Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PimXOa23JEXWIAp_qIZHDoaVePw.roa
File: PimXOa23JEXWIAp_qIZHDoaVePw.roa (raw, json)
Hash identifier: SmAfl/7LGpnryLs06E4qciizdQdOw5QFfSrY4VJRxWo=
Subject key identifier: 3E:29:97:39:AD:B7:24:45:D6:20:0A:7F:A8:86:47:0E:86:95:78:FC
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0A9EF9B14DF23D26BD81FB3A31D2EFFF2
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PimXOa23JEXWIAp_qIZHDoaVePw.roa
Signing time: Wed 16 Sep 2026 11:17:27 +0000
ROA not before: Wed 16 Sep 2026 11:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 153.52.79.0/24 maxlen: 24
153.52.84.0/22 maxlen: 22
153.52.93.0/24 maxlen: 24
153.52.95.0/24 maxlen: 24
153.52.96.0/23 maxlen: 23
153.52.98.0/23 maxlen: 23
153.52.104.0/24 maxlen: 24
153.52.106.0/23 maxlen: 23
153.52.108.0/23 maxlen: 23
153.52.110.0/23 maxlen: 23
153.52.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:ef:9b:14:df:23:d2:6b:d8:1f:b3:a3:1d:2e:ff:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 16 11:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e299739adb72445d6200a7fa886470e869578fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:e9:02:35:32:75:11:9e:e1:69:6c:95:bb:
ca:05:cc:9c:9b:03:6c:e0:86:62:04:93:59:f4:3c:
17:5e:ea:64:6b:00:39:44:9d:82:71:9d:64:ba:08:
68:d1:c9:54:88:50:1f:b8:ec:9d:48:c3:e5:c9:51:
2d:91:6c:28:69:6e:eb:3f:af:12:86:ce:b5:ba:82:
40:e5:9a:61:91:66:ca:39:b5:d6:3b:a7:1d:91:76:
4e:a7:1e:8c:a9:09:9a:ff:50:e2:60:01:06:c0:54:
0f:cd:2c:87:eb:d4:b2:2c:d9:98:d5:2d:4e:3a:30:
76:b4:a5:8d:b3:0b:56:26:f4:93:35:c9:ea:49:7c:
6f:98:9b:15:ed:61:4f:44:f6:05:3f:a1:14:20:19:
1a:ba:ca:b3:fb:10:b5:8c:f5:ce:1e:5f:80:c4:7f:
3a:56:8d:bd:d5:69:59:9c:c4:a6:39:69:cc:b8:b1:
b9:6d:49:33:51:88:7f:a1:d8:13:ea:90:df:73:48:
df:d7:ff:3c:c7:98:5b:2e:90:df:fb:9e:ac:9c:0f:
d7:4f:ec:a5:42:5b:24:22:a4:3f:b1:a9:b1:42:71:
5a:a2:6e:cc:1f:94:d9:63:ba:40:e0:8c:c6:84:e9:
01:ae:23:4c:f0:be:0b:36:0f:47:d1:a2:36:17:43:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:29:97:39:AD:B7:24:45:D6:20:0A:7F:A8:86:47:0E:86:95:78:FC
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/PimXOa23JEXWIAp_qIZHDoaVePw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.79.0/24
153.52.84.0/22
153.52.93.0/24
153.52.95.0-153.52.99.255
153.52.104.0/24
153.52.106.0-153.52.111.255
153.52.114.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:53:fe:f4:0a:35:b9:2a:a1:e9:bb:b1:75:8b:a5:b6:56:c4:
11:05:43:09:31:7c:fd:76:c2:a7:db:bf:7b:94:85:82:1c:57:
a5:3f:55:ad:15:cf:aa:2b:71:4c:64:41:24:85:89:bc:a5:c5:
a1:be:2b:9a:4c:60:42:2b:9a:d8:e3:ca:b4:07:e9:5f:25:25:
91:cc:ba:7c:31:49:bb:96:15:bb:9d:8a:3f:17:f9:31:63:ae:
a1:ee:0c:77:45:4d:6f:bf:38:f5:02:d5:a1:07:f7:6f:4a:40:
58:5d:5d:a8:a9:7a:df:38:ca:46:a1:67:e9:e7:dd:dd:ec:59:
a9:fe:01:61:2f:7a:2e:21:6f:b8:17:74:d2:a7:81:4b:55:c1:
d1:73:18:a4:2f:d5:85:81:50:c9:fe:80:42:45:9d:3e:23:e1:
84:29:51:5b:67:54:36:01:c5:42:51:5d:56:ff:1d:f5:74:ab:
ad:24:05:80:2d:63:ce:2b:a3:db:52:19:6b:74:34:2f:91:d4:
42:3a:a5:3e:d2:53:a1:4b:d2:76:cb:68:6c:1e:d8:72:7e:32:
9e:28:4c:91:47:15:f1:d2:08:92:cf:44:c4:09:e5:2b:16:4b:
98:d7:7e:fc:bf:08:7d:0d:1b:c1:e0:9e:74:10:33:e2:05:19:
0f:26:91:ee
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAaCp75sU3yPSa9gfs6MdLv/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYwOTE2MTExNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTI5OTczOWFkYjcyNDQ1ZDYyMDBhN2ZhODg2NDcwZTg2OTU3OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi/pAjUydRGe4WlslbvKBcycmwNs
4IZiBJNZ9DwXXupkawA5RJ2CcZ1kugho0clUiFAfuOydSMPlyVEtkWwoaW7rP68S
hs61uoJA5ZphkWbKObXWO6cdkXZOpx6MqQma/1DiYAEGwFQPzSyH69SyLNmY1S1O
OjB2tKWNswtWJvSTNcnqSXxvmJsV7WFPRPYFP6EUIBkausqz+xC1jPXOHl+AxH86
Vo291WlZnMSmOWnMuLG5bUkzUYh/odgT6pDfc0jf1/88x5hbLpDf+56snA/XT+yl
QlskIqQ/samxQnFaom7MH5TZY7pA4IzGhOkBriNM8L4LNg9H0aI2F0OAjQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFD4plzmttyRF1iAKf6iGRw6GlXj8MB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvUGltWE9hMjNKRVhXSUFwX3FJWkhEb2FWZVB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAmTRPAwQC
mTRUAwQAmTRdMAwDBACZNF8DBAKZNGADBACZNGgwDAMEAZk0agMEBJk0YAMEAZk0
cjANBgkqhkiG9w0BAQsFAAOCAQEAoFP+9Ao1uSqh6buxdYultlbEEQVDCTF8/XbC
p9u/e5SFghxXpT9VrRXPqitxTGRBJIWJvKXFob4rmkxgQiua2OPKtAfpXyUlkcy6
fDFJu5YVu52KPxf5MWOuoe4Md0VNb7849QLVoQf3b0pAWF1dqKl63zjKRqFn6efd
3exZqf4BYS96LiFvuBd00qeBS1XB0XMYpC/VhYFQyf6AQkWdPiPhhClRW2dUNgHF
QlFdVv8d9XSrrSQFgC1jziuj21IZa3Q0L5HUQjqlPtJToUvSdstobB7Ycn4ynihM
kUcV8dIIks9ExAnlKxZLmNd+/L8IfQ0bweCedBAz4gUZDyaR7g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:23 2026 by rpki-client