Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/oo_E7sQLI4PkSl03ojkux04Mem0.roa
File: oo_E7sQLI4PkSl03ojkux04Mem0.roa (raw, json)
Hash identifier: gWqODxTdqbdoy/I6WG0DSbd8N/ueBC5ppcq6Y3bsyow=
Subject key identifier: A2:8F:C4:EE:C4:0B:23:83:E4:4A:5D:37:A2:39:2E:C7:4E:0C:7A:6D
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0FD38C3DEDD2AE956CDC4694FA7549300
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/oo_E7sQLI4PkSl03ojkux04Mem0.roa
Signing time: Fri 02 Oct 2026 15:25:50 +0000
ROA not before: Fri 02 Oct 2026 15:25:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214504
IP address blocks: 153.52.96.0/23 maxlen: 23
153.52.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:38:c3:de:dd:2a:e9:56:cd:c4:69:4f:a7:54:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 2 15:25:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a28fc4eec40b2383e44a5d37a2392ec74e0c7a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:6f:3a:40:46:18:53:5e:ab:5e:b3:45:46:
6e:e5:1a:d6:02:d2:ca:5b:75:04:6b:f0:0e:23:1d:
de:c7:50:f8:70:30:21:45:94:3a:f8:7a:9c:75:e2:
17:84:62:94:36:fd:e6:18:88:a6:ec:eb:54:b7:f0:
a1:9d:b0:95:87:c8:09:44:95:e6:25:fd:28:6c:29:
d1:f2:89:79:28:5f:70:9a:97:4a:bb:95:ab:9e:e2:
c6:e2:1e:17:fc:4a:d3:bd:8d:eb:e6:56:fd:9e:1a:
10:5f:de:a5:f1:5b:10:1b:99:4b:0d:e7:54:b4:b3:
72:e2:dc:d6:7e:82:cb:d5:8b:ae:f6:89:6f:24:42:
e6:87:7c:ad:64:17:4e:7f:f0:92:32:6f:64:3d:52:
f6:f4:1a:9f:41:a5:c5:a8:8c:70:36:54:cd:89:41:
a4:d1:bd:3d:9f:b4:e4:32:76:b2:7f:06:75:0d:05:
d6:3f:f0:74:ff:1e:36:ed:21:f0:3d:1f:0d:36:7b:
da:04:0e:fe:84:5f:f9:1e:ec:af:2e:45:08:75:30:
55:8d:2f:35:c8:fa:f6:61:bc:63:7a:a8:ce:2a:ce:
aa:9f:4c:76:dc:f8:5f:91:7c:a9:bc:75:e4:0b:18:
fb:20:44:a1:9f:b2:5f:4d:79:87:d5:2f:03:6d:fc:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:C4:EE:C4:0B:23:83:E4:4A:5D:37:A2:39:2E:C7:4E:0C:7A:6D
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/oo_E7sQLI4PkSl03ojkux04Mem0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.96.0/23
153.52.100.0/23
Signature Algorithm: sha256WithRSAEncryption
90:ca:76:b9:d9:37:1f:e8:d5:a5:56:04:9f:c4:8a:e9:87:0c:
86:5d:d8:76:70:94:31:98:4e:94:ba:ce:7e:b1:f7:54:95:3d:
6a:80:54:f6:2c:35:ba:2d:cf:9f:40:d7:cd:53:8d:a3:32:8c:
75:1d:de:d4:7e:8e:46:25:99:be:22:d5:0f:fd:85:f8:2b:b9:
ce:28:ac:d9:99:eb:c9:f3:c2:f4:f4:f9:56:a3:17:bc:02:18:
3a:0f:b2:f9:7c:6d:18:5b:72:95:e0:df:f9:1a:50:91:e9:35:
2d:71:56:e0:19:53:06:02:85:89:ee:9e:4b:5f:4f:12:56:2f:
5f:22:ca:61:52:0b:77:35:0b:90:3d:22:47:da:a9:be:36:9c:
74:17:60:bc:5b:ef:fc:a4:14:ec:25:0d:2b:06:9e:2f:13:24:
27:b4:33:09:ba:a0:5d:74:b2:da:68:40:4a:6e:69:02:e1:ac:
55:44:b7:76:7f:73:1f:e9:00:5b:b2:b6:ac:0f:ee:6e:a5:9f:
32:96:4e:4a:cd:ac:43:d6:da:ad:c6:ee:78:86:de:bf:d8:18:
c0:8e:7c:be:3b:e2:80:c3:2e:7f:b4:1b:7d:9d:d7:98:e1:a5:
0a:e0:b2:4c:dc:3b:a7:3f:3e:12:27:54:38:ad:28:27:8a:fc:
ff:45:01:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:40:48 2026 by rpki-client