Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1xg7adVXPiGdkBhp_sNzxuzreFg.roa
File: 1xg7adVXPiGdkBhp_sNzxuzreFg.roa (raw, json)
Hash identifier: 2uXt3/w741xTFDmIndVVSu8CCPreiOPbFW1zo41VUgk=
Subject key identifier: D7:18:3B:69:D5:57:3E:21:9D:90:18:69:FE:C3:73:C6:EC:EB:78:58
Certificate issuer: /CN=d5fa1350074428f071755a1968ca5afa284552a2
Certificate serial: 019F2368F082A7E3E84E81FE175794624BBE
Authority key identifier: D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1xg7adVXPiGdkBhp_sNzxuzreFg.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39729
IP address blocks: 213.158.64.0/19 maxlen: 24
213.158.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:82:a7:e3:e8:4e:81:fe:17:57:94:62:4b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fa1350074428f071755a1968ca5afa284552a2
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7183b69d5573e219d901869fec373c6eceb7858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:12:f9:dc:eb:c6:70:00:2a:f4:23:c6:5d:
2b:b7:da:da:23:72:e6:66:86:02:80:e4:d5:5b:cc:
0e:36:65:0e:62:0a:63:18:94:ab:65:a8:4e:d5:f3:
16:87:dc:1d:ea:ce:c4:20:c7:02:fe:dc:c2:76:ad:
6d:9b:88:18:dd:27:35:48:73:53:ad:65:cd:2c:47:
fc:8c:0c:03:be:a9:d4:44:9c:7c:f8:3b:12:1f:5e:
4d:f5:fb:ef:88:07:6a:5c:51:37:8c:c5:71:84:30:
e4:21:e7:5b:97:d7:da:8a:a3:38:b8:a6:47:1d:19:
57:c6:9c:66:50:94:00:00:70:ae:51:96:c0:fe:13:
80:41:99:51:b1:b5:6d:56:aa:5a:ed:16:99:06:2a:
00:cb:3c:66:eb:ca:39:b8:33:d5:5f:ff:89:fc:58:
1d:0a:f0:d0:5c:da:39:2a:ee:63:8b:e5:ff:8e:2d:
f3:b3:75:b1:f8:02:69:ef:03:87:49:9e:41:02:72:
e5:5f:18:a8:e7:de:5e:b8:16:f5:97:9e:fc:a2:d0:
38:82:71:1c:fc:cc:05:85:e9:f2:98:ee:b0:52:11:
a2:c7:b9:0e:1d:08:56:a6:94:70:f5:d0:fc:b8:2c:
31:28:d2:59:79:9c:41:2c:0b:6a:94:c5:b5:58:73:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:18:3B:69:D5:57:3E:21:9D:90:18:69:FE:C3:73:C6:EC:EB:78:58
X509v3 Authority Key Identifier:
keyid:D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1xg7adVXPiGdkBhp_sNzxuzreFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.158.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:23:f3:07:f3:1a:d1:1a:c2:81:35:23:17:cf:9c:6c:75:4e:
74:2c:20:4f:fb:26:0c:74:b6:ea:63:0d:bb:56:d7:66:e4:4b:
c0:52:68:4b:b8:7d:ee:71:52:4c:e0:6c:47:c8:18:c6:97:10:
29:72:64:f9:90:1d:4c:2d:ef:8e:c0:5f:66:67:38:71:ed:60:
da:a7:b1:53:b3:71:46:45:b3:37:5c:c8:c0:31:6d:97:87:18:
26:d2:2e:c8:d7:52:86:ab:aa:41:99:f9:42:a1:3f:9f:da:b8:
09:48:a0:27:20:ea:9e:10:5d:7d:8a:ad:2d:ac:de:9e:3e:b4:
90:f6:8f:7a:62:b3:f4:c5:14:31:d1:f9:92:8b:3b:fd:c3:0f:
22:b6:dd:17:3b:99:db:f2:93:47:45:ce:ae:7f:91:88:8e:65:
10:42:5b:e0:74:98:64:51:b4:c3:a7:61:11:b0:d8:1c:95:aa:
11:28:22:ee:23:e1:60:20:c3:91:1c:ba:af:c8:fd:91:09:46:
b0:5c:12:ff:53:d6:34:82:f6:7e:57:8e:39:a8:04:67:3b:c9:
ce:24:67:18:c0:af:ec:29:30:0e:59:d8:b7:05:1d:82:53:0d:
12:49:fa:3d:90:ff:18:1d:69:a4:1f:59:61:40:df:84:8e:ee:
7f:b7:1b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:46 2026 by rpki-client