Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/O03AzAgn3SyjEXyAM9_h30THE1A.roa
File: O03AzAgn3SyjEXyAM9_h30THE1A.roa (raw, json)
Hash identifier: O1VaWBRYjHEO+x+6ZOSSBIo8uwlZXncJTwaiunrCxe0=
Subject key identifier: 3B:4D:C0:CC:08:27:DD:2C:A3:11:7C:80:33:DF:E1:DF:44:C7:13:50
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A101EE82F5B8BA3A09FA7621446506DCC5
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/O03AzAgn3SyjEXyAM9_h30THE1A.roa
Signing time: Sat 03 Oct 2026 13:22:50 +0000
ROA not before: Sat 03 Oct 2026 13:22:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219091
IP address blocks: 153.52.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:ee:82:f5:b8:ba:3a:09:fa:76:21:44:65:06:dc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 3 13:22:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b4dc0cc0827dd2ca3117c8033dfe1df44c71350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:14:b9:3d:bf:88:ed:1c:f8:1d:5d:d4:45:
9b:31:d2:19:38:de:9c:bb:2d:37:a9:d7:b3:66:e0:
d1:37:96:af:34:78:dd:01:39:b1:63:dd:34:e6:72:
73:59:17:46:3e:9e:93:17:56:bb:01:18:2f:32:43:
2a:64:3c:04:d4:e7:82:c1:ce:ab:92:ba:8d:3b:16:
e9:92:35:a4:3b:44:07:0c:11:59:f0:45:69:59:98:
5a:91:01:ab:9f:44:b5:ba:02:12:f8:ac:d1:3e:38:
b2:17:34:30:3a:a9:49:a5:c9:e2:d9:e5:0c:a1:eb:
09:66:83:16:7a:c9:d6:7d:a8:48:44:75:5b:93:ba:
cb:06:87:c4:c1:ea:fa:6b:2d:25:da:1a:93:1a:da:
6f:b4:01:b1:3d:b2:ea:e8:42:3d:b3:91:a3:e4:72:
66:a8:78:f5:6a:74:70:00:60:9b:9c:71:94:cc:3e:
78:cf:81:fe:d9:f0:3f:76:70:29:d9:e6:48:d5:eb:
ab:db:d4:69:ec:68:34:83:00:d5:f3:ab:9d:49:75:
46:7b:29:aa:ad:45:52:2e:32:db:59:11:ed:ad:83:
79:22:4a:8f:05:ac:5c:01:c6:5b:c4:3f:24:1a:45:
9b:fc:a0:8e:47:b6:95:dd:a3:94:88:7e:ef:b4:f5:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4D:C0:CC:08:27:DD:2C:A3:11:7C:80:33:DF:E1:DF:44:C7:13:50
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/O03AzAgn3SyjEXyAM9_h30THE1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.102.0/24
Signature Algorithm: sha256WithRSAEncryption
90:68:c9:53:03:ae:a2:d5:24:8b:62:1f:d9:88:10:6d:dc:51:
11:98:e9:5b:87:96:5d:c7:13:e5:2b:71:cd:08:85:07:95:3b:
d6:4a:2f:ab:b6:db:8b:23:be:dd:49:af:63:97:00:ac:c9:a8:
0f:cc:0e:05:2a:f1:90:fd:90:4e:ca:f4:30:84:86:a0:b9:dd:
dc:48:74:ec:47:52:7f:2a:c2:42:61:8d:0c:ca:96:c9:bb:12:
a7:60:82:94:01:62:21:94:b0:d9:20:4b:52:4f:32:94:29:fa:
23:4f:3c:6f:7c:76:3e:60:33:3f:73:14:0a:62:ba:18:a9:d4:
e3:74:84:78:5d:eb:8d:d9:52:21:b6:64:ef:2e:58:3f:ce:02:
b7:1b:71:d4:00:f0:ea:0c:73:ec:f9:d2:bb:fe:bf:3f:0b:02:
72:a2:92:37:0a:6b:20:fe:53:f6:04:7f:03:39:9d:cc:97:86:
43:0a:be:0d:f1:be:a2:14:26:12:3a:a4:4c:05:08:4e:3c:4c:
bd:86:c2:52:5f:8f:3c:26:d5:ca:fe:62:6d:29:dd:7d:45:18:
c9:5e:17:dc:7b:11:11:4b:07:e6:67:dc:2b:10:9b:04:c2:de:
69:5a:dc:5a:6e:23:53:a7:70:53:b9:1e:ad:ea:39:f2:5d:8a:
b9:e3:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:13:04 2026 by rpki-client