Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/hLjzhC6zlW-8JNijhQDWdHUx0bs.roa
File: hLjzhC6zlW-8JNijhQDWdHUx0bs.roa (raw, json)
Hash identifier: 2UJC5xVp6d8lEhQO2ClkfoFryaKXGhRJ5WI4vM07GO8=
Subject key identifier: 84:B8:F3:84:2E:B3:95:6F:BC:24:D8:A3:85:00:D6:74:75:31:D1:BB
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A013B24E835A147F2FF930A5EA2D539322
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/hLjzhC6zlW-8JNijhQDWdHUx0bs.roa
Signing time: Tue 18 Aug 2026 07:07:27 +0000
ROA not before: Tue 18 Aug 2026 07:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219177
IP address blocks: 153.52.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:b2:4e:83:5a:14:7f:2f:f9:30:a5:ea:2d:53:93:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Aug 18 07:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84b8f3842eb3956fbc24d8a38500d6747531d1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:4b:af:0d:dd:55:9c:91:41:aa:13:e0:ae:
ad:cc:ec:9d:ba:c7:cc:7d:e7:1f:89:08:d6:aa:e4:
4e:15:cd:3d:11:a5:c0:d9:0f:d8:94:d7:ad:68:74:
d5:b1:e3:c6:65:52:5f:6e:2b:b7:fa:b8:df:2e:cb:
32:f3:eb:31:b9:a2:65:d1:fc:1f:af:72:35:df:7b:
a7:7d:57:30:76:f1:3c:5e:69:ec:b6:2e:c5:8b:57:
62:9c:42:9f:e5:69:0d:90:79:ba:49:af:ab:79:11:
c1:a7:f8:c7:1c:3e:7a:35:82:07:a8:bd:58:17:4e:
06:5c:9a:3b:0f:25:e8:ce:cd:b0:f1:20:3c:0d:09:
5d:bd:2a:f0:42:b2:24:4f:44:72:46:1e:3e:19:a1:
cb:27:7f:78:63:b7:09:d0:7d:31:b3:81:10:b5:2b:
bc:01:a3:ab:63:25:42:51:e7:d7:d4:d1:ad:f8:12:
9e:ac:06:db:f4:df:c0:0c:8c:0a:49:72:72:4a:49:
3f:7c:16:2b:b6:4e:ad:f1:23:50:28:24:2c:ca:e4:
29:22:99:4c:e0:ab:18:f5:ad:e5:ae:26:01:67:f2:
44:2b:a4:6f:e8:b5:e9:01:67:27:ae:59:81:47:a1:
dc:a0:5a:c6:13:60:44:09:c4:ca:d5:39:90:9b:5c:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B8:F3:84:2E:B3:95:6F:BC:24:D8:A3:85:00:D6:74:75:31:D1:BB
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/hLjzhC6zlW-8JNijhQDWdHUx0bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.81.0/24
Signature Algorithm: sha256WithRSAEncryption
84:56:6c:8a:b6:63:48:a0:83:2c:5a:02:55:e6:10:ef:a0:87:
c5:df:91:02:49:17:21:a6:7b:10:6e:5b:dc:94:1c:00:b0:f5:
1c:07:52:15:32:40:3a:97:1b:d0:e8:6e:d0:a5:26:43:65:e3:
36:11:6b:a0:a9:52:7e:e8:dd:1b:9d:d0:a6:b6:ae:1e:a2:be:
96:f9:e6:dd:ee:40:8d:6e:10:77:2c:86:13:7b:36:b0:c9:c3:
7d:a9:46:5d:a1:1a:2a:6e:53:4d:71:8c:31:11:19:f4:7a:64:
fa:76:89:64:e4:88:13:75:12:9a:1f:e4:c1:c8:d4:4b:01:0b:
1d:68:ba:1f:b5:2a:80:07:5f:5b:1c:6c:2e:14:21:c0:c9:63:
1a:4b:49:cc:a3:7e:53:5e:5b:6a:1a:17:eb:0f:45:d2:b1:16:
ea:69:8e:02:aa:36:4e:eb:fc:a7:27:26:c3:3f:55:05:21:e2:
4a:89:93:0b:b9:1b:e6:16:63:c7:21:33:d1:e8:2c:eb:dd:5c:
8e:ae:7f:eb:76:80:71:04:b9:48:05:2e:92:d4:9a:d4:f0:b9:
11:49:b3:e2:ce:4a:bd:dc:77:ec:8e:41:b0:09:c7:52:45:67:
56:2a:a5:bf:bf:d6:57:9b:02:e2:c6:98:64:09:ca:a0:6d:82:
5a:56:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:30:49 2026 by rpki-client