Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/iOhcul0Pq3-3KM0DuDh6tYCUz8s.roa
File: iOhcul0Pq3-3KM0DuDh6tYCUz8s.roa (raw, json)
Hash identifier: FQvGpFhaa5E8omqPG6e1jTHMTZnzZvsDLP+LKnf4V5Y=
Subject key identifier: 88:E8:5C:BA:5D:0F:AB:7F:B7:28:CD:03:B8:38:7A:B5:80:94:CF:CB
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A154D579D9C5D0F6BE6F5B3BA8DE6C4AF8
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/iOhcul0Pq3-3KM0DuDh6tYCUz8s.roa
Signing time: Mon 19 Oct 2026 15:43:58 +0000
ROA not before: Mon 19 Oct 2026 15:43:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 153.52.95.0/24 maxlen: 24
153.52.103.0/24 maxlen: 24
163.245.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:d5:79:d9:c5:d0:f6:be:6f:5b:3b:a8:de:6c:4a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 19 15:43:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88e85cba5d0fab7fb728cd03b8387ab58094cfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:85:b6:b9:0d:0b:9e:df:9c:6c:24:b8:69:
b3:ac:a9:cb:c5:c1:96:05:db:19:a6:ae:d8:e4:04:
10:6a:92:57:b7:d0:80:d8:7c:0f:f1:d3:3d:66:08:
bb:84:1e:b7:c3:36:57:b2:35:ac:f3:de:91:c9:af:
4b:7e:f2:f8:34:e1:fd:9e:a5:2f:78:4d:28:43:67:
95:71:bd:f0:9a:ca:9b:15:2e:8f:48:e4:a5:6d:69:
9b:93:4a:7e:49:81:e1:57:ff:4c:60:78:cf:46:b8:
22:5f:e0:7e:dc:b3:96:de:c2:95:6b:c5:4f:b2:d1:
47:a0:80:9b:d2:7c:f8:ed:3e:a0:8a:05:12:fc:78:
ba:20:de:92:67:30:b6:eb:11:4d:c1:f9:0f:9a:69:
77:52:d5:17:4a:4d:ab:9e:3f:b3:9c:2c:dd:d9:2d:
4d:bc:6a:15:a2:a1:7d:3c:75:db:96:60:fd:f0:67:
da:54:8a:3f:07:e8:16:98:c5:a8:3a:fb:7a:b4:32:
d4:5f:db:53:87:ff:b2:45:45:8a:3f:ac:7f:c2:2e:
0e:bd:ea:c6:e6:c5:56:8c:14:d9:d1:3c:24:d2:6c:
67:6e:b9:5d:54:28:42:56:7e:18:8e:47:0c:aa:0e:
99:97:6a:08:fa:5c:8b:51:aa:f7:46:41:22:4a:a4:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E8:5C:BA:5D:0F:AB:7F:B7:28:CD:03:B8:38:7A:B5:80:94:CF:CB
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/iOhcul0Pq3-3KM0DuDh6tYCUz8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.95.0/24
153.52.103.0/24
163.245.41.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f6:c2:0f:ca:8f:3b:f6:dd:da:e7:ea:c2:f6:1c:dd:3c:66:
b7:4f:65:32:3c:2a:c1:b0:46:c3:35:2e:82:7f:9e:53:23:2f:
3f:d8:66:22:88:3e:c8:64:0f:6e:66:d4:9d:0f:2d:b7:33:4c:
44:90:bb:7f:ab:aa:db:b1:fc:51:1e:eb:16:e2:43:71:56:03:
03:f7:2b:17:0a:c1:b2:ef:c2:44:9e:d3:69:78:de:69:85:ff:
09:2e:5e:42:82:91:68:68:ec:66:70:80:70:b7:ac:04:19:bc:
27:26:97:ca:42:4f:ff:14:af:b1:53:b5:6f:ae:8a:fe:18:16:
c0:59:8c:7b:46:c5:3f:a5:13:75:08:83:fd:da:71:46:e4:33:
c3:e0:d9:29:75:fc:8c:95:cc:01:cd:b5:c6:60:7e:b3:69:0a:
10:1a:e9:9f:3b:c8:2a:32:31:ad:57:a7:0c:75:f6:d3:15:d4:
f9:e9:a0:d2:9b:3a:d7:75:38:ba:01:48:2f:f5:12:80:9e:35:
19:9c:01:b7:2e:c1:e2:7d:ed:9a:88:08:66:45:77:88:13:26:
4d:ca:cb:81:21:74:08:21:83:85:50:32:0e:dc:41:29:42:47:
51:a0:14:8a:f5:cd:1c:53:9e:7d:51:06:fb:19:d5:48:ba:d8:
99:1d:21:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:08 2026 by rpki-client