Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/074BAHlximjtkjQIyvnK6ibD9bA.roa
File: 074BAHlximjtkjQIyvnK6ibD9bA.roa (raw, json)
Hash identifier: nO1qaSt8yBlCWKKZjuhS0jR2DVJ6mG+WtRr4wS38OwA=
Subject key identifier: D3:BE:01:00:79:71:8A:68:ED:92:34:08:CA:F9:CA:EA:26:C3:F5:B0
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0387B6DAC7F8FD2A2F914CE3B29B82926
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/074BAHlximjtkjQIyvnK6ibD9bA.roa
Signing time: Tue 25 Aug 2026 10:33:28 +0000
ROA not before: Tue 25 Aug 2026 10:33:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210558
IP address blocks: 124.198.131.0/24 maxlen: 24
124.198.132.0/24 maxlen: 24
147.90.182.0/24 maxlen: 24
185.19.40.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:7b:6d:ac:7f:8f:d2:a2:f9:14:ce:3b:29:b8:29:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 25 10:33:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3be010079718a68ed923408caf9caea26c3f5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:a7:b0:62:15:5d:5a:f5:2e:27:b7:d8:7d:
6d:43:63:7e:6d:a8:58:18:93:09:4e:85:49:8d:fd:
76:fe:c1:84:a6:1f:4d:ef:ba:99:10:22:c0:e2:49:
8f:3e:37:8d:bf:03:f7:46:9d:97:0c:66:1b:24:12:
83:e5:74:9f:60:a2:e4:13:3a:c2:93:93:c8:9d:16:
37:b0:92:85:f0:f2:82:b8:81:02:58:c0:50:68:6a:
3f:2e:af:9e:0f:00:90:1e:e5:6c:0a:7c:90:04:e3:
bb:6a:b2:75:09:5c:4f:da:3a:5b:71:a3:f2:8b:01:
95:93:e3:d8:c7:90:a2:78:62:bb:ca:e7:9a:c4:06:
b9:79:c5:1d:41:31:cc:9b:03:30:4e:f3:48:68:19:
80:51:1f:1a:fa:bf:19:e7:e3:89:63:c1:75:1f:47:
a2:73:c9:ed:54:19:89:12:94:e8:86:f6:bb:1e:e7:
b9:9b:28:5c:89:d8:b0:5d:d9:8d:00:e0:5f:e2:b4:
2e:02:55:84:9e:55:fa:fa:05:82:30:08:c9:4b:36:
39:01:f1:c0:21:bb:0d:ba:a9:fb:f2:2d:9b:43:67:
c1:34:03:3d:17:f5:4c:d2:66:26:d6:8c:68:ce:e2:
da:26:12:d0:e5:b4:47:bc:db:26:6d:4d:eb:f0:60:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BE:01:00:79:71:8A:68:ED:92:34:08:CA:F9:CA:EA:26:C3:F5:B0
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/074BAHlximjtkjQIyvnK6ibD9bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.198.131.0-124.198.132.255
147.90.182.0/24
185.19.40.0/24
203.188.171.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0d:df:cf:68:58:50:31:b6:de:7e:59:bb:25:38:90:96:d8:
26:c2:35:3a:6d:5b:29:da:9e:8a:72:b2:ef:ee:2d:1e:12:0b:
a3:84:45:12:41:14:fe:3d:e4:d1:95:07:aa:d6:b3:ee:f5:df:
85:cd:07:62:fb:d9:64:93:74:2e:ba:34:20:3f:0d:64:ad:58:
2e:c6:cc:9e:cc:fb:df:2c:15:fe:64:e8:91:9d:9e:4b:e4:fa:
9f:f6:60:a0:d9:02:fc:18:fb:94:47:6b:dd:17:55:b1:ee:1e:
c0:53:b0:58:6a:7a:f5:47:d0:77:5c:a3:13:db:ea:81:76:5f:
9a:a9:b1:bd:ab:bf:4a:41:53:37:17:8c:07:62:33:c2:93:96:
5d:b4:ca:59:6c:18:6a:74:ed:2c:33:e9:3e:20:b5:3e:94:01:
fd:99:43:67:57:b6:9c:6e:f2:ae:de:41:ce:b5:bb:0a:f5:f0:
1d:89:e5:08:a3:f9:d8:b1:0d:f5:ea:13:46:66:c9:21:e7:b6:
cc:5b:cb:e6:7f:31:8b:96:a4:89:32:f9:15:de:5b:aa:a8:13:
3c:19:17:d3:ea:65:e7:20:d5:7e:47:07:3e:06:cf:89:97:5c:
0d:06:54:7e:ad:40:88:39:d6:8c:b9:98:75:33:b4:73:14:c3:
11:53:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:14:06 2026 by rpki-client