Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/4auopH8HYhskCZ6Wma5Rxt0YU-c.roa
File: 4auopH8HYhskCZ6Wma5Rxt0YU-c.roa (raw, json)
Hash identifier: PJOlExW0qpZ4oBm20Y7+5eFA9pSEzceKHwaf65CO2fk=
Subject key identifier: E1:AB:A8:A4:7F:07:62:1B:24:09:9E:96:99:AE:51:C6:DD:18:53:E7
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0B38E117035103B1200431C84BAF024B9
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/4auopH8HYhskCZ6Wma5Rxt0YU-c.roa
Signing time: Fri 18 Sep 2026 08:07:07 +0000
ROA not before: Fri 18 Sep 2026 08:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 153.52.64.0/24 maxlen: 24
153.52.78.0/24 maxlen: 24
153.52.83.0/24 maxlen: 24
153.52.125.0/24 maxlen: 24
163.245.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:8e:11:70:35:10:3b:12:00:43:1c:84:ba:f0:24:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 18 08:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1aba8a47f07621b24099e9699ae51c6dd1853e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:07:4b:bd:4f:3c:f3:e8:42:d5:a7:71:74:
e9:37:95:54:96:71:6a:d6:bd:83:c4:16:08:1a:28:
d0:87:c0:12:65:ed:fc:4f:70:16:45:b2:b6:16:91:
25:01:8a:54:9f:63:74:e8:f3:13:ea:36:79:9e:46:
37:a0:06:c0:4d:3f:26:59:3a:0e:2b:99:89:3a:b5:
23:41:9e:59:73:98:5e:77:90:20:50:68:ed:0f:17:
de:6c:b7:31:dc:a5:ba:2e:a6:ea:e6:d1:aa:2d:a3:
12:62:af:51:c8:37:76:a8:70:8a:cd:c3:b5:6c:6a:
23:12:b9:5c:02:ec:83:a5:cc:6f:50:2b:2b:87:6b:
eb:9d:84:5e:aa:fd:fc:dd:03:13:a6:44:46:82:de:
24:57:90:1a:70:02:d4:c8:7d:89:c2:ef:9a:37:b6:
1a:76:f1:63:c7:f1:c4:c7:14:5a:a3:4d:b2:f5:45:
e3:ec:e2:d4:67:a1:e1:48:84:c8:b5:99:3e:b2:7c:
5a:5c:c2:30:18:3a:64:d1:ee:bb:d6:7b:6d:fd:0e:
02:44:15:5d:4d:8c:b4:c7:23:4f:74:b5:7f:c6:4f:
88:0f:75:dc:9c:8b:8b:30:e0:96:93:e2:73:ea:47:
a6:26:f6:db:ea:1c:b8:d1:a1:75:c3:f2:3d:d4:d1:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AB:A8:A4:7F:07:62:1B:24:09:9E:96:99:AE:51:C6:DD:18:53:E7
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/4auopH8HYhskCZ6Wma5Rxt0YU-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.64.0/24
153.52.78.0/24
153.52.83.0/24
153.52.125.0/24
163.245.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:68:02:e0:21:56:4d:d6:ec:67:1e:50:33:49:c8:de:01:f5:
a1:22:39:ab:ca:f7:19:74:f1:89:c3:8e:21:89:7c:53:7e:50:
06:ab:14:54:1d:cf:6a:4c:35:65:49:f9:1d:a6:cf:9f:b5:d7:
6a:7f:c3:a7:b1:6b:68:78:11:a9:7b:b7:6e:fe:3e:46:ab:f0:
d8:d8:fb:f2:17:fd:46:b7:e7:2f:c5:2c:d2:00:48:00:9f:8d:
3b:54:37:a0:0b:ab:ff:11:5e:5c:d9:c9:18:68:96:5b:99:32:
24:a6:74:66:54:d6:7d:8e:e3:25:91:2d:df:b5:fe:7c:eb:ae:
21:54:6e:93:74:05:ea:89:a3:36:c7:c1:f7:dc:43:c2:42:3f:
37:f7:09:3f:7b:1b:1e:b1:85:92:6f:16:42:8b:6b:29:e2:1d:
99:cc:7f:48:56:2f:2f:c9:28:3d:f8:ae:3d:ce:4d:8e:97:27:
e2:39:fe:06:b7:f6:88:e6:9a:e8:40:35:c1:d2:f6:21:f7:11:
71:c2:36:c9:09:0b:de:7c:84:ae:9c:f3:38:9a:96:f4:df:99:
63:84:bc:45:32:58:b3:fa:e2:5b:1c:84:66:03:a4:96:46:42:
80:70:b4:f8:ea:71:11:9f:5c:05:29:68:3e:58:ea:98:af:fd:
1f:42:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:53 2026 by rpki-client