Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/fisZpLjzN8rjoisMM1L1Tcj9U_A.roa
File: fisZpLjzN8rjoisMM1L1Tcj9U_A.roa (raw, json)
Hash identifier: wu7MbMVzXtW8jNgKqD+S18VYIebPX70/c4BvEmCGAnA=
Subject key identifier: 7E:2B:19:A4:B8:F3:37:CA:E3:A2:2B:0C:33:52:F5:4D:C8:FD:53:F0
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 01A0620C7B170213CC9869B269F2F6E578B5
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/fisZpLjzN8rjoisMM1L1Tcj9U_A.roa
Signing time: Wed 02 Sep 2026 12:16:20 +0000
ROA not before: Wed 02 Sep 2026 12:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203326
IP address blocks: 213.239.176.0/24 maxlen: 24
213.239.177.0/24 maxlen: 24
213.239.184.0/21 maxlen: 21
2a13:5942:820::/44 maxlen: 44
2a13:5947:13a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:0c:7b:17:02:13:cc:98:69:b2:69:f2:f6:e5:78:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Sep 2 12:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e2b19a4b8f337cae3a22b0c3352f54dc8fd53f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:b7:8f:2c:dd:af:f0:b3:2f:ab:79:97:44:
6b:fc:74:2f:76:9a:a4:ee:4c:09:2b:5b:03:20:c2:
0a:03:26:bc:74:6f:3a:6b:be:1d:12:f0:b9:6e:d2:
2f:a8:99:6d:b8:d6:ef:55:87:e1:35:81:c7:24:2a:
17:c9:3a:92:b2:1b:40:39:ca:af:7d:14:8a:ae:75:
9a:da:10:b3:d5:f8:81:68:2b:36:47:93:aa:8e:ff:
2f:2e:4f:56:ee:6f:d5:aa:a0:8c:35:03:b3:30:ef:
c4:ef:87:ba:44:c9:88:30:aa:8d:1c:d5:b4:63:e3:
80:a4:14:15:f5:5a:22:e6:ec:13:16:4c:74:e4:84:
25:03:80:d7:49:dc:1f:5a:fa:c6:6b:22:1c:16:e4:
4d:ee:3d:f8:ac:eb:4f:53:ef:53:dc:0e:d2:59:46:
0e:93:2d:d3:a3:41:b0:86:83:4e:2a:a9:0d:22:be:
f3:f3:dc:f9:d9:e4:95:3e:39:9e:aa:7f:3e:01:dc:
f2:4d:5f:57:12:fa:92:9c:5c:8e:6f:c5:66:66:18:
41:68:b8:e2:2d:df:ef:d2:4d:af:c4:7d:a4:f5:52:
f6:ce:ce:c4:c4:f0:fe:ec:b3:b6:ec:ad:00:2c:a5:
13:80:cc:18:5f:40:94:8f:14:27:c5:c9:84:7d:17:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2B:19:A4:B8:F3:37:CA:E3:A2:2B:0C:33:52:F5:4D:C8:FD:53:F0
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/fisZpLjzN8rjoisMM1L1Tcj9U_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.239.176.0/23
213.239.184.0/21
IPv6:
2a13:5942:820::/44
2a13:5947:13a::/48
Signature Algorithm: sha256WithRSAEncryption
62:58:a3:76:43:89:fe:43:af:c4:51:ec:e2:0b:fe:40:49:3a:
8c:72:a3:de:15:31:dd:51:7a:7a:2b:79:2e:70:ef:66:b5:f2:
30:9f:05:1f:89:08:7e:29:5e:41:f3:0d:12:b0:ce:29:3f:98:
52:95:7c:30:ce:00:90:af:f9:75:92:ce:a0:54:db:b6:49:a3:
f4:21:89:33:9b:3d:58:af:25:02:a4:22:44:9d:7d:2d:75:0b:
28:c9:12:00:f0:d5:0f:b7:6a:fd:d9:3b:ff:2a:74:73:5a:54:
1b:45:10:ce:66:44:41:a3:a2:5e:6f:79:8a:78:ee:33:94:d2:
f5:fd:00:2b:f0:c5:f5:d3:78:40:0d:07:25:50:d8:25:e2:f5:
dc:f2:0f:d3:7d:df:d4:15:b0:ef:61:af:de:da:62:a3:da:e5:
1b:07:af:40:c8:5b:85:a0:20:c6:4b:7e:92:7d:45:86:d9:af:
f4:87:ec:be:cb:da:10:81:76:27:8e:97:74:6b:e1:3d:44:40:
cf:70:67:86:d0:4d:e8:65:ad:76:4e:4b:7b:8b:4b:5d:76:6d:
8d:c7:7b:71:06:e7:17:da:2f:f9:a8:86:15:37:5f:01:2e:05:
c5:23:28:83:ae:a3:38:b5:7a:6f:c5:dd:c9:04:ef:e8:16:cc:
45:6c:c0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:13:15 2026 by rpki-client