Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/rePJlMEYhmjzK6PACosk0jG4VUA.roa
File: rePJlMEYhmjzK6PACosk0jG4VUA.roa (raw, json)
Hash identifier: jjo82d0Sjy7yo7Xv1gp3alfvsr5nKnJjbB4MF/Utek4=
Subject key identifier: AD:E3:C9:94:C1:18:86:68:F3:2B:A3:C0:0A:8B:24:D2:31:B8:55:40
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0F3D5A4A8BD540E0E7A55E16CF38093D9
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/rePJlMEYhmjzK6PACosk0jG4VUA.roa
Signing time: Wed 30 Sep 2026 19:40:59 +0000
ROA not before: Wed 30 Sep 2026 19:40:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205220
IP address blocks: 153.52.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:d5:a4:a8:bd:54:0e:0e:7a:55:e1:6c:f3:80:93:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 30 19:40:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ade3c994c1188668f32ba3c00a8b24d231b85540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:ce:b0:0b:d3:5d:78:8e:0d:b7:ea:f2:88:
36:66:24:2d:7b:ac:9f:d9:e9:aa:04:65:50:39:4b:
45:93:18:88:6c:d0:1a:87:0d:20:6d:cc:a0:ac:d3:
a9:36:72:91:a8:7b:39:de:9e:4d:52:fb:b6:38:35:
43:f2:7b:90:9c:55:b1:2c:12:16:3c:52:99:cd:7b:
b5:89:af:36:4f:4e:21:89:a7:34:36:48:37:e1:2e:
26:91:cc:bf:f2:4d:4b:05:fd:5d:3b:8a:a7:1b:9b:
d2:3a:5d:6b:af:b2:43:5b:04:69:28:53:ce:11:f2:
0f:8f:78:40:79:3e:6c:db:9c:68:d4:0a:fa:7b:f6:
f8:cf:cf:3c:44:3b:68:67:aa:42:ba:ae:ac:ea:6f:
5a:24:d5:fd:59:df:c8:b2:5a:13:9f:f3:a5:25:ba:
e0:28:d4:29:9a:ec:e3:4b:90:5e:f7:a6:02:36:46:
0c:10:e7:f1:04:cd:32:a2:54:52:c3:7b:c7:5e:41:
6e:a2:b8:1d:99:ef:58:41:6a:94:9c:e4:cd:3a:4a:
f2:7d:55:fe:1a:8b:38:84:05:9c:12:41:a1:74:13:
c6:65:9f:e0:28:a4:09:ad:b0:ff:6a:c5:71:04:40:
54:65:f5:f5:93:5f:45:29:09:de:cf:bc:da:57:7d:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:C9:94:C1:18:86:68:F3:2B:A3:C0:0A:8B:24:D2:31:B8:55:40
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/rePJlMEYhmjzK6PACosk0jG4VUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:92:21:84:09:4d:a1:61:7d:77:eb:f6:1a:4f:34:24:60:1b:
fe:62:f5:af:0e:5e:07:d7:f4:be:b7:54:29:8f:37:6e:c8:b0:
c5:91:32:87:2b:0b:cb:e1:3a:df:d6:f2:37:7a:42:07:72:69:
59:35:bb:e7:d3:c3:2d:aa:cb:f8:bc:67:05:92:29:18:15:c9:
f2:d2:d2:0f:96:19:00:1c:63:4f:19:8b:a8:34:ad:99:47:2c:
4a:f0:6a:51:3e:87:b5:fa:bf:99:42:c6:a3:68:ae:60:b8:73:
aa:c2:e9:64:6c:04:17:bb:59:60:b9:fa:5b:d1:6a:0a:76:c2:
f2:0b:c0:d7:15:f3:33:1b:3d:88:10:6e:4f:00:52:b6:72:9a:
3b:f8:0f:44:ba:48:8a:c2:fb:02:19:cc:0e:87:c4:17:1b:09:
d2:51:50:ba:b4:e3:7e:e3:8c:00:2f:cd:fe:63:24:a6:59:39:
da:42:be:10:a6:1e:14:78:b4:d9:ef:da:9f:2b:8e:63:bc:6d:
de:c2:94:8c:7b:d3:8d:46:fe:2f:19:6e:f3:3e:14:b4:6f:9a:
1c:b4:06:96:eb:51:9e:06:3c:39:44:cf:b6:c5:28:37:ea:53:
7d:b4:c9:9a:d2:0f:ae:f0:6a:e1:6c:93:1b:8d:bd:fe:68:54:
9d:0b:49:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 22:15:15 2026 by rpki-client