Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/nfEgflgRFjk1frdU0DWH-m7ZHDY.roa
File: nfEgflgRFjk1frdU0DWH-m7ZHDY.roa (raw, json)
Hash identifier: m8FdhhNoZTve0rqbQg7m52Rp3F8V99mDiW1MipX2iMk=
Subject key identifier: 9D:F1:20:7E:58:11:16:39:35:7E:B7:54:D0:35:87:FA:6E:D9:1C:36
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A1203F33F8094A446D7CEE1E5D43B3F1FF
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/nfEgflgRFjk1frdU0DWH-m7ZHDY.roa
Signing time: Fri 09 Oct 2026 10:39:35 +0000
ROA not before: Fri 09 Oct 2026 10:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30893
IP address blocks: 153.52.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:3f:33:f8:09:4a:44:6d:7c:ee:1e:5d:43:b3:f1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 9 10:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9df1207e58111639357eb754d03587fa6ed91c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:a1:c6:4c:b1:9b:32:3f:d5:d5:9d:28:00:
23:77:e2:1f:3a:d7:ce:af:07:58:84:f8:92:5a:7a:
30:a3:56:de:b1:3c:39:0e:ad:01:da:b6:ba:f6:ee:
ab:b7:5e:b1:f5:36:92:30:f9:55:14:38:2f:df:7a:
15:80:b0:0d:03:ae:e5:00:c6:01:fc:fb:0d:cb:7e:
34:55:0d:bf:34:98:01:09:b9:55:98:8f:c5:0a:4d:
c4:96:5a:7b:98:31:a8:83:3f:11:d0:fc:22:d4:51:
b0:8b:91:b0:4a:5c:68:58:59:d3:69:b7:3c:12:42:
fb:fa:be:80:b5:b7:f6:93:ee:e7:9c:15:ba:3c:5b:
2e:25:2e:45:d7:18:fd:34:75:cf:fa:73:94:a7:0e:
74:59:45:22:5d:c6:46:82:ac:c5:03:b0:ce:de:59:
6a:67:51:b4:84:39:85:5f:89:36:d3:91:64:85:c7:
a1:45:7b:1b:44:66:fe:c1:fb:db:4b:32:74:ef:3f:
8b:7c:2a:0c:2c:80:14:7b:f2:c0:c0:12:31:9e:37:
93:51:39:b1:32:5e:2e:97:0f:3f:7d:b3:e6:53:f8:
d5:a9:06:f7:1d:01:c5:3c:0a:30:ca:96:72:b1:24:
15:e8:b0:e5:07:74:27:17:be:c2:b8:33:58:99:f5:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F1:20:7E:58:11:16:39:35:7E:B7:54:D0:35:87:FA:6E:D9:1C:36
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/nfEgflgRFjk1frdU0DWH-m7ZHDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.86.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4d:d1:d2:b6:0f:7d:09:97:ab:c2:fd:b1:e8:ac:7b:c2:b7:
da:20:95:6a:d1:fa:0f:3c:25:e6:01:10:58:2d:7c:f4:3f:aa:
21:5e:a8:3c:44:d5:c1:f0:a2:61:86:a4:1f:11:fd:75:fd:35:
39:c8:77:2c:f3:1e:bb:83:e3:ec:ec:cf:a8:b3:8c:e3:b3:34:
57:e9:61:16:17:97:c2:90:33:e1:de:27:b0:f4:d5:65:14:3e:
ea:5c:4d:fd:cd:a3:b0:a7:24:1c:e1:b3:85:2f:b1:59:f1:3b:
37:a0:66:c8:c9:65:65:da:0a:57:55:08:a5:14:33:d3:5c:69:
dc:8f:9a:d3:c7:26:57:39:dc:92:4a:6e:d2:86:cf:35:ab:ea:
24:95:6d:a5:31:d5:82:e8:7b:71:f2:89:94:09:c4:77:0b:cb:
9a:69:c6:f2:23:2e:17:30:e5:23:ab:fe:c0:a4:d0:9c:ef:42:
f7:1b:b5:95:69:eb:25:2c:03:3d:26:51:10:10:7d:ad:c0:b5:
0e:87:1c:3d:7d:a7:3a:67:c3:70:9c:fd:f4:90:17:c8:bc:95:
41:72:fa:f6:c5:b1:91:68:9c:9f:5c:4d:74:18:db:9a:81:c9:
6e:89:43:ae:ac:94:f2:b5:86:fe:40:43:d9:5c:d9:a5:da:5b:
50:4d:ab:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEgPzP4CUpEbXzuHl1Ds/H/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYxMDA5MTAzOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGYxMjA3ZTU4MTExNjM5MzU3ZWI3NTRkMDM1ODdmYTZlZDkxYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH6hxkyxmzI/1dWdKAAjd+IfOtfO
rwdYhPiSWnowo1besTw5Dq0B2ra69u6rt16x9TaSMPlVFDgv33oVgLANA67lAMYB
/PsNy340VQ2/NJgBCblVmI/FCk3Ellp7mDGogz8R0Pwi1FGwi5GwSlxoWFnTabc8
EkL7+r6Atbf2k+7nnBW6PFsuJS5F1xj9NHXP+nOUpw50WUUiXcZGgqzFA7DO3llq
Z1G0hDmFX4k205FkhcehRXsbRGb+wfvbSzJ07z+LfCoMLIAUe/LAwBIxnjeTUTmx
Ml4ulw8/fbPmU/jVqQb3HQHFPAowypZysSQV6LDlB3QnF77CuDNYmfVJAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ3xIH5YERY5NX63VNA1h/pu2Rw2MB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvbmZFZ2ZsZ1JGamsxZnJkVTBEV0gtbTdaSERZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmTRWMA0G
CSqGSIb3DQEBCwUAA4IBAQBVTdHStg99CZerwv2x6Kx7wrfaIJVq0foPPCXmARBY
LXz0P6ohXqg8RNXB8KJhhqQfEf11/TU5yHcs8x67g+Ps7M+os4zjszRX6WEWF5fC
kDPh3iew9NVlFD7qXE39zaOwpyQc4bOFL7FZ8Ts3oGbIyWVl2gpXVQilFDPTXGnc
j5rTxyZXOdySSm7Shs81q+oklW2lMdWC6Htx8omUCcR3C8uaacbyIy4XMOUjq/7A
pNCc70L3G7WVaeslLAM9JlEQEH2twLUOhxw9fac6Z8NwnP30kBfIvJVBcvr2xbGR
aJyfXE10GNuagcluiUOurJTytYb+QEPZXNml2ltQTatU
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:39 2026 by rpki-client