Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/tt7rXqmAYyRN__Anfgn9-2k-W3s.roa
File: tt7rXqmAYyRN__Anfgn9-2k-W3s.roa (raw, json)
Hash identifier: RREs/qSxo2zw08QHSwYOaPPgUpSMSoFcgi5dpAxZ4Qc=
Subject key identifier: B6:DE:EB:5E:A9:80:63:24:4D:FF:F0:27:7E:09:FD:FB:69:3E:5B:7B
Certificate issuer: /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial: 019DAA1115E8A02876D4FBEEBD816B62AA5C
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/tt7rXqmAYyRN__Anfgn9-2k-W3s.roa
Signing time: Mon 20 Apr 2026 08:45:39 +0000
ROA not before: Mon 20 Apr 2026 08:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 153.51.32.0/22 maxlen: 24
153.51.36.0/22 maxlen: 24
153.51.40.0/24 maxlen: 24
153.51.41.0/24 maxlen: 24
153.51.42.0/24 maxlen: 24
153.51.43.0/24 maxlen: 24
153.51.44.0/24 maxlen: 24
153.51.45.0/24 maxlen: 24
153.51.46.0/24 maxlen: 24
153.51.47.0/24 maxlen: 24
153.51.48.0/24 maxlen: 24
153.51.49.0/24 maxlen: 24
153.51.50.0/24 maxlen: 24
153.51.51.0/24 maxlen: 24
153.51.52.0/22 maxlen: 24
153.51.56.0/24 maxlen: 24
153.51.58.0/24 maxlen: 24
153.51.59.0/24 maxlen: 24
153.51.60.0/22 maxlen: 24
153.51.96.0/22 maxlen: 22
153.51.100.0/22 maxlen: 22
153.51.104.0/22 maxlen: 22
153.51.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:11:15:e8:a0:28:76:d4:fb:ee:bd:81:6b:62:aa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Validity
Not Before: Apr 20 08:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6deeb5ea98063244dfff0277e09fdfb693e5b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:fc:d2:cf:21:c1:ab:33:a3:5d:7e:8f:13:
c5:a3:6c:9f:76:f7:a9:ad:ec:83:c2:84:49:dc:a9:
6f:c0:72:6c:c0:b8:fb:ed:22:4b:c5:03:5d:ff:82:
0f:bd:d5:60:d3:41:aa:3c:e1:9d:b2:7f:28:7c:22:
28:53:ad:08:4c:6c:e4:11:af:eb:1a:f6:33:ba:b5:
ba:6c:4c:e3:fe:7d:32:d5:c2:21:1a:07:41:a9:db:
3a:a8:d4:03:66:b2:d8:c3:cd:62:3e:ca:17:09:34:
3d:dd:6a:a8:5f:77:62:5e:32:8f:5b:32:df:a3:32:
48:51:0c:d2:ae:39:68:6b:f6:b7:25:30:f6:57:e7:
d5:e1:2d:ae:eb:4d:74:df:75:46:4a:28:09:d0:3a:
e4:08:cc:6e:46:ae:ba:f7:81:22:f2:df:20:6e:f1:
6b:a1:a4:3f:94:e4:20:a5:ac:0d:11:c0:9b:87:bf:
c8:03:92:13:f8:6f:32:8f:f5:2f:71:ea:ca:04:b0:
d0:2e:bb:5e:a6:e5:47:fd:39:76:2c:1b:99:2e:d7:
2c:bf:1d:fa:71:a1:ea:8c:fb:c4:b4:2e:16:6a:19:
12:7e:f5:88:84:e2:1d:2c:46:a9:32:cf:f3:1b:6c:
fa:c0:b8:24:46:9c:8c:50:97:a5:20:b7:16:4b:d5:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DE:EB:5E:A9:80:63:24:4D:FF:F0:27:7E:09:FD:FB:69:3E:5B:7B
X509v3 Authority Key Identifier:
keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/tt7rXqmAYyRN__Anfgn9-2k-W3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.32.0-153.51.56.255
153.51.58.0-153.51.63.255
153.51.96.0/20
Signature Algorithm: sha256WithRSAEncryption
90:4f:22:6f:32:7b:77:22:13:3f:7e:84:c6:86:2b:39:44:2f:
d3:70:0a:1c:64:ed:ac:91:8b:3f:3c:4b:73:44:b2:59:de:07:
3c:bf:bf:0d:d0:66:8b:ec:a4:76:bb:bb:99:df:25:7f:7a:e8:
b6:6a:0f:1a:33:9a:90:d0:5b:91:9e:92:4f:4b:a5:99:eb:14:
36:e1:70:66:22:d8:d9:3e:f0:a8:b7:4e:23:27:22:15:91:4a:
37:c6:3b:ad:aa:5f:ca:a8:7a:ca:f9:a1:b8:2f:d5:18:fc:ac:
f0:7b:c6:25:67:e1:cb:1a:e1:38:bc:1a:50:65:b8:ef:8f:1a:
ff:15:d2:48:0b:d3:76:1f:b3:5d:e2:cd:7d:78:d0:99:aa:50:
7a:d5:28:2a:7f:8f:2d:22:39:d0:69:b8:c2:9b:29:2a:60:07:
00:92:06:d1:9a:9d:5d:8d:96:65:b3:80:8d:bd:06:05:c3:5c:
cc:ef:9b:c7:96:c2:6d:a9:14:39:7d:a6:2a:c0:c6:12:31:04:
20:bf:62:41:24:48:ab:d4:45:c8:00:0d:08:78:f3:20:62:1a:
39:65:35:91:bf:b0:b4:86:cf:3d:6b:8d:23:48:80:2e:98:a9:
12:fe:47:b6:43:12:de:a7:b3:0a:5b:7d:a8:b9:5d:b9:ac:ba:
22:b8:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:35 2026 by rpki-client