Route Origin Authorization
$ rpki-client -vvf rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa
File: 3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa (raw, json)
Hash identifier: XqvpywOgCqxHtXbUvoK5eARMqaC3+ag0rxsVh/Za5W4=
Subject key identifier: D1:B2:21:FD:5A:32:1D:32:4F:92:93:29:14:31:70:1B:A8:D0:62:60
Certificate issuer: /CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Certificate serial: 0440C6A3CA156D6FA27899F9C0DD8EB4E931E69F
Authority key identifier: EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject info access: rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa
Signing time: Mon 03 Nov 2025 12:40:02 +0000
ROA not before: Mon 03 Nov 2025 12:35:02 +0000
ROA not after: Mon 02 Nov 2026 12:40:02 +0000
asID: 212795
IP address blocks: 158.220.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl
rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:40:c6:a3:ca:15:6d:6f:a2:78:99:f9:c0:dd:8e:b4:e9:31:e6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Validity
Not Before: Nov 3 12:35:02 2025 GMT
Not After : Nov 2 12:40:02 2026 GMT
Subject: CN=D1B221FD5A321D324F9293291431701BA8D06260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:74:0e:ca:29:45:52:f8:19:06:15:ae:21:32:
b3:a4:62:1d:23:5d:40:a5:92:85:86:e0:d1:2a:69:
21:44:44:ba:cf:85:34:d3:ef:a8:c9:1c:26:a0:15:
f7:e6:b1:df:3e:d9:a1:84:5c:22:31:4e:c9:3a:04:
1d:44:97:7b:8d:c6:8f:00:61:7c:29:9b:41:d8:2b:
ba:47:3e:21:a3:e3:e9:d7:5d:8e:97:c5:1e:60:35:
53:17:36:2f:f3:83:81:1d:18:12:86:7e:80:f0:28:
5b:c3:77:77:a7:5b:f4:0e:39:df:4d:ed:f0:e4:ee:
34:5f:27:31:49:22:17:64:ea:f0:f4:e3:ab:c7:58:
a1:08:01:3c:f3:41:4a:f5:e2:34:7b:e1:f3:28:c1:
e6:c1:43:91:3a:41:99:af:59:2b:a3:18:c8:36:ae:
14:ba:3e:40:a4:4e:fa:42:e4:04:9e:d2:1b:da:27:
de:5b:b2:2a:b3:96:59:80:f5:15:91:b3:4d:4f:3d:
44:20:81:eb:54:55:ae:68:e5:e4:91:f6:05:fa:3a:
fe:c0:df:a7:4c:f4:de:52:45:3c:e2:7a:96:78:cc:
7a:15:59:1e:e5:ea:44:27:50:b7:1a:d5:ac:e5:b8:
c6:8c:1c:e4:b1:36:94:63:d1:3c:70:88:39:41:a5:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B2:21:FD:5A:32:1D:32:4F:92:93:29:14:31:70:1B:A8:D0:62:60
X509v3 Authority Key Identifier:
keyid:EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6e:d1:5b:e4:61:2a:a1:21:ae:14:93:9e:36:bb:86:bd:9d:
80:21:ee:9f:68:72:9f:da:e7:0a:6b:af:cc:3b:3d:7c:19:8d:
fa:b1:6f:b5:a0:4d:e6:4f:a7:16:2e:bb:b7:da:97:39:5e:20:
b1:e8:41:3e:47:c6:7a:ec:6f:0f:eb:09:44:85:80:7a:49:bd:
64:c1:0f:b4:3f:fb:7e:09:94:81:9e:fa:5c:92:ba:57:a0:65:
8a:70:04:b1:df:b9:34:79:28:17:81:37:d7:ee:ad:2b:c1:af:
e5:d1:90:26:8b:cb:3f:f9:5c:b6:60:88:94:97:1b:f3:cc:07:
56:0f:19:cf:96:f4:72:4b:76:5a:6c:53:22:df:3c:13:aa:6f:
3b:67:27:b6:45:f9:24:f9:eb:60:95:ac:91:e0:40:1f:66:c8:
9c:80:68:59:87:0e:81:f0:8e:7a:78:d0:b3:fa:df:be:e1:00:
16:40:f6:73:56:e9:ac:b2:dd:73:77:1a:f7:46:41:0a:7a:9e:
d3:ea:d3:ca:2b:f3:cd:d4:b6:d8:b1:02:21:f9:fc:bb:4b:ec:
23:6a:b2:3e:c3:07:ab:2d:07:8d:95:64:1c:6d:81:ef:33:f1:
52:fc:0c:e2:00:5f:cb:ea:e8:8c:0d:42:79:e7:37:d1:ac:3d:
42:e3:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:44 2026 by rpki-client