Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/TsvYXD64dnH0sE6kMCm6u7cclx8.roa
File: TsvYXD64dnH0sE6kMCm6u7cclx8.roa (raw, json)
Hash identifier: k/aKyVRivoatxUr6MSWr9sKRY6Rc9FVbIl/mMzO6j58=
Subject key identifier: 4E:CB:D8:5C:3E:B8:76:71:F4:B0:4E:A4:30:29:BA:BB:B7:1C:97:1F
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0921077983DCA79D8A46C3A1923F00E11
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/TsvYXD64dnH0sE6kMCm6u7cclx8.roa
Signing time: Fri 11 Sep 2026 20:02:27 +0000
ROA not before: Fri 11 Sep 2026 20:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 153.52.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:10:77:98:3d:ca:79:d8:a4:6c:3a:19:23:f0:0e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 11 20:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ecbd85c3eb87671f4b04ea43029babbb71c971f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:89:66:2e:bd:24:d2:ba:fc:f8:8d:74:f3:
b9:86:bc:00:8c:de:64:b3:ea:ae:04:91:eb:fa:7a:
40:3c:bd:fa:01:f0:b5:33:6f:94:27:99:21:fc:5a:
7c:91:da:54:f4:53:3c:63:84:20:79:f2:f5:40:16:
83:44:8e:a4:12:26:57:04:be:2d:51:df:f2:26:78:
84:0a:3e:42:4f:9b:ea:75:e4:23:62:02:93:bf:d7:
81:2a:41:32:9d:b1:92:b9:4c:cc:41:b5:09:07:82:
f7:16:3d:30:70:c3:ed:07:27:ee:e7:b7:fd:de:d9:
90:7c:06:d1:91:78:40:cb:7b:85:86:c7:6f:57:fd:
2f:0d:f9:3e:d1:a8:01:42:e0:44:97:ab:f0:4b:13:
ca:34:18:60:bf:6a:ae:bd:02:ec:e4:0b:fb:6b:e3:
82:04:10:38:85:85:4a:e9:83:f0:53:cb:d1:74:47:
8c:5a:6e:f9:78:fc:38:5c:a1:d3:7f:b0:82:9d:f6:
71:fb:7a:6b:ff:15:1d:ae:bb:8e:a2:9d:bd:67:bf:
ea:27:ae:80:b9:6c:9d:4c:a6:9b:d0:75:13:ff:5d:
fd:2a:eb:61:c7:4f:fb:20:bd:d7:54:14:05:bd:6c:
2b:dd:71:e9:61:81:26:81:26:76:19:b9:77:a1:5f:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CB:D8:5C:3E:B8:76:71:F4:B0:4E:A4:30:29:BA:BB:B7:1C:97:1F
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/TsvYXD64dnH0sE6kMCm6u7cclx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.77.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:31:6e:dc:e4:0c:28:56:ce:d1:38:c8:8e:d5:27:7d:b4:8d:
77:c5:0e:f2:7c:ef:9b:60:6f:91:da:15:06:7e:71:3f:bc:a5:
0f:33:e6:8b:eb:19:69:94:e1:52:46:27:bc:cd:91:ab:3f:36:
22:8b:ce:69:d8:c2:64:51:43:f4:4d:7a:a0:1d:1e:a3:ff:92:
9f:e1:8f:51:6d:2a:e9:2a:25:64:6b:d6:a9:1b:f3:cf:78:3b:
f7:4a:f9:6c:80:3a:c2:0c:8b:5f:52:7d:06:cb:54:77:dc:3c:
81:b6:19:3a:c9:b1:ad:87:6f:62:e1:dd:50:e6:33:5e:99:73:
b7:ff:74:16:21:7f:b6:43:cb:8c:85:3e:4c:13:54:33:81:ca:
ca:46:5c:c9:7f:54:cb:cb:e5:b7:18:53:12:f5:36:2b:a2:f1:
5a:e0:7d:40:c7:e1:12:f8:ef:d2:93:b3:b9:96:7e:d9:4c:29:
ab:d6:a2:dc:66:67:50:51:64:c7:8a:28:d2:06:d4:10:90:bd:
a7:6f:56:17:1d:d1:90:e7:ed:91:7d:bd:0d:fa:d1:ed:9b:1a:
97:2e:de:c3:b7:73:26:0a:d4:a4:b9:c3:b1:b3:93:82:25:6f:
f9:fa:41:fd:8e:91:76:43:c2:48:d2:52:ce:80:11:a7:f7:59:
74:93:ce:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:41 2026 by rpki-client