b9:
14:2d:ce:24:f1:7d:e5:f0:b2:b5:ac:80:2a:8e:21:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F2:7C:33:A2:C6:AB:8F:0E:4E:65:7D:71:4D:DB:B3:D5:AF:32:91
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/XPJ8M6LGq48OTmV9cU3bs9WvMpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.72.0/22
Signature Algorithm: sha256WithRSAEncryption
79:3a:87:ce:d4:12:58:34:d9:f4:2a:e4:65:4f:60:54:74:a8:
76:41:9a:b3:c8:b6:0f:c4:73:e3:52:9f:7a:a4:43:cb:3f:36:
3c:56:84:cd:1d:6b:37:23:cd:9d:98:69:41:0e:5f:4b:01:33:
ee:f7:d0:87:af:9d:74:7c:bf:ae:01:03:b1:37:30:06:32:03:
27:4c:99:43:7e:ae:40:08:64:4a:1a:96:d6:09:bb:c9:a3:e1:
c6:97:02:82:c1:c3:67:88:92:45:13:08:41:a9:bf:f1:b4:4e:
1d:de:a2:16:99:4e:f7:8b:4c:5a:0c:91:89:b3:0c:dd:d9:a8:
cf:02:09:4b:b4:23:c2:4b:78:9b:fd:f8:c7:c5:5c:86:df:7a:
d0:8a:42:8f:ce:49:5f:9b:44:86:aa:42:c7:07:d3:45:53:e2:
f7:94:84:f4:cb:07:f3:f9:af:8d:83:85:58:27:d1:13:fb:64:
fe:47:02:aa:e4:ea:d9:63:2e:3a:09:67:ae:7d:b6:ca:91:9a:
49:ca:7d:d0:d4:d7:9d:ae:d9:3a:54:72:79:13:a5:41:52:64:
71:f7:fb:ae:dc:0b:35:34:33:46:90:9d:5e:86:26:39:61:33:
1b:7e:f4:58:9a:d0:06:c6:3e:eb:c5:8b:68:51:ed:04:90:30:
64:bc:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:43 2026 by rpki-client