Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/g5x_xtDPGcye_tAZrMqFifJq9c0.roa
File: g5x_xtDPGcye_tAZrMqFifJq9c0.roa (raw, json)
Hash identifier: IOKvSXbqCdzKbclHBCgzWMqs8diAIgDTjWQbfL+M1iA=
Subject key identifier: 83:9C:7F:C6:D0:CF:19:CC:9E:FE:D0:19:AC:CA:85:89:F2:6A:F5:CD
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019ECA3945A4BA6A58877945E8108B34E538
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/g5x_xtDPGcye_tAZrMqFifJq9c0.roa
Signing time: Mon 15 Jun 2026 07:40:11 +0000
ROA not before: Mon 15 Jun 2026 07:40:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 153.52.64.0/24 maxlen: 24
153.52.82.0/24 maxlen: 24
2a07:4680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:39:45:a4:ba:6a:58:87:79:45:e8:10:8b:34:e5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jun 15 07:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=839c7fc6d0cf19cc9efed019acca8589f26af5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:5c:51:33:da:37:01:ab:8f:3b:26:b4:05:
b1:f1:2f:84:6d:22:f8:82:c2:89:50:10:2b:e9:fa:
86:2f:28:66:22:b3:22:b5:80:5e:57:38:44:ed:7a:
44:23:b5:c3:db:3e:ae:ba:64:44:85:e2:51:98:22:
9c:b1:dd:19:46:70:83:73:61:bb:71:89:b4:8b:40:
72:45:34:fd:cf:d3:11:13:0f:af:e9:5e:50:5f:a1:
95:93:99:cd:a0:90:49:19:b0:19:f0:21:64:a7:52:
8a:fb:b4:c5:29:97:b8:40:4d:34:fe:ef:d1:e8:7f:
a5:e1:d1:7a:51:0a:82:ac:14:6c:ca:a0:42:a9:cf:
17:40:40:2d:10:9c:eb:63:8a:e6:10:a1:85:ae:4d:
33:74:99:5b:bd:2e:5c:9e:60:1a:0b:94:e4:f6:e0:
45:7f:57:70:b0:6b:bc:8a:a5:1b:a6:0d:b9:4a:39:
27:fb:16:53:80:84:2a:50:54:7e:ee:0a:a9:63:ae:
0f:51:92:75:93:96:27:06:62:db:1f:0b:20:db:60:
2d:bc:3d:95:d5:9d:5a:64:f0:c7:ae:f6:55:57:51:
65:35:b3:54:8e:3f:b6:51:88:a8:4e:94:08:dd:92:
5e:07:4c:1d:fa:db:bd:b6:43:2f:69:cf:7f:fe:50:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9C:7F:C6:D0:CF:19:CC:9E:FE:D0:19:AC:CA:85:89:F2:6A:F5:CD
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/g5x_xtDPGcye_tAZrMqFifJq9c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.64.0/24
153.52.82.0/24
IPv6:
2a07:4680::/48
Signature Algorithm: sha256WithRSAEncryption
89:21:9b:98:5f:49:0a:81:7b:54:d1:aa:13:3b:40:71:14:18:
c4:9d:f1:a1:d1:05:0b:b3:c9:e2:79:9d:b7:cf:2b:7a:6b:a9:
f4:9d:04:c4:19:22:ac:2c:cb:67:30:bb:3e:42:f3:4b:8f:17:
d6:27:3b:2e:9c:63:38:69:4a:a6:66:fa:ee:16:03:47:ab:96:
b9:7c:0f:3f:7e:95:76:0c:2f:75:db:b7:48:ef:c0:69:80:ac:
83:16:ca:3e:1b:6a:f6:65:70:7f:eb:6a:97:c4:21:25:a8:9d:
c5:7e:fd:e2:9f:5f:3e:75:41:6f:f9:92:55:5f:bf:3e:78:35:
9d:a9:96:7f:17:8d:d0:3e:28:6d:df:cf:74:ae:42:d1:f9:6c:
76:f9:e2:9f:e4:33:a2:b1:94:c6:a6:19:97:d5:56:71:3c:ec:
b4:97:a7:78:35:59:65:3a:d8:fa:da:96:44:fa:1f:db:29:c0:
66:b4:d1:09:51:e2:2d:85:b4:9a:8e:08:79:af:cc:6b:59:90:
8f:49:51:ef:d4:70:e8:21:57:68:f1:ea:86:36:1d:cc:36:d9:
28:85:86:00:ac:73:fc:fd:75:5a:bb:54:d6:f0:d2:27:c0:58:
22:92:42:b1:28:42:14:18:ab:e9:03:ad:79:65:0b:46:c1:5d:
17:60:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:31:33 2026 by rpki-client