Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/pdcRsSRnBKwM6ocmfLezXq0U7H8.roa
File: pdcRsSRnBKwM6ocmfLezXq0U7H8.roa (raw, json)
Hash identifier: 5Pz/2oDU93aMhLDApM0ILeAxkgmvkhAYgUaSGHcpyxo=
Subject key identifier: A5:D7:11:B1:24:67:04:AC:0C:EA:87:26:7C:B7:B3:5E:AD:14:EC:7F
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019EDF1B990728F61B26BBDC8A2168E29145
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/pdcRsSRnBKwM6ocmfLezXq0U7H8.roa
Signing time: Fri 19 Jun 2026 08:59:48 +0000
ROA not before: Fri 19 Jun 2026 08:59:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 153.52.65.0/24 maxlen: 24
153.52.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:1b:99:07:28:f6:1b:26:bb:dc:8a:21:68:e2:91:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jun 19 08:59:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5d711b1246704ac0cea87267cb7b35ead14ec7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0f:9b:af:72:a4:85:15:7b:6b:7c:eb:f6:d9:
1b:98:3d:f5:12:7d:c0:4f:bd:b5:d4:46:6a:56:77:
66:da:df:fc:59:2e:6c:da:77:e2:dd:5f:71:75:2c:
a0:2d:60:46:f9:75:ec:47:36:fa:54:1a:fb:8c:12:
ef:e1:56:78:ec:1a:44:a4:fa:9d:9e:0a:21:82:ad:
8a:b4:73:74:a4:d1:90:26:bf:5a:7c:d6:3a:0b:b3:
99:15:41:51:cc:43:40:60:d5:b4:0f:4f:5b:3b:e6:
cc:ca:22:6f:b2:31:64:ce:78:d9:06:ec:6e:f1:d0:
3c:79:9e:91:c2:27:84:9b:8d:d2:9e:bf:97:fb:c1:
30:76:49:53:23:9d:e0:2c:2c:92:87:bc:6b:73:96:
3e:89:79:95:72:9f:c6:a2:f1:a2:76:83:13:39:86:
1d:3d:fc:43:da:a4:d1:dd:5e:a8:a3:6f:c1:74:34:
17:cb:e9:9d:c5:dc:88:50:85:91:b5:e0:f5:80:12:
ef:25:fa:32:46:83:ea:ab:46:56:8f:c9:30:8d:7f:
6f:bc:eb:01:e1:44:44:62:99:cb:30:44:64:29:6f:
46:38:f2:cb:03:cf:9b:f2:a0:99:11:2f:fa:a6:54:
dd:b0:4d:18:de:77:9a:42:6c:2e:5d:03:86:0a:67:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D7:11:B1:24:67:04:AC:0C:EA:87:26:7C:B7:B3:5E:AD:14:EC:7F
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/pdcRsSRnBKwM6ocmfLezXq0U7H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.65.0/24
153.52.80.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ec:b8:aa:09:9f:4a:c7:2d:c5:f9:48:57:96:81:ce:0f:66:
d5:7c:fd:3a:1c:3c:12:5c:e0:97:ee:9f:5b:0a:e6:f5:f5:75:
12:c7:aa:84:33:de:b8:7a:21:02:66:f7:7b:b4:10:f0:c8:fc:
ad:0b:a4:ef:3a:ee:21:e4:50:c2:b1:ed:e8:ea:46:df:36:28:
98:b3:ea:e3:0b:70:6d:05:70:25:06:18:76:c3:ae:7b:f2:16:
b7:13:1a:3c:11:bd:93:10:e2:fe:60:eb:8b:ad:b1:71:c9:61:
a7:a1:49:71:35:6d:20:a0:47:f3:9d:28:44:19:b3:38:95:4a:
d2:fd:56:69:7c:11:e7:57:41:49:c6:70:a6:ec:95:fc:99:f0:
f7:a7:c0:80:52:d7:0c:69:f8:d5:6d:22:f0:52:41:60:11:ae:
8f:65:da:2b:97:fb:53:47:d7:c0:69:53:23:6d:47:02:67:5a:
ec:fe:4b:24:d2:1c:20:c3:8f:5f:c4:b9:82:aa:08:e6:14:4c:
c0:b8:96:9c:3b:df:a0:0d:86:9d:4d:7c:86:d5:0c:ea:ba:61:
75:80:6f:b5:30:7f:8f:a8:5a:29:64:04:35:a5:02:66:1c:ad:
8e:7e:c2:ab:0d:23:68:e0:28:54:9b:98:dc:69:48:95:da:24:
74:1a:bf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 06:10:18 2026 by rpki-client