Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/1Z4EQZv8pw305qtI7QN_PKdHZJE.roa
File: 1Z4EQZv8pw305qtI7QN_PKdHZJE.roa (raw, json)
Hash identifier: xOHVIxkvcYwrKOFM5nVGP5q212Wgzb4Q6U3ZxUHbKh0=
Subject key identifier: D5:9E:04:41:9B:FC:A7:0D:F4:E6:AB:48:ED:03:7F:3C:A7:47:64:91
Certificate issuer: /CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
Certificate serial: 019B7E393B43B618B3F7E1DA61EE049038F9
Authority key identifier: 16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/1Z4EQZv8pw305qtI7QN_PKdHZJE.roa
Signing time: Fri 02 Jan 2026 10:20:38 +0000
ROA not before: Fri 02 Jan 2026 10:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21241
IP address blocks: 193.58.72.0/21 maxlen: 21
193.58.72.0/24 maxlen: 24
193.58.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:39:3b:43:b6:18:b3:f7:e1:da:61:ee:04:90:38:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
Validity
Not Before: Jan 2 10:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d59e04419bfca70df4e6ab48ed037f3ca7476491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:8b:03:20:56:d0:97:81:e5:5d:86:24:4a:
b7:f2:68:f5:2a:83:a6:b1:36:2e:66:cc:c6:91:c7:
fa:d5:79:be:aa:81:74:48:3f:39:13:da:07:05:bf:
42:a3:0b:15:90:29:8a:c5:8d:9e:96:08:9c:25:47:
47:7d:c3:96:51:fa:b8:f4:02:00:95:4c:88:10:8f:
f0:69:1b:a0:96:60:58:d7:0b:9a:b3:b6:d6:6f:51:
6c:8a:a9:d7:f0:86:11:5e:14:8b:c6:c9:74:0a:1a:
da:c7:f6:b9:d5:f2:71:42:76:45:bf:db:b4:77:c3:
86:74:a1:d7:4b:0c:b0:27:13:3f:9d:01:15:b6:7e:
40:a7:06:d1:57:50:23:24:df:ab:d1:15:f8:72:39:
3c:9a:b1:c8:bb:1d:20:8c:62:cd:64:c9:21:e5:34:
7a:ae:65:99:00:0e:3c:76:22:70:ad:d3:08:24:2b:
ed:fe:25:53:0d:14:11:11:f6:fc:da:c6:b1:73:fe:
29:b8:41:75:fd:d8:85:c1:ff:51:87:37:cc:05:24:
66:48:78:44:1c:5b:34:92:94:54:6a:e9:7b:d0:05:
98:cd:85:ad:20:93:53:38:7e:4e:c6:18:26:f5:73:
6f:28:fc:51:1f:86:f7:55:76:7f:88:aa:b9:19:90:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9E:04:41:9B:FC:A7:0D:F4:E6:AB:48:ED:03:7F:3C:A7:47:64:91
X509v3 Authority Key Identifier:
keyid:16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/1Z4EQZv8pw305qtI7QN_PKdHZJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.72.0/21
Signature Algorithm: sha256WithRSAEncryption
47:7c:f3:24:9f:2d:cd:f0:16:17:46:f4:a8:8b:c7:07:14:16:
dc:42:b2:99:8e:6a:ec:d6:91:bd:64:dd:a7:6e:5d:db:c3:a0:
a8:95:2c:b9:5b:25:16:3a:2b:e8:89:ae:83:45:37:3c:76:2c:
ef:da:ee:ba:b9:15:b5:3d:e3:94:c1:3a:e1:81:ac:c3:a2:9b:
2d:b4:c3:a3:85:0b:a2:78:1c:e5:5d:96:0a:ed:bb:95:62:38:
a0:1d:6b:ec:cd:48:87:94:d4:86:e1:39:09:d0:1c:69:30:52:
bb:68:15:90:2d:52:43:61:8b:7d:d3:44:b1:de:62:84:f2:81:
78:a2:d3:94:37:57:3e:22:12:7b:38:f7:ea:b0:2f:19:fc:6c:
17:76:73:48:02:f6:ba:12:36:33:41:87:87:b5:1e:ee:6c:45:
97:6b:a9:c5:b0:f4:ca:4a:3e:2b:8d:c7:94:db:e1:8a:a4:19:
1f:9d:00:51:02:66:e1:9c:23:4f:60:f5:bf:55:a8:34:94:3c:
9e:81:e5:ba:43:0a:a1:c4:1b:98:58:3f:7b:86:f4:d0:4e:ca:
45:af:5c:7e:79:3c:f7:aa:75:d1:94:93:38:8a:62:80:db:2f:
40:0e:d3:d0:15:96:46:c3:fe:34:dd:05:ab:4b:91:b7:f4:df:
e4:b0:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:24:03 2026 by rpki-client