Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/iSf997NNJbBFrB2Dk5mtSCF3id0.roa
File: iSf997NNJbBFrB2Dk5mtSCF3id0.roa (raw, json)
Hash identifier: dPnzagf+OCQ9AR2sHjTmpyUsCaO3AH672nyGNXGUzjQ=
Subject key identifier: 89:27:FD:F7:B3:4D:25:B0:45:AC:1D:83:93:99:AD:48:21:77:89:DD
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 01A13515EAB94A2ABC1BE2C9CC0328790EFA
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/iSf997NNJbBFrB2Dk5mtSCF3id0.roa
Signing time: Tue 13 Oct 2026 11:46:31 +0000
ROA not before: Tue 13 Oct 2026 11:46:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154321
IP address blocks: 152.175.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:15:ea:b9:4a:2a:bc:1b:e2:c9:cc:03:28:79:0e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Oct 13 11:46:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8927fdf7b34d25b045ac1d839399ad48217789dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:f7:e2:c3:69:1a:e5:0e:47:7c:fd:06:a8:
b9:9c:f4:b1:83:64:b5:5a:70:71:66:3a:b6:de:25:
0b:44:bb:76:87:d6:f7:d2:c9:5a:d4:9a:24:4b:67:
5f:20:29:9b:53:25:0d:fc:c5:f1:46:b8:7f:8b:86:
e1:99:1c:61:cc:40:37:5a:26:a1:3d:c3:f5:bd:0f:
66:76:ac:0b:30:7f:c4:53:31:17:7e:17:d1:ac:d4:
c3:9f:ad:f2:6b:89:93:72:8f:67:74:11:a3:9a:a0:
53:25:3e:d7:ef:24:fd:a1:ed:01:ee:fb:dc:cf:e4:
da:31:9b:b6:4e:6f:a5:9b:8a:3f:92:b3:8b:e9:bc:
5e:ef:84:de:a6:59:84:b2:c0:a5:76:4d:5c:d5:9c:
35:39:de:51:ae:eb:02:29:36:fa:81:0c:1c:f4:c7:
16:f5:cc:26:2d:7e:ca:29:4f:b6:29:38:6f:b3:18:
6d:be:b3:ba:c3:ba:2a:19:1a:48:6f:9e:b2:44:e0:
31:71:06:d6:fa:6b:db:e3:49:56:49:27:51:7e:bf:
37:36:71:e0:65:f3:12:7b:e8:b2:9a:71:94:a0:b8:
d7:4f:82:4f:b6:29:77:58:3f:83:5b:e5:16:97:a4:
2f:0b:12:55:52:9a:90:e0:ff:72:73:b6:51:d4:b2:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:27:FD:F7:B3:4D:25:B0:45:AC:1D:83:93:99:AD:48:21:77:89:DD
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/iSf997NNJbBFrB2Dk5mtSCF3id0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.224.0/19
Signature Algorithm: sha256WithRSAEncryption
b2:ab:67:3d:88:3e:72:3f:9c:bf:6c:f2:8e:71:a0:bd:6b:7c:
21:9d:85:2f:ac:ef:ff:a9:73:3f:08:d0:0e:15:bc:61:d3:7c:
cf:b0:e0:2a:28:ce:04:df:30:92:d1:00:68:5f:e2:b3:2b:1d:
be:87:8b:71:61:fc:2b:dd:05:55:56:eb:b7:d7:33:2b:eb:d1:
c3:8b:15:68:65:5e:b6:33:7a:40:4b:c8:d9:0e:bd:b0:ef:72:
7a:59:2a:fe:b6:39:26:69:d4:63:73:60:66:82:65:bf:62:8e:
dc:69:90:4b:ff:a0:9f:cf:f3:eb:38:5d:9e:b6:f5:2d:23:17:
b6:f9:29:02:a4:56:c9:b9:2a:c9:a3:27:8a:c8:ba:95:dc:ce:
8f:9d:f7:1a:49:57:6e:38:d2:bd:de:2c:84:43:dd:16:2b:bf:
e3:ea:4d:cf:93:0a:83:31:8d:04:ba:dd:c7:a6:d6:21:6e:75:
2b:14:52:5a:04:ad:84:8d:42:24:fd:34:a3:40:a0:5b:ac:ce:
aa:6f:d2:77:ce:ac:91:eb:b2:22:46:62:a7:1c:75:3a:cb:10:
40:4b:e1:b2:79:df:74:4e:4b:d6:41:77:87:87:8f:a9:de:38:
b0:8c:43:69:d9:a7:60:e9:6b:57:1c:ec:b2:13:39:a4:5e:8b:
ab:49:c6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:01:26 2026 by rpki-client