Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/aSJWg-ST9UbPPrb5b9vxQEg4f14.roa
File: aSJWg-ST9UbPPrb5b9vxQEg4f14.roa (raw, json)
Hash identifier: t6CqIivI9aWAxRrG4obyLA56AFTqcrV9T1aH7FVKdtg=
Subject key identifier: 69:22:56:83:E4:93:F5:46:CF:3E:B6:F9:6F:DB:F1:40:48:38:7F:5E
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A139964ADC6D3350EA5AC17BB2E1722A2A
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/aSJWg-ST9UbPPrb5b9vxQEg4f14.roa
Signing time: Wed 14 Oct 2026 08:45:13 +0000
ROA not before: Wed 14 Oct 2026 08:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 153.52.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:96:4a:dc:6d:33:50:ea:5a:c1:7b:b2:e1:72:2a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 14 08:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69225683e493f546cf3eb6f96fdbf14048387f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:7c:85:c2:b6:b7:47:52:b7:fd:70:c6:f9:
32:9d:bb:09:b7:05:96:c5:c7:dd:c8:24:37:53:f0:
ad:5c:0f:b2:1b:0e:98:98:06:4b:15:9f:09:17:f9:
ae:3f:96:b1:7e:48:91:95:c7:0c:80:1e:18:06:be:
5c:86:24:f8:29:7e:7c:2b:01:b6:b8:aa:ac:a0:3f:
97:c1:9f:4a:c1:fd:bf:9d:62:7e:85:86:0f:15:f4:
c5:9a:4a:ac:32:37:07:28:4c:17:2f:72:7a:dc:25:
56:99:e5:e7:ca:cc:d3:3a:b6:cf:52:be:43:a0:1a:
ba:1a:ca:9c:58:32:58:f4:2c:90:1d:62:4b:70:67:
1e:d4:cc:ff:77:3d:d5:2c:bb:b3:59:a1:65:99:ee:
53:ab:c2:f8:51:15:0a:7d:fe:43:b6:f5:41:b5:5c:
81:fe:87:f3:a3:da:f0:5e:8a:a1:86:e3:81:71:33:
52:f0:17:f2:e5:a5:18:8b:17:c5:b6:40:be:19:1c:
4d:ee:68:5a:b7:cf:27:78:39:25:0b:64:97:0f:c2:
40:08:9a:85:9f:fe:4e:29:17:4e:fc:10:c4:da:cf:
49:c7:4f:2f:98:a9:9f:09:65:c4:59:ec:92:5c:1c:
4e:34:6f:09:26:12:6f:8b:7b:d5:87:ae:34:e5:73:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:22:56:83:E4:93:F5:46:CF:3E:B6:F9:6F:DB:F1:40:48:38:7F:5E
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/aSJWg-ST9UbPPrb5b9vxQEg4f14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.64.0/24
Signature Algorithm: sha256WithRSAEncryption
55:db:6e:36:ac:0f:fa:95:2f:c3:a9:a8:e3:7f:2c:52:d2:18:
3e:7e:cf:28:32:2f:27:c0:cb:9a:1a:6f:a2:67:a7:7c:96:90:
f5:9d:71:39:b2:9c:00:50:ce:26:c2:3e:0c:72:8e:2e:81:89:
f6:63:fb:13:83:cd:a8:ab:e9:32:f3:2f:08:57:2c:ea:73:9d:
3a:63:be:89:35:38:2c:56:e5:45:6f:0b:4f:70:9b:a0:32:14:
3e:8e:e7:23:56:3b:0d:7f:53:88:e2:b5:31:8c:d7:24:30:58:
45:72:5d:3c:21:c2:13:ed:b1:8f:cf:17:0e:5f:e1:61:5d:58:
48:aa:e7:9e:13:cc:e9:0a:5a:41:a3:71:13:84:4a:fa:e8:6f:
ce:f8:66:e3:a2:04:ec:d6:fc:72:76:06:2e:5b:a5:c8:3c:cd:
c2:b4:cc:d8:3c:e2:bb:49:53:32:69:91:a6:fb:7a:7a:4d:bb:
26:1b:80:bc:9f:7b:01:8f:e9:5a:bb:98:46:76:7d:14:c6:c9:
9a:3f:8e:c9:2f:e2:cd:db:74:85:2d:8c:b1:fb:19:f2:49:29:
7c:14:ae:f1:d8:06:ab:35:73:41:9b:a1:62:a7:f1:2c:49:93:
27:c7:9b:85:98:43:7a:d8:20:1f:a6:f3:c5:ed:62:f8:9d:f5:
7c:58:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:25 2026 by rpki-client