Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/jVymcQq0h9Y68MDNVjUwnbOR388.roa
File: jVymcQq0h9Y68MDNVjUwnbOR388.roa (raw, json)
Hash identifier: MSWDR6kx5EFIH7f8Omshc4kgj1g3khlr4OFNZuTrRzU=
Subject key identifier: 8D:5C:A6:71:0A:B4:87:D6:3A:F0:C0:CD:56:35:30:9D:B3:91:DF:CF
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 01A0B52F8BC4BEA8F275D99B35553778375B
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/jVymcQq0h9Y68MDNVjUwnbOR388.roa
Signing time: Fri 18 Sep 2026 15:43:07 +0000
ROA not before: Fri 18 Sep 2026 15:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262287
IP address blocks: 152.236.10.0/24 maxlen: 24
152.236.13.0/24 maxlen: 24
152.236.19.0/24 maxlen: 24
152.236.22.0/24 maxlen: 24
152.236.23.0/24 maxlen: 24
152.236.29.0/24 maxlen: 24
152.236.32.0/24 maxlen: 24
152.236.34.0/24 maxlen: 24
152.236.36.0/23 maxlen: 24
152.236.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:2f:8b:c4:be:a8:f2:75:d9:9b:35:55:37:78:37:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Sep 18 15:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d5ca6710ab487d63af0c0cd5635309db391dfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:92:69:c2:b2:87:4e:a0:38:d8:54:4e:1c:
6b:44:d1:35:c0:b6:57:0a:27:83:4a:e1:22:54:02:
9d:4b:a4:ec:81:6d:7a:97:9a:f9:d2:9d:73:d0:6b:
fa:1a:3e:cf:f7:61:f9:ae:5d:42:e2:a1:6b:cd:98:
ce:e5:fa:f0:16:cd:64:cb:a4:95:63:d7:df:73:5e:
6d:a5:6b:09:83:35:ff:c5:10:46:fc:9f:6c:21:ee:
b0:f5:af:e1:bf:54:9d:07:c9:89:a5:42:7a:b9:f5:
90:81:e4:05:65:04:e2:c8:bf:17:90:84:00:78:d6:
9a:91:4c:35:3b:03:31:8e:f9:49:c2:72:09:8d:94:
78:1c:3e:76:62:e5:94:53:c2:ad:84:01:84:35:1b:
35:04:80:48:0f:de:43:db:91:49:68:34:63:80:d9:
1c:a0:d6:83:b6:97:7d:3f:f1:76:7f:fd:96:dd:e4:
1a:8e:9a:c9:7d:e0:74:c6:dc:05:65:02:bb:22:4c:
9a:40:e2:35:62:c8:cc:24:5c:c3:cb:e8:af:cb:c6:
b2:90:2e:41:37:7a:37:6f:59:13:23:dc:b9:f9:22:
8d:36:ef:86:85:f7:9f:96:b5:06:56:ec:75:a2:dc:
87:54:a9:03:0b:a9:b7:8f:7a:17:52:c6:9c:b2:39:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5C:A6:71:0A:B4:87:D6:3A:F0:C0:CD:56:35:30:9D:B3:91:DF:CF
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/jVymcQq0h9Y68MDNVjUwnbOR388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.236.10.0/24
152.236.13.0/24
152.236.19.0/24
152.236.22.0/23
152.236.29.0/24
152.236.32.0/24
152.236.34.0/24
152.236.36.0/23
152.236.45.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0b:89:94:bc:72:b5:8c:20:ce:04:2c:f1:41:08:66:e5:2a:
f3:03:f2:5e:09:49:af:ed:eb:de:41:38:23:0c:23:8f:13:06:
b3:b8:b9:78:3a:d7:c7:5f:a0:65:94:1e:73:d9:7a:e7:1a:24:
f1:e0:48:eb:d3:be:82:81:5d:3a:fb:81:0b:ab:3c:4a:df:7c:
38:d6:20:e7:2d:7b:e1:92:8e:61:80:2c:1e:23:da:f3:6c:1f:
46:36:5e:6a:c8:17:fa:3a:27:86:c5:a9:18:d8:40:30:ff:17:
28:3d:fb:65:22:b4:14:65:e1:3c:a4:29:3b:91:53:15:1c:7d:
3b:ad:5b:4e:28:1f:b7:82:2d:20:af:32:14:86:a9:32:07:2b:
0d:fa:2e:0b:5b:c1:74:56:02:76:75:89:4e:ab:b4:8f:fa:cb:
ce:6d:4d:6d:95:34:47:cf:19:b2:df:05:ce:fc:2d:d3:e9:20:
47:86:4b:e2:f2:de:61:bf:27:1a:40:0c:fa:53:c1:f0:cb:a9:
df:ff:87:88:c4:b0:f0:96:f3:5b:ed:ba:08:9e:5a:19:94:1c:
cb:ba:af:54:2d:f1:a0:3c:b2:8a:ce:99:26:ad:03:f3:c4:7b:
97:6a:94:2d:e4:bd:af:4a:f0:df:72:90:5f:4c:31:41:cb:6d:
95:1f:bf:c8
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAaC1L4vEvqjyddmbNVU3eDdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODgzYTc5Nzg5ZDlmNjU4MTUyOTJmMThkNDk4MGJhOWM1
ZWQyMjEwHhcNMjYwOTE4MTU0MzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDVjYTY3MTBhYjQ4N2Q2M2FmMGMwY2Q1NjM1MzA5ZGIzOTFkZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAySacKyh06gONhUThxrRNE1wLZX
CieDSuEiVAKdS6TsgW16l5r50p1z0Gv6Gj7P92H5rl1C4qFrzZjO5frwFs1ky6SV
Y9ffc15tpWsJgzX/xRBG/J9sIe6w9a/hv1SdB8mJpUJ6ufWQgeQFZQTiyL8XkIQA
eNaakUw1OwMxjvlJwnIJjZR4HD52YuWUU8KthAGENRs1BIBID95D25FJaDRjgNkc
oNaDtpd9P/F2f/2W3eQajprJfeB0xtwFZQK7IkyaQOI1YsjMJFzDy+ivy8aykC5B
N3o3b1kTI9y5+SKNNu+GhfeflrUGVux1otyHVKkDC6m3j3oXUsacsjnNOQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFI1cpnEKtIfWOvDAzVY1MJ2zkd/PMB8GA1UdIwQY
MBaAFGOIOnl4nZ9lgVKS8Y1JgLqcXtIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYt
MzVkMDU5NWUxMmYwLzEvalZ5bWNRcTBoOVk2OE1ETlZqVXduYk9SMzg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYtMzVkMDU5NWUxMmYw
LzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAmOwKAwQA
mOwNAwQAmOwTAwQBmOwWAwQAmOwdAwQAmOwgAwQAmOwiAwQBmOwkAwQAmOwtMA0G
CSqGSIb3DQEBCwUAA4IBAQBWC4mUvHK1jCDOBCzxQQhm5SrzA/JeCUmv7eveQTgj
DCOPEwazuLl4OtfHX6BllB5z2XrnGiTx4Ejr076CgV06+4ELqzxK33w41iDnLXvh
ko5hgCweI9rzbB9GNl5qyBf6OieGxakY2EAw/xcoPftlIrQUZeE8pCk7kVMVHH07
rVtOKB+3gi0grzIUhqkyBysN+i4LW8F0VgJ2dYlOq7SP+svObU1tlTRHzxmy3wXO
/C3T6SBHhkvi8t5hvycaQAz6U8Hwy6nf/4eIxLDwlvNb7boInloZlBzLuq9ULfGg
PLKKzpkmrQPzxHuXapQt5L2vSvDfcpBfTDFBy22VH7/I
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:54:19 2026 by rpki-client