Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/eZZ0l7D4omH03M4g5G_BNS9pD6Y.roa
File: eZZ0l7D4omH03M4g5G_BNS9pD6Y.roa (raw, json)
Hash identifier: 8pTl3SZV9QsJJqkB1lJ+Gbe/ieltVk4M0QLx7Dj22V8=
Subject key identifier: 79:96:74:97:B0:F8:A2:61:F4:DC:CE:20:E4:6F:C1:35:2F:69:0F:A6
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0F276FF2CB120172732EBEA717BBA280A
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/eZZ0l7D4omH03M4g5G_BNS9pD6Y.roa
Signing time: Wed 30 Sep 2026 13:17:59 +0000
ROA not before: Wed 30 Sep 2026 13:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218533
IP address blocks: 153.52.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:76:ff:2c:b1:20:17:27:32:eb:ea:71:7b:ba:28:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 30 13:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79967497b0f8a261f4dcce20e46fc1352f690fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:36:7d:a0:07:e2:48:23:e7:4a:2a:29:04:
94:51:d7:03:05:b3:4e:6b:52:7b:42:86:8b:6b:a6:
1e:01:a7:80:15:f5:c3:b0:1b:cc:bb:90:5c:ac:bd:
90:75:e4:0e:20:8a:7a:4f:24:ba:8b:4d:ba:8b:f9:
fa:eb:33:02:b6:28:10:ed:a4:ad:41:85:fe:ac:44:
d8:62:bc:e3:a3:d8:62:88:76:eb:43:43:66:6f:0d:
ad:d5:bc:e8:92:da:36:e0:d8:4f:46:2c:cb:df:06:
a3:3b:69:c1:f9:71:f3:3c:51:71:81:82:88:84:12:
ff:fa:72:19:45:c0:fb:fd:df:23:b1:5a:21:7e:a3:
76:b2:eb:c2:c4:48:3f:c8:f0:e5:89:c3:3a:1c:58:
a6:ae:00:db:1b:45:92:29:5c:ea:85:2e:c2:89:5f:
be:1a:71:de:84:e7:f1:75:08:4b:f9:e4:b8:6c:89:
6c:11:97:06:89:58:53:27:8b:67:2b:ce:ee:98:94:
73:1d:9a:64:7d:eb:22:b6:90:e3:7c:e8:8e:58:bf:
1a:7e:2c:31:42:ae:37:03:37:ef:47:e6:f2:55:5a:
26:84:66:a8:85:0e:75:ef:eb:de:88:f8:fe:7b:5b:
96:2b:1b:26:14:54:66:f5:58:79:d9:ab:ff:d8:ac:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:74:97:B0:F8:A2:61:F4:DC:CE:20:E4:6F:C1:35:2F:69:0F:A6
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/eZZ0l7D4omH03M4g5G_BNS9pD6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.70.0/24
Signature Algorithm: sha256WithRSAEncryption
05:24:c6:28:40:57:a4:ef:10:b4:16:2f:96:11:46:18:57:b0:
9d:75:3e:16:62:d3:b6:b5:a6:da:52:9c:6d:f9:28:14:e9:6c:
4f:f2:32:3e:8f:f4:46:e6:ea:5b:e2:e3:53:9b:96:a1:f3:57:
30:04:1d:ca:f1:fb:58:93:43:d5:4d:3e:ce:4b:c2:0d:cb:ee:
e8:ab:5c:71:f1:97:96:7d:1a:e9:b0:bc:04:6d:2e:d9:1a:d8:
5c:a7:bf:f9:0a:c9:22:97:a0:ae:e5:16:8d:e2:9b:f5:36:eb:
88:37:83:12:fc:df:6e:3f:80:d7:62:03:3c:dc:a3:82:61:f8:
75:07:8d:29:37:e3:09:de:e8:ef:26:a5:50:a1:b9:0e:12:ca:
2f:02:1a:19:b5:4a:a3:67:f7:d2:cb:73:59:b3:83:a3:6b:93:
6c:8d:d3:20:5e:9d:2e:8a:26:1b:32:95:e3:a3:60:b5:3b:6e:
8a:bf:12:b5:ed:dd:91:76:5e:98:99:70:bb:fc:bd:e1:ea:e2:
7f:2c:70:2a:d8:19:1d:de:18:43:bf:c1:9c:cd:0c:57:06:d6:
dc:a2:1b:e8:96:c6:71:d7:4b:0e:02:6e:fe:a0:c0:82:2c:db:
5d:05:f7:f4:fb:8a:ee:ea:11:84:41:4e:be:c4:87:6d:90:6b:
8a:b4:27:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDydv8ssSAXJzLr6nF7uigKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYwOTMwMTMxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTk2NzQ5N2IwZjhhMjYxZjRkY2NlMjBlNDZmYzEzNTJmNjkwZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv202faAH4kgj50oqKQSUUdcDBbNO
a1J7QoaLa6YeAaeAFfXDsBvMu5BcrL2QdeQOIIp6TyS6i026i/n66zMCtigQ7aSt
QYX+rETYYrzjo9hiiHbrQ0Nmbw2t1bzokto24NhPRizL3wajO2nB+XHzPFFxgYKI
hBL/+nIZRcD7/d8jsVohfqN2suvCxEg/yPDlicM6HFimrgDbG0WSKVzqhS7CiV++
GnHehOfxdQhL+eS4bIlsEZcGiVhTJ4tnK87umJRzHZpkfesitpDjfOiOWL8afiwx
Qq43AzfvR+byVVomhGaohQ517+veiPj+e1uWKxsmFFRm9Vh52av/2KxD1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHmWdJew+KJh9NzOIORvwTUvaQ+mMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvZVpaMGw3RDRvbUgwM000ZzVHX0JOUzlwRDZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmTRGMA0G
CSqGSIb3DQEBCwUAA4IBAQAFJMYoQFek7xC0Fi+WEUYYV7CddT4WYtO2tabaUpxt
+SgU6WxP8jI+j/RG5upb4uNTm5ah81cwBB3K8ftYk0PVTT7OS8INy+7oq1xx8ZeW
fRrpsLwEbS7ZGthcp7/5Cskil6Cu5RaN4pv1NuuIN4MS/N9uP4DXYgM83KOCYfh1
B40pN+MJ3ujvJqVQobkOEsovAhoZtUqjZ/fSy3NZs4Oja5NsjdMgXp0uiiYbMpXj
o2C1O26KvxK17d2Rdl6YmXC7/L3h6uJ/LHAq2Bkd3hhDv8GczQxXBtbcohvolsZx
10sOAm7+oMCCLNtdBff0+4ru6hGEQU6+xIdtkGuKtCfY
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:26 2026 by rpki-client