Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/iBXMYCC_Ji9k91omX7Kf05LTquM.roa
File: iBXMYCC_Ji9k91omX7Kf05LTquM.roa (raw, json)
Hash identifier: WsS8+KYQ7lEr0gz91k5kTOUAL8rkR/wrgSF0++gazAc=
Subject key identifier: 88:15:CC:60:20:BF:26:2F:64:F7:5A:26:5F:B2:9F:D3:92:D3:AA:E3
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0ECDD41C02D92884079D1AC1E8C794965
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/iBXMYCC_Ji9k91omX7Kf05LTquM.roa
Signing time: Tue 29 Sep 2026 11:11:58 +0000
ROA not before: Tue 29 Sep 2026 11:11:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219177
IP address blocks: 153.52.81.0/24 maxlen: 24
163.245.34.0/23 maxlen: 23
163.245.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:dd:41:c0:2d:92:88:40:79:d1:ac:1e:8c:79:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 29 11:11:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8815cc6020bf262f64f75a265fb29fd392d3aae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:c1:53:8c:0a:3f:99:f0:b6:a4:99:e4:45:
a1:53:cb:a3:63:28:7f:0a:a0:8d:bc:2f:ae:75:ae:
72:f9:76:ba:96:f2:0d:f4:5e:b4:26:f0:7a:5e:df:
50:cc:7b:f4:72:3e:cc:0c:bf:06:a8:a3:5e:87:1d:
a3:d9:62:a3:ac:ba:03:7f:cc:8f:09:74:72:bf:4d:
f7:b2:ca:74:1e:65:71:c7:a2:8b:72:9f:ae:07:02:
c3:bc:5b:06:98:5f:66:3e:c0:84:4b:c9:00:da:34:
c6:79:ec:cb:01:57:89:87:d0:63:96:dd:37:85:a4:
77:eb:88:a9:f9:f6:9c:a6:8a:25:a9:60:2f:4c:3e:
f1:7d:48:c9:b6:72:75:3f:10:a9:f9:e9:1b:29:32:
34:b1:02:9f:b1:d9:55:43:da:d0:bc:a6:4c:c6:e1:
cc:23:e5:33:3e:10:05:1b:17:66:69:28:48:13:44:
df:49:24:85:fd:36:00:ab:a8:db:c9:8f:33:2c:31:
31:67:2d:51:4a:e3:3e:7c:ed:b9:2c:6a:4f:0f:66:
7d:00:ed:92:05:8d:b4:aa:cf:c5:1d:65:99:1d:f3:
3d:a8:d8:a4:0e:a2:59:40:ee:dc:35:c1:25:58:58:
a1:80:8f:ed:59:5e:39:37:cb:48:ba:42:36:bd:00:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:15:CC:60:20:BF:26:2F:64:F7:5A:26:5F:B2:9F:D3:92:D3:AA:E3
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/iBXMYCC_Ji9k91omX7Kf05LTquM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.81.0/24
163.245.34.0-163.245.37.255
Signature Algorithm: sha256WithRSAEncryption
25:92:f1:9f:ce:25:35:1a:06:27:2b:d0:1a:cd:a2:a5:d0:da:
4f:65:d0:b7:a3:ed:46:7d:4a:5c:bf:28:dd:35:4f:da:dc:c6:
0f:71:76:ca:6a:4f:6a:e1:2d:59:a4:42:67:98:a8:3c:9c:1f:
d8:52:56:47:a9:3e:b8:26:2e:49:b8:76:0a:c4:fe:03:14:40:
c1:d8:80:b6:06:4f:cd:15:f9:c5:61:5e:03:45:c1:60:29:ca:
7b:ab:f0:57:48:a8:5e:6c:fb:22:e3:b5:e5:d7:b4:6b:67:e3:
49:52:21:77:0a:27:01:d0:80:68:f5:a7:8d:01:b3:e8:55:d6:
b3:37:ca:88:47:a0:58:6c:18:0a:ba:d9:4a:44:15:6e:9e:f6:
e1:b8:14:98:a4:9c:fe:c7:3c:6a:d6:ea:dd:b7:49:25:7e:f5:
af:2f:b8:a0:9b:59:2b:a9:bc:90:0b:81:1c:7f:17:34:3f:25:
90:85:6f:a2:ee:45:e4:c8:2b:0a:09:6d:4f:1c:6f:9c:f2:a9:
32:f8:e9:50:a8:d9:38:55:84:f6:73:89:5c:62:4b:c2:a2:e4:
e3:01:1a:f0:6c:b6:f0:12:6b:94:08:de:f4:6f:ef:53:00:f1:
f4:cc:ac:e3:ac:a1:4e:41:05:78:07:b1:a7:6f:a0:22:50:89:
56:9e:76:ff
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaDs3UHALZKIQHnRrB6MeUllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYwOTI5MTExMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODE1Y2M2MDIwYmYyNjJmNjRmNzVhMjY1ZmIyOWZkMzkyZDNhYWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2nBU4wKP5nwtqSZ5EWhU8ujYyh/
CqCNvC+uda5y+Xa6lvIN9F60JvB6Xt9QzHv0cj7MDL8GqKNehx2j2WKjrLoDf8yP
CXRyv033ssp0HmVxx6KLcp+uBwLDvFsGmF9mPsCES8kA2jTGeezLAVeJh9Bjlt03
haR364ip+facpoolqWAvTD7xfUjJtnJ1PxCp+ekbKTI0sQKfsdlVQ9rQvKZMxuHM
I+UzPhAFGxdmaShIE0TfSSSF/TYAq6jbyY8zLDExZy1RSuM+fO25LGpPD2Z9AO2S
BY20qs/FHWWZHfM9qNikDqJZQO7cNcElWFihgI/tWV45N8tIukI2vQD2LwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIgVzGAgvyYvZPdaJl+yn9OS06rjMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvaUJYTVlDQ19KaTlrOTFvbVg3S2YwNUxUcXVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAmTRRMAwD
BAGj9SIDBAGj9SQwDQYJKoZIhvcNAQELBQADggEBACWS8Z/OJTUaBicr0BrNoqXQ
2k9l0Lej7UZ9Sly/KN01T9rcxg9xdspqT2rhLVmkQmeYqDycH9hSVkepPrgmLkm4
dgrE/gMUQMHYgLYGT80V+cVhXgNFwWApynur8FdIqF5s+yLjteXXtGtn40lSIXcK
JwHQgGj1p40Bs+hV1rM3yohHoFhsGAq62UpEFW6e9uG4FJiknP7HPGrW6t23SSV+
9a8vuKCbWSupvJALgRx/FzQ/JZCFb6LuReTIKwoJbU8cb5zyqTL46VCo2ThVhPZz
iVxiS8Ki5OMBGvBstvASa5QI3vRv71MA8fTMrOOsoU5BBXgHsadvoCJQiVaedv8=
-----END CERTIFICATE-----
Generated at Fri Oct 23 18:02:50 2026 by rpki-client