Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/T13-btYFEN1DdC5NbUMiJr9ac-A.roa
File: T13-btYFEN1DdC5NbUMiJr9ac-A.roa (raw, json)
Hash identifier: 7W8mRW5nKO5O7mdnYOqF5XjMLJFncda9PmRuXwHgrFw=
Subject key identifier: 4F:5D:FE:6E:D6:05:10:DD:43:74:2E:4D:6D:43:22:26:BF:5A:73:E0
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 019F3B953C10746E12FC1A5E8718EC6615F3
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/T13-btYFEN1DdC5NbUMiJr9ac-A.roa
Signing time: Tue 07 Jul 2026 07:57:43 +0000
ROA not before: Tue 07 Jul 2026 07:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 86.104.215.0/24 maxlen: 24
89.32.200.0/24 maxlen: 24
89.32.204.0/24 maxlen: 24
89.33.83.0/24 maxlen: 24
89.47.34.0/24 maxlen: 24
103.47.52.0/22 maxlen: 22
162.218.158.0/24 maxlen: 24
188.215.5.0/24 maxlen: 24
194.26.149.0/24 maxlen: 24
212.102.116.0/24 maxlen: 24
2a07:4a80::/29 maxlen: 29
2a0a:eb00::/32 maxlen: 32
2a0a:eb01::/32 maxlen: 32
2a0a:eb02::/32 maxlen: 32
2a0a:eb03::/32 maxlen: 32
2a0a:eb04::/32 maxlen: 32
2a0a:eb05::/32 maxlen: 32
2a0a:eb06::/32 maxlen: 32
2a0a:eb07::/32 maxlen: 32
2a0f:c840::/32 maxlen: 32
2a0f:c841::/32 maxlen: 32
2a0f:c842::/32 maxlen: 32
2a0f:c843::/32 maxlen: 32
2a0f:c844::/32 maxlen: 32
2a0f:c845::/32 maxlen: 32
2a0f:c846::/32 maxlen: 32
2a0f:c847::/32 maxlen: 32
2a11:3bc0::/29 maxlen: 29
2a11:3bc0::/32 maxlen: 32
2a11:3bc1::/32 maxlen: 32
2a11:3bc2::/32 maxlen: 32
2a11:3bc3::/32 maxlen: 32
2a11:3bc4::/32 maxlen: 32
2a11:3bc5::/32 maxlen: 32
2a11:3bc6::/32 maxlen: 32
2a11:3bc7::/32 maxlen: 32
2a12:7700::/32 maxlen: 32
2a12:7701::/32 maxlen: 32
2a12:7702::/32 maxlen: 32
2a12:7703::/32 maxlen: 32
2a12:7704::/32 maxlen: 32
2a12:7705::/32 maxlen: 32
2a12:7706::/32 maxlen: 32
2a12:7707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:95:3c:10:74:6e:12:fc:1a:5e:87:18:ec:66:15:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jul 7 07:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f5dfe6ed60510dd43742e4d6d432226bf5a73e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:fb:97:1d:c2:16:3e:7c:9c:64:f7:bd:78:
0e:20:11:b3:1a:c6:e9:10:c7:f5:3a:2c:f0:ef:68:
8a:bd:b4:55:02:bb:87:62:a4:99:bb:17:12:ee:aa:
83:11:2d:81:f4:be:a3:93:5c:ac:2c:6c:f1:c6:33:
e1:e8:bd:51:d9:be:22:60:89:ef:0e:f7:d1:a7:48:
81:c0:ad:49:f5:1f:ab:d1:64:ca:d2:b4:40:b4:92:
4b:cf:73:af:31:8f:c0:cf:b0:f5:38:fe:47:d1:5c:
56:79:16:c2:fe:95:28:7a:b6:8c:5f:a9:3e:4c:46:
f8:9d:89:09:e2:5f:7b:63:6d:8f:1f:e7:fa:bc:8c:
e9:38:65:b5:4d:78:14:ad:95:ea:9a:19:4f:1b:17:
05:3d:7c:4a:71:a9:86:22:ba:2b:68:fb:d9:03:12:
d7:17:2f:7d:5b:1c:93:2c:2c:95:33:d2:ff:5d:ec:
ee:6b:21:be:86:58:62:62:b9:7c:7b:2e:77:d3:40:
77:f1:ed:a9:a0:85:49:09:9c:0e:3e:54:4d:0d:5a:
97:03:3b:0b:b9:4e:2e:9d:cc:d4:d5:c1:65:d5:21:
71:cd:a2:56:ea:2e:80:a9:81:e5:12:ca:8d:07:47:
f2:ec:cf:6a:88:7d:9c:21:7c:50:42:ff:fe:49:20:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:FE:6E:D6:05:10:DD:43:74:2E:4D:6D:43:22:26:BF:5A:73:E0
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/T13-btYFEN1DdC5NbUMiJr9ac-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.215.0/24
89.32.200.0/24
89.32.204.0/24
89.33.83.0/24
89.47.34.0/24
103.47.52.0/22
162.218.158.0/24
188.215.5.0/24
194.26.149.0/24
212.102.116.0/24
IPv6:
2a07:4a80::/29
2a0a:eb00::/29
2a0f:c840::/29
2a11:3bc0::/29
2a12:7700::/29
Signature Algorithm: sha256WithRSAEncryption
11:1d:56:1e:3b:db:b0:88:6b:cc:aa:34:6a:a7:0c:9b:f3:56:
c8:12:96:b9:4e:15:c8:5d:bb:80:02:91:88:3a:44:c4:d8:9d:
cd:ad:50:40:57:77:d2:41:50:50:45:70:4b:88:6e:86:ea:04:
77:1d:6b:a7:d9:41:66:6f:41:ab:89:52:50:5b:70:4e:8a:5f:
76:fb:74:b3:18:7d:f1:ac:aa:87:02:bd:74:3b:36:93:ca:bb:
0b:a1:49:a9:de:f3:59:4c:5b:d5:64:69:82:96:95:1a:2d:04:
26:97:82:2b:18:dd:25:a4:94:01:3e:15:e9:37:c0:c6:c4:1e:
36:60:62:77:12:99:66:1e:31:64:35:03:af:1d:c9:90:af:40:
1f:c7:e4:b3:91:b3:80:72:28:d9:98:5c:7a:79:92:c5:35:7d:
21:5b:81:b6:39:5e:55:ea:d0:6f:44:b5:d0:a8:99:6a:66:5d:
23:81:4a:3e:2b:d6:bd:7f:7f:03:ef:e3:e3:94:cb:49:80:1b:
a1:63:03:d5:01:55:33:db:50:e9:16:e4:ea:be:cb:e2:10:04:
65:bd:d5:16:d8:e2:80:98:21:8b:49:1c:42:46:43:c4:13:e8:
98:a2:d6:5c:15:4d:b3:21:a0:88:36:a6:8e:bf:37:94:53:d0:
04:a8:2f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:20 2026 by rpki-client