Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/sZ_axs5F8_fX3CdTwZOdIUm4748.roa
File: sZ_axs5F8_fX3CdTwZOdIUm4748.roa (raw, json)
Hash identifier: DDvFlYymHWD/0Ky3pi1IT7ohACaIIvApHxnzVH0w5M0=
Subject key identifier: B1:9F:DA:C6:CE:45:F3:F7:D7:DC:27:53:C1:93:9D:21:49:B8:EF:8F
Certificate issuer: /CN=d5fa1350074428f071755a1968ca5afa284552a2
Certificate serial: 01A1CF36EBD2C83A452644A3F12162466B7C
Authority key identifier: D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/sZ_axs5F8_fX3CdTwZOdIUm4748.roa
Signing time: Thu 12 Nov 2026 10:04:05 +0000
ROA not before: Thu 12 Nov 2026 10:04:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39729
IP address blocks: 213.158.64.0/19 maxlen: 24
213.158.64.0/22 maxlen: 24
213.158.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:36:eb:d2:c8:3a:45:26:44:a3:f1:21:62:46:6b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fa1350074428f071755a1968ca5afa284552a2
Validity
Not Before: Nov 12 10:04:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b19fdac6ce45f3f7d7dc2753c1939d2149b8ef8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:f9:d1:fb:01:64:f4:1a:2b:49:a4:85:85:
3c:41:32:db:6f:47:75:65:95:c4:9a:22:f5:0b:5c:
04:69:a0:8b:55:be:7a:62:73:5d:8b:60:ab:09:ab:
ca:80:ab:7d:24:db:2d:43:a2:bd:48:83:25:c9:dd:
e4:5b:b5:6c:0e:8d:2c:a2:0c:e7:1d:d9:62:5c:47:
ce:c1:ca:d5:b9:c5:d4:77:8f:0d:e6:de:19:a1:bb:
7d:9a:9f:61:ed:cb:79:ec:ed:47:2f:30:ff:2f:ee:
2c:ee:fd:74:36:36:30:c1:ea:c2:9e:0f:0d:6f:6b:
66:74:97:38:90:52:d5:4d:d9:d6:19:7e:e5:e4:e6:
0d:98:b2:1a:bc:ff:9a:4d:e3:91:b8:57:23:a4:4a:
b0:43:c0:a5:5b:32:6f:48:d2:2c:00:c6:53:6b:42:
f8:f9:8b:42:55:7f:5c:84:02:da:a4:da:d9:45:04:
57:00:d3:03:7b:86:0b:3b:78:63:dd:52:dd:08:cc:
b1:e2:30:d1:07:2f:0a:4d:5b:f2:8c:a9:d9:8c:83:
f9:3d:cc:ca:4f:26:2a:1e:d4:ac:d6:a4:33:87:c6:
a0:4c:cf:0c:6b:6a:df:33:3c:9e:6a:cc:7b:f0:f3:
a0:ab:d3:a2:bb:93:aa:20:09:ed:c9:4f:12:68:a8:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9F:DA:C6:CE:45:F3:F7:D7:DC:27:53:C1:93:9D:21:49:B8:EF:8F
X509v3 Authority Key Identifier:
keyid:D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/sZ_axs5F8_fX3CdTwZOdIUm4748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.158.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:40:19:cc:40:07:6b:40:3c:a4:e9:70:28:c6:a0:4d:b4:1e:
c8:ae:43:58:31:92:c1:3d:ca:f3:01:aa:3e:f7:73:de:38:c5:
b8:e1:b7:76:53:f8:e7:a1:a8:1f:dc:d7:21:56:08:63:f9:4a:
96:76:d0:59:75:5f:d5:cb:cc:b0:00:67:ad:c4:b3:29:bb:9e:
3d:85:55:14:4d:88:7e:d3:4f:27:68:14:b4:a5:0a:c7:24:48:
eb:f3:46:0b:bc:4c:81:0f:d7:8a:c9:4f:b7:6b:36:94:88:1a:
01:99:1c:dc:5e:26:21:5f:c4:b3:b4:01:4a:82:be:77:2d:fd:
69:8e:67:4b:46:f6:13:a9:34:e3:b4:8a:3a:0e:ee:85:08:7f:
7a:09:e8:ee:dc:5d:b0:a3:af:65:0b:d5:7a:28:f0:32:33:ba:
40:d8:d6:b8:64:02:0d:14:23:f4:b6:4b:44:6f:32:26:6c:b6:
7a:9d:df:74:b6:91:cd:c5:5b:52:e3:f4:51:b8:e7:01:a6:31:
fd:3f:ab:55:32:0f:23:26:ba:8e:c9:56:d1:43:19:aa:5a:20:
e7:8a:00:31:61:ff:79:7c:15:3f:c8:a5:3b:b8:b3:60:21:d0:
b0:47:8e:36:1b:f1:f8:0f:d9:ea:a5:8d:57:be:19:ee:c9:e9:
25:1d:56:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:14:31 2026 by rpki-client