Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/l9YATmb7OlSNk8-X-Gw47s_i3j8.roa
File: l9YATmb7OlSNk8-X-Gw47s_i3j8.roa (raw, json)
Hash identifier: tjgPLQtmZhv+xT2ZVPBDEllJQosoi/bzaWAa0mefrzk=
Subject key identifier: 97:D6:00:4E:66:FB:3A:54:8D:93:CF:97:F8:6C:38:EE:CF:E2:DE:3F
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 01A19DD4AFD31BD6FB64FA27CEEB2CFCB235
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/l9YATmb7OlSNk8-X-Gw47s_i3j8.roa
Signing time: Mon 02 Nov 2026 19:55:23 +0000
ROA not before: Mon 02 Nov 2026 19:55:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 153.75.54.0/24 maxlen: 24
153.75.55.0/24 maxlen: 24
153.75.56.0/24 maxlen: 24
153.75.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:d4:af:d3:1b:d6:fb:64:fa:27:ce:eb:2c:fc:b2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Nov 2 19:55:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97d6004e66fb3a548d93cf97f86c38eecfe2de3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2a:9b:d5:f2:b3:31:f2:56:8c:a8:d0:8c:74:
1b:f3:c1:77:70:8d:80:e8:e9:2d:9b:63:ff:eb:1b:
ce:7d:68:21:78:dc:bf:a9:b5:27:b4:f9:d5:8e:26:
fa:cb:9d:f8:4f:aa:42:3d:71:e8:bd:d5:b5:5f:0f:
9b:1a:8f:cb:02:ef:fe:d4:e6:99:f7:eb:ff:33:59:
b9:73:11:9c:33:b4:f0:3b:52:5e:17:aa:b4:a1:aa:
6a:1a:1a:c8:fb:c6:e8:ce:9b:d7:f4:0f:5a:3a:1a:
82:dc:4c:69:f2:61:7a:53:8d:c4:b3:e9:e9:1f:13:
0e:05:6e:07:e9:20:25:f1:81:15:a1:45:ed:b4:42:
98:51:f6:46:ce:b3:79:6f:55:c8:51:da:87:32:75:
6e:ce:fd:32:2e:df:c4:1a:f7:e0:dd:20:fe:c0:b8:
03:87:9a:dd:44:fe:48:df:e4:8e:45:b3:a2:7b:e0:
68:f8:f7:6f:67:da:91:5d:34:2a:1a:2d:8a:bb:48:
53:3c:ec:ed:7e:2d:15:dd:38:dd:b7:d2:44:1a:b0:
58:ba:ce:7b:86:57:83:5d:5e:70:25:9e:1d:4b:10:
81:0d:27:86:77:76:ef:21:8b:38:80:49:4d:ce:a6:
e9:63:ed:02:7a:71:0b:bd:03:82:6a:ec:af:0f:b1:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:00:4E:66:FB:3A:54:8D:93:CF:97:F8:6C:38:EE:CF:E2:DE:3F
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/l9YATmb7OlSNk8-X-Gw47s_i3j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.75.54.0-153.75.56.255
153.75.59.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d6:25:10:c0:50:50:3c:18:11:74:30:f3:00:0e:bb:7f:59:
ed:1c:e6:05:d3:cc:97:1f:f4:f6:2c:f3:fe:95:b2:02:7c:05:
1c:48:d1:c8:a9:7b:f0:bb:44:34:4e:df:8e:37:42:2d:72:1e:
ca:7d:06:8a:bd:d9:45:75:d9:60:10:3b:cb:aa:55:52:fd:c8:
e2:af:f5:b0:10:07:fe:b2:aa:ab:00:6d:18:54:11:c3:e5:23:
78:5a:21:cf:f0:1b:96:a3:64:1c:57:e7:29:69:3b:89:c2:cf:
f5:f6:e7:e4:c2:cf:7b:07:d8:65:05:9c:62:8f:5a:48:d3:64:
37:a4:41:b4:06:79:6b:3b:cb:27:22:02:08:78:f9:bf:2c:a3:
b5:e6:72:af:20:f8:61:9d:4f:4a:e7:08:b3:ea:8f:70:da:e3:
6b:a2:d3:b1:7f:3c:ee:03:79:97:ae:63:2e:4b:79:22:e6:3c:
1a:8e:73:f0:dd:6e:c3:fe:e1:a4:9e:6d:56:55:9f:7c:e1:ca:
73:9c:26:5b:49:11:35:1b:41:1f:7c:ed:85:87:20:8e:c7:6f:
e4:c1:23:ff:53:df:66:db:cd:1f:cb:d4:c6:a2:64:cb:68:89:
63:8d:7e:24:45:af:44:df:96:92:8e:52:9b:6f:e5:a3:ce:18:
96:4d:3c:f9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaGd1K/TG9b7ZPonzuss/LI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz
NWUyMmIwHhcNMjYxMTAyMTk1NTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2Q2MDA0ZTY2ZmIzYTU0OGQ5M2NmOTdmODZjMzhlZWNmZTJkZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yqb1fKzMfJWjKjQjHQb88F3cI2A
6Oktm2P/6xvOfWgheNy/qbUntPnVjib6y534T6pCPXHovdW1Xw+bGo/LAu/+1OaZ
9+v/M1m5cxGcM7TwO1JeF6q0oapqGhrI+8bozpvX9A9aOhqC3Exp8mF6U43Es+np
HxMOBW4H6SAl8YEVoUXttEKYUfZGzrN5b1XIUdqHMnVuzv0yLt/EGvfg3SD+wLgD
h5rdRP5I3+SORbOie+Bo+PdvZ9qRXTQqGi2Ku0hTPOztfi0V3Tjdt9JEGrBYus57
hleDXV5wJZ4dSxCBDSeGd3bvIYs4gElNzqbpY+0CenELvQOCauyvD7EKawIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJfWAE5m+zpUjZPPl/hsOO7P4t4/MB8GA1UdIwQY
MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt
MWE4MGEyZjdkN2VhLzEvbDlZQVRtYjdPbFNOazgtWC1HdzQ3c19pM2o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh
LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAGZSzYD
BACZSzgDBACZSzswDQYJKoZIhvcNAQELBQADggEBAHTWJRDAUFA8GBF0MPMADrt/
We0c5gXTzJcf9PYs8/6VsgJ8BRxI0cipe/C7RDRO3443Qi1yHsp9Boq92UV12WAQ
O8uqVVL9yOKv9bAQB/6yqqsAbRhUEcPlI3haIc/wG5ajZBxX5ylpO4nCz/X25+TC
z3sH2GUFnGKPWkjTZDekQbQGeWs7yyciAgh4+b8so7Xmcq8g+GGdT0rnCLPqj3Da
42ui07F/PO4DeZeuYy5LeSLmPBqOc/DdbsP+4aSebVZVn3zhynOcJltJETUbQR98
7YWHII7Hb+TBI/9T32bbzR/L1MaiZMtoiWONfiRFr0TflpKOUptv5aPOGJZNPPk=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:28:25 2026 by rpki-client