Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/Axa_0aCzZ0jvkgs_nEgYudAvGUw.roa
File: Axa_0aCzZ0jvkgs_nEgYudAvGUw.roa (raw, json)
Hash identifier: E8jftNtzJHRIAuWKpqpfJyJKPtiJuYowPv6GypFZ/UE=
Subject key identifier: 03:16:BF:D1:A0:B3:67:48:EF:92:0B:3F:9C:48:18:B9:D0:2F:19:4C
Certificate issuer: /CN=a4828fb676914108b3a21058006b1b74653a7284
Certificate serial: 019F236871A5F7CA2762988DD62E79F75825
Authority key identifier: A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/Axa_0aCzZ0jvkgs_nEgYudAvGUw.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35704
IP address blocks: 80.245.144.0/20 maxlen: 20
80.245.144.0/22 maxlen: 22
80.245.145.0/24 maxlen: 24
80.245.146.0/24 maxlen: 24
80.245.147.0/24 maxlen: 24
80.245.148.0/22 maxlen: 22
80.245.152.0/21 maxlen: 21
80.245.156.0/24 maxlen: 24
80.245.159.0/24 maxlen: 24
2a09:1480::/29 maxlen: 29
2a09:1480::/40 maxlen: 40
2a09:1480:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:71:a5:f7:ca:27:62:98:8d:d6:2e:79:f7:58:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4828fb676914108b3a21058006b1b74653a7284
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0316bfd1a0b36748ef920b3f9c4818b9d02f194c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:11:b8:c4:7a:69:5c:1f:60:75:07:93:97:
ab:19:e0:9b:cf:fa:2b:f1:5b:80:fa:e5:ef:f7:6c:
d0:1d:ba:98:35:a4:09:2c:12:f4:80:c5:6b:1d:0e:
a9:45:e0:95:14:33:de:75:af:bb:9f:fa:d5:57:cf:
75:1e:78:50:a3:af:80:2f:56:a0:9f:10:1f:b3:dd:
88:8a:bb:81:79:25:7a:99:a6:48:4a:8a:7d:4b:b0:
b3:8a:c0:17:10:e1:d9:ba:24:e8:f4:7b:1e:84:a3:
f5:91:82:9b:a2:61:07:66:f8:a3:47:fb:fd:82:1b:
57:d9:ce:b4:89:a4:73:43:3e:cf:00:0d:8c:3b:b6:
2f:a6:27:2d:ff:f5:c1:76:df:13:67:61:ac:78:36:
15:42:40:0a:39:4a:2c:fb:d8:4e:bf:2d:47:08:09:
3c:c4:91:d9:9b:09:b8:fa:73:cf:a3:21:2a:a4:4b:
56:ba:26:fa:f9:34:ab:e3:7a:87:7b:05:62:fa:29:
25:54:09:f8:48:5f:7d:f0:89:a7:37:9f:a0:d9:19:
5a:0a:62:1a:1f:5b:7b:ae:a6:e8:f1:c1:0f:77:d9:
21:10:77:fb:db:55:e5:7b:8a:aa:fe:de:b1:07:19:
b3:d2:36:7c:c1:bb:d6:51:97:a5:63:bf:9d:8a:75:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:BF:D1:A0:B3:67:48:EF:92:0B:3F:9C:48:18:B9:D0:2F:19:4C
X509v3 Authority Key Identifier:
keyid:A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/Axa_0aCzZ0jvkgs_nEgYudAvGUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.144.0/20
IPv6:
2a09:1480::/29
Signature Algorithm: sha256WithRSAEncryption
59:99:ec:31:c8:a8:f1:dd:5d:ec:72:97:e5:f6:e5:25:f7:cc:
98:aa:18:20:fc:2e:4b:98:ff:a0:c4:32:01:2e:2b:28:da:28:
12:ad:c7:64:49:dd:3b:96:a9:a4:31:e1:21:81:21:81:5f:6d:
32:97:e3:7a:08:00:14:16:63:0d:f5:f0:e1:85:88:81:12:e9:
c6:fd:69:1c:32:37:32:05:b2:81:65:07:4d:13:14:d0:b1:8d:
1d:5f:05:1c:62:18:17:37:21:cd:b4:e7:6c:09:d2:dc:59:ca:
e4:b6:5b:b1:4a:6d:49:20:57:3f:0d:97:6a:70:0e:8b:30:07:
91:86:21:e6:a3:e5:09:9b:44:95:6a:4e:3a:39:7e:27:b1:e8:
a2:5e:ac:0f:69:82:1d:62:60:32:2a:37:16:3c:2f:24:bc:4b:
4f:39:a8:90:92:ce:27:47:0d:d4:32:ee:f8:47:ed:14:ce:86:
f7:80:c4:4f:7b:c5:5f:ee:9a:4c:0f:a5:e9:d4:cf:46:ed:44:
71:83:35:b8:13:fa:f1:0a:e0:63:2d:c8:cb:1f:55:d3:c3:ff:
1c:8f:be:a7:9f:4d:c3:4d:5f:cf:33:cd:cc:b1:ef:c6:fa:12:
8c:d1:7e:99:0b:56:71:bd:e2:c2:4b:07:fe:ef:8f:24:e9:d8:
66:37:a3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:22:04 2026 by rpki-client