Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AFPz8RS53-XBP1qM-cy0wtoB8AM.roa
File: AFPz8RS53-XBP1qM-cy0wtoB8AM.roa (raw, json)
Hash identifier: X/KSlnIlowXK5xp8pQ88Msd7Fm1Cw1+sb6isZVmdpiE=
Subject key identifier: 00:53:F3:F1:14:B9:DF:E5:C1:3F:5A:8C:F9:CC:B4:C2:DA:01:F0:03
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1C2D028E9EDC304DD62B9E257A4ADEA86
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AFPz8RS53-XBP1qM-cy0wtoB8AM.roa
Signing time: Tue 10 Nov 2026 00:16:24 +0000
ROA not before: Tue 10 Nov 2026 00:16:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 85.118.167.0/24 maxlen: 24
178.18.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:d0:28:e9:ed:c3:04:dd:62:b9:e2:57:a4:ad:ea:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 10 00:16:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0053f3f114b9dfe5c13f5a8cf9ccb4c2da01f003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:f2:a5:95:47:60:d0:03:af:3d:ff:cb:88:
39:76:f4:60:81:e9:0e:49:50:5e:8b:f8:54:a2:48:
b6:db:6f:97:d7:b4:25:45:d9:5c:c8:16:fa:4f:fa:
8b:d0:0a:60:1b:f5:c9:58:27:50:82:66:88:e4:cb:
fa:75:cc:30:d8:ed:da:30:a5:a8:6b:72:22:ad:fd:
37:19:87:03:68:5f:2a:75:28:7e:48:21:7e:41:fe:
2d:2e:4e:dd:65:93:c6:2d:23:6f:b5:a9:5f:a3:2e:
9f:8d:f5:72:5a:32:8d:4b:cb:74:4e:48:5d:73:2f:
1e:ca:43:ae:9c:cf:a5:0c:83:c8:c7:db:c6:7e:7f:
f8:8c:5f:32:21:eb:08:59:26:40:99:66:08:b3:27:
08:21:a9:c6:c2:59:8c:41:e4:55:56:70:1e:24:1c:
64:f2:a7:1a:51:8f:0e:de:a5:b7:03:c5:21:b4:86:
e3:e6:b9:a1:ba:89:e0:ef:86:56:e5:59:be:c5:35:
f8:ad:cf:1c:fc:b6:73:39:07:1b:95:90:e2:67:46:
f2:4b:26:79:17:5b:05:a6:0b:8b:e8:ed:5f:24:0e:
e5:94:5b:9b:a8:f3:96:5b:0f:35:62:dc:b9:c4:24:
bc:47:c0:d4:b3:60:0d:69:12:57:18:7e:ec:4e:88:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:53:F3:F1:14:B9:DF:E5:C1:3F:5A:8C:F9:CC:B4:C2:DA:01:F0:03
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AFPz8RS53-XBP1qM-cy0wtoB8AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.167.0/24
178.18.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4a:67:7d:0e:de:29:98:19:bd:dc:bc:b6:b5:82:2f:ab:f5:
d4:51:ab:1c:0b:2a:44:43:0d:5d:b4:ee:ea:5a:a0:0a:46:a4:
15:fe:4d:3b:64:59:7d:e3:00:19:51:0c:f4:9d:f7:ac:b3:69:
cb:38:28:5e:17:ab:e0:fc:6d:11:6d:d3:c8:99:a4:ce:3b:a5:
9f:22:89:d1:ea:a1:f2:ce:a9:82:cd:ce:26:95:2d:15:05:08:
39:c5:5a:8a:93:2b:cd:d7:24:9c:55:1e:e2:ad:f8:b7:61:89:
62:e0:a3:cf:b7:b3:04:90:ba:12:c0:79:11:b7:f4:38:0b:e5:
1d:8e:56:42:85:fb:ea:bb:c9:1a:e2:15:cf:19:01:2d:83:07:
ba:2e:e8:45:61:e2:71:03:42:c1:41:57:05:95:8c:3f:0f:a2:
f7:ed:78:8e:33:97:56:1d:9b:69:e2:34:a7:e6:61:80:a1:49:
6f:be:68:f1:8e:04:d1:9e:f4:e2:91:09:0b:84:6d:59:c9:6f:
92:a8:15:85:65:d1:40:45:9e:6a:d9:8f:c8:ae:a5:58:c3:25:
5d:8a:3e:03:08:9f:82:8e:6c:dc:67:13:f4:f7:0b:32:d7:2c:
49:1a:b0:8a:03:4a:e0:14:88:59:62:1e:99:87:51:4b:66:af:
29:9b:cc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:03 2026 by rpki-client