Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/FZtzzGDPbrtHQf9AEXwKF4O6NKY.roa
File: FZtzzGDPbrtHQf9AEXwKF4O6NKY.roa (raw, json)
Hash identifier: Czhak3+xNN4kGXJMwN1IMzCQSBo+vb2RBNpFmk6a63Q=
Subject key identifier: 15:9B:73:CC:60:CF:6E:BB:47:41:FF:40:11:7C:0A:17:83:BA:34:A6
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 019FE2D3FB99DC044E5E69A6F279D59F08B7
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/FZtzzGDPbrtHQf9AEXwKF4O6NKY.roa
Signing time: Sat 08 Aug 2026 19:22:51 +0000
ROA not before: Sat 08 Aug 2026 19:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209763
IP address blocks: 94.141.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:d3:fb:99:dc:04:4e:5e:69:a6:f2:79:d5:9f:08:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Aug 8 19:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=159b73cc60cf6ebb4741ff40117c0a1783ba34a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:1f:a2:83:85:d2:e2:8e:ed:e8:1f:a2:34:
2e:5a:0a:8b:4a:03:d8:74:3c:9f:8f:20:24:ae:db:
ee:0b:58:f4:b9:31:e0:07:91:d8:2b:b3:df:fb:92:
58:2a:3e:fd:ec:23:a8:a3:9f:94:2d:1f:d8:1c:a6:
d7:0b:a6:6c:5b:fa:81:7a:0f:dd:53:b6:18:5b:52:
c9:9d:dd:6f:b0:94:88:5a:0a:4a:48:15:f0:bb:40:
f0:a9:47:c4:c8:46:c5:80:cc:fa:ab:1e:fe:0b:95:
e2:71:ba:61:cf:b4:38:cf:93:bd:0c:19:e3:bd:7f:
8f:c8:ca:0e:33:b4:a9:21:ee:f4:6d:fb:2f:fc:c2:
60:ec:30:54:70:f4:da:a3:c6:50:bb:70:00:78:71:
a8:c5:27:ff:a4:00:f8:fb:98:d0:bd:86:cc:5a:e3:
f9:07:85:8a:33:bd:d0:23:4e:96:5d:1a:e7:3f:5d:
ca:64:09:fb:9f:6e:af:43:f2:33:7d:78:ba:de:4f:
1e:59:33:7e:e5:96:3a:0e:b5:36:4d:a3:96:87:15:
21:46:9a:86:4a:cc:03:c3:ef:34:2d:f1:03:70:6a:
5a:49:1f:21:a2:43:68:ff:e4:d9:de:f8:1c:e0:e5:
92:81:ac:b2:c6:0f:94:f4:60:22:26:af:16:27:31:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9B:73:CC:60:CF:6E:BB:47:41:FF:40:11:7C:0A:17:83:BA:34:A6
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/FZtzzGDPbrtHQf9AEXwKF4O6NKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.122.0/24
Signature Algorithm: sha256WithRSAEncryption
80:36:e2:95:f2:6f:ed:f1:95:fa:3c:43:66:c4:71:44:0f:fe:
9f:fc:47:14:97:5e:00:36:c1:a2:21:81:cd:3a:65:c6:5d:34:
8f:0a:43:58:ee:52:b4:70:75:75:78:a6:db:af:0d:ef:51:14:
48:53:7d:75:3e:5c:7f:a0:d8:1c:d3:62:99:c1:4a:b3:46:9f:
b4:30:61:9c:d5:86:b3:d2:5f:9d:9b:79:15:f6:65:ec:e5:ef:
1a:2f:43:94:d8:7e:32:6d:e4:02:cf:fd:50:ed:6b:22:e8:e3:
91:0f:d6:32:fb:a9:24:58:ee:5a:1d:a7:08:58:25:1b:69:d6:
f5:d0:99:5c:1b:6d:0e:ef:03:fd:ea:a6:62:14:a1:18:c2:80:
b3:a6:58:94:49:ba:65:6c:5f:b8:05:3c:83:11:50:fd:fc:6b:
cf:f6:8f:c9:53:58:20:c0:79:dc:8a:19:d3:84:38:1c:e7:54:
86:2e:c8:58:14:82:56:92:fe:48:29:50:07:e7:65:90:c5:58:
f4:a1:18:f1:9b:2e:80:4b:00:95:bc:b2:27:ae:61:cc:d3:10:
d2:57:63:b3:51:f8:ca:0b:b1:2a:de:f5:4a:31:73:80:64:e8:
4a:56:28:95:af:0f:4f:d4:f9:36:8e:81:e7:6a:0c:b7:3c:f2:
49:b0:f4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 20:00:11 2026 by rpki-client