Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/kaysJ4EOqlvCjwlW3Kas8s-lHIY.roa
File: kaysJ4EOqlvCjwlW3Kas8s-lHIY.roa (raw, json)
Hash identifier: sS02QxMncCoHPvN+ZDUnzYl7QCBel0tw7QHGIiNuats=
Subject key identifier: 91:AC:AC:27:81:0E:AA:5B:C2:8F:09:56:DC:A6:AC:F2:CF:A5:1C:86
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01A048D2775C884734E6D5EAAC23E6A3C727
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/kaysJ4EOqlvCjwlW3Kas8s-lHIY.roa
Signing time: Fri 28 Aug 2026 14:42:27 +0000
ROA not before: Fri 28 Aug 2026 14:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 158.173.34.0/24 maxlen: 24
158.173.42.0/24 maxlen: 24
158.173.43.0/24 maxlen: 24
158.173.65.0/24 maxlen: 24
158.173.66.0/24 maxlen: 24
158.173.106.0/24 maxlen: 24
158.173.107.0/24 maxlen: 24
158.173.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:d2:77:5c:88:47:34:e6:d5:ea:ac:23:e6:a3:c7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Aug 28 14:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91acac27810eaa5bc28f0956dca6acf2cfa51c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:6a:49:a7:41:f0:4d:83:12:71:21:2b:9c:
3f:d5:81:6d:ef:3c:8c:e9:e8:6b:12:4b:56:f3:c9:
13:88:05:03:14:52:3e:f1:e7:bd:d8:02:fb:68:97:
79:fc:e9:c3:40:20:fd:ad:09:73:88:46:44:da:e7:
ce:94:7f:30:5a:88:b0:74:03:7a:5e:4c:03:36:6b:
72:b2:e5:35:3e:00:1c:80:dd:7d:c0:b9:10:67:66:
06:db:0a:11:d5:e5:21:32:f1:54:67:cd:ec:57:99:
21:9e:ba:17:ac:52:3a:69:4f:c8:2a:61:e6:84:e5:
50:58:56:56:b0:33:ac:62:d0:ca:5e:5a:62:60:5b:
33:30:8f:2e:62:b0:eb:f4:16:d8:62:6d:fd:fa:a2:
79:ac:2e:5a:ff:09:1d:0e:90:77:3c:7e:a4:1e:a5:
0c:dc:73:4d:f9:19:d4:b2:48:5f:90:6e:e4:9b:74:
d4:52:31:e5:88:68:50:c9:82:46:c9:f8:1b:64:3d:
8d:6d:c6:3e:f9:5e:aa:73:7b:41:ed:e5:a3:8b:05:
d1:fe:e7:98:3a:52:13:ee:75:8b:02:e1:e0:d9:57:
91:36:a3:12:8b:83:81:f5:78:d4:e3:7b:38:7e:bd:
e6:af:3d:1c:77:a3:02:9f:e9:bc:0d:1c:01:1e:67:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AC:AC:27:81:0E:AA:5B:C2:8F:09:56:DC:A6:AC:F2:CF:A5:1C:86
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/kaysJ4EOqlvCjwlW3Kas8s-lHIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.34.0/24
158.173.42.0/23
158.173.65.0-158.173.66.255
158.173.106.0/23
158.173.127.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f1:d4:cb:26:9d:ba:f1:da:75:c5:f2:d2:80:3d:96:66:62:
88:17:b6:a6:10:c8:7b:7d:01:06:d1:46:62:39:5b:c3:ef:ec:
21:a4:2c:e7:4e:84:23:28:28:43:c8:1e:c1:93:67:87:22:b7:
9f:aa:ea:1e:dd:ce:8b:84:9f:ee:4b:f8:1f:e5:8a:90:34:49:
9a:2e:33:42:a8:bb:ed:02:5b:af:56:a7:cf:14:30:e6:72:db:
c2:47:32:f6:df:64:dc:82:26:e9:4a:37:49:85:d5:55:6b:64:
1d:ab:3b:e9:3d:bd:69:24:17:52:b6:d8:8d:9c:fe:dd:f6:10:
14:13:c6:09:f7:81:36:38:0c:9a:0b:cb:27:2c:be:dc:28:a9:
88:03:73:5e:66:8e:fb:c8:d7:cc:01:32:18:ca:49:ed:83:dd:
d8:71:3b:3e:57:b0:51:ee:8d:f1:0e:6b:cf:64:8d:a3:31:b1:
12:4c:23:e6:ca:31:d5:c3:ce:2a:42:70:d9:af:80:91:f9:b5:
30:7b:df:1d:df:b0:eb:e5:aa:eb:5f:11:37:27:5d:c8:ff:8f:
f2:9d:32:9f:32:9d:92:3a:49:4a:03:81:66:a0:96:d7:a2:70:
ce:5a:04:6c:92:d0:20:e8:76:6a:97:2b:7e:66:47:51:06:9a:
84:aa:d3:ac
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaBI0ndciEc05tXqrCPmo8cnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjYwODI4MTQ0MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWFjYWMyNzgxMGVhYTViYzI4ZjA5NTZkY2E2YWNmMmNmYTUxYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvdqSadB8E2DEnEhK5w/1YFt7zyM
6ehrEktW88kTiAUDFFI+8ee92AL7aJd5/OnDQCD9rQlziEZE2ufOlH8wWoiwdAN6
XkwDNmtysuU1PgAcgN19wLkQZ2YG2woR1eUhMvFUZ83sV5khnroXrFI6aU/IKmHm
hOVQWFZWsDOsYtDKXlpiYFszMI8uYrDr9BbYYm39+qJ5rC5a/wkdDpB3PH6kHqUM
3HNN+RnUskhfkG7km3TUUjHliGhQyYJGyfgbZD2NbcY++V6qc3tB7eWjiwXR/ueY
OlIT7nWLAuHg2VeRNqMSi4OB9XjU43s4fr3mrz0cd6MCn+m8DRwBHmcBbQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFJGsrCeBDqpbwo8JVtymrPLPpRyGMB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEva2F5c0o0RU9xbHZDandsVzNLYXM4cy1sSElZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx
LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAnq0iAwQB
nq0qMAwDBACerUEDBACerUIDBAGerWoDBACerX8wDQYJKoZIhvcNAQELBQADggEB
ABTx1Msmnbrx2nXF8tKAPZZmYogXtqYQyHt9AQbRRmI5W8Pv7CGkLOdOhCMoKEPI
HsGTZ4cit5+q6h7dzouEn+5L+B/lipA0SZouM0Kou+0CW69Wp88UMOZy28JHMvbf
ZNyCJulKN0mF1VVrZB2rO+k9vWkkF1K22I2c/t32EBQTxgn3gTY4DJoLyycsvtwo
qYgDc15mjvvI18wBMhjKSe2D3dhxOz5XsFHujfEOa89kjaMxsRJMI+bKMdXDzipC
cNmvgJH5tTB73x3fsOvlqutfETcnXcj/j/KdMp8ynZI6SUoDgWaglteicM5aBGyS
0CDodmqXK35mR1EGmoSq06w=
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:12 2026 by rpki-client