Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/XpVd8TEHFdbwUBtoAGpaT1un8nw.roa
File: XpVd8TEHFdbwUBtoAGpaT1un8nw.roa (raw, json)
Hash identifier: ePXp/0+VEKMUCzKgS41AYjixo9sL8aeMR15qF8zIMW4=
Subject key identifier: 5E:95:5D:F1:31:07:15:D6:F0:50:1B:68:00:6A:5A:4F:5B:A7:F2:7C
Certificate issuer: /CN=d5fa1350074428f071755a1968ca5afa284552a2
Certificate serial: 019F2368EF7EA6CF5015DD4245DFACD1C943
Authority key identifier: D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/XpVd8TEHFdbwUBtoAGpaT1un8nw.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34762
IP address blocks: 213.158.76.0/22 maxlen: 24
213.158.84.0/22 maxlen: 24
213.158.88.0/23 maxlen: 24
213.158.90.0/23 maxlen: 24
213.158.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ef:7e:a6:cf:50:15:dd:42:45:df:ac:d1:c9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fa1350074428f071755a1968ca5afa284552a2
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e955df1310715d6f0501b68006a5a4f5ba7f27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:38:e7:67:06:df:e9:d0:da:c9:4b:cf:64:
b6:c4:6f:a3:f4:e2:87:e7:09:12:07:e9:7f:d2:7d:
bf:62:12:96:b1:16:79:bd:bb:0c:a0:e0:69:75:0b:
61:b8:d7:45:09:cb:a4:13:3f:1b:63:38:df:b8:bb:
3d:38:a1:b5:01:5c:b0:84:00:d3:5d:41:52:bf:89:
07:4b:af:55:eb:29:13:3c:ec:f0:f6:9c:9e:b3:7c:
01:a1:e6:21:e0:e3:1f:c1:f5:fe:23:68:c6:83:ef:
c5:c1:8c:d9:23:a3:b9:7b:2f:6b:31:c8:b4:da:c6:
ee:b8:c7:a7:19:51:56:9e:3a:09:66:20:0a:ae:e1:
2c:fc:b2:e0:2f:b3:78:aa:d9:12:3e:ab:15:39:2f:
61:c4:1b:bd:1b:7b:df:c5:dd:a0:34:27:50:48:ab:
18:55:e6:fe:4c:07:6c:36:6a:f6:e4:91:69:82:e3:
96:62:61:18:9b:bc:5d:36:ba:0a:79:e5:a8:40:4b:
55:fe:12:d2:eb:14:b2:9a:7d:35:1b:40:ab:20:17:
2e:68:79:1d:32:82:c6:3f:b5:f5:e9:cf:63:38:a8:
37:39:a7:90:df:8c:99:67:ed:c4:c6:9f:98:c2:de:
66:3b:52:1d:14:ca:ca:fc:9b:75:e3:8f:87:77:f9:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:95:5D:F1:31:07:15:D6:F0:50:1B:68:00:6A:5A:4F:5B:A7:F2:7C
X509v3 Authority Key Identifier:
keyid:D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/XpVd8TEHFdbwUBtoAGpaT1un8nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.158.76.0/22
213.158.84.0-213.158.95.255
Signature Algorithm: sha256WithRSAEncryption
56:91:14:10:32:dc:e3:41:a9:18:29:56:5e:c2:7a:8f:f4:d3:
27:56:e6:7a:47:48:18:d6:5a:5a:d5:c7:42:47:ac:08:ec:4d:
71:a6:dd:54:87:6a:06:c9:e4:64:7f:cc:0a:72:20:e2:8c:69:
1d:e3:e2:07:a3:9b:1a:02:50:de:45:61:11:d6:fb:78:2b:55:
71:a5:3e:ea:35:29:af:59:09:bf:c2:b6:71:af:87:1b:50:d9:
65:ee:d9:79:71:04:d2:52:49:f9:12:44:5b:72:db:a6:cb:76:
0a:df:8c:95:aa:fa:06:92:6e:e2:97:4e:ad:94:6f:d2:57:3a:
8a:b5:89:88:49:89:6c:d6:a5:8e:7c:48:c2:f4:e0:05:d5:f7:
48:16:b0:7a:21:92:a6:02:27:3d:e5:7d:55:af:fa:b2:61:c6:
0f:3e:fe:d3:d5:20:fe:c0:bc:79:57:91:f8:35:32:a5:9c:56:
79:62:51:f6:5c:5e:9a:be:a6:41:0c:5c:8a:c3:00:18:fd:85:
c5:06:1b:51:e1:e2:a8:01:60:2f:ba:ac:18:96:f4:7f:ad:f9:
af:ff:a3:99:53:ba:24:c2:1b:15:23:ad:03:2f:17:ff:e1:5b:
12:ff:86:04:3a:e5:27:34:51:32:67:a2:35:35:00:8d:ec:7d:
ee:c4:5c:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:19 2026 by rpki-client