Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-Wo682_jB7ThZm3fLxoLFD_nxOE.roa
File: 1-Wo682_jB7ThZm3fLxoLFD_nxOE.roa (raw, json)
Hash identifier: lUHtgN/EG04HWWSIQqB7KI818ZcvfNUwrejeObRwAsY=
Subject key identifier: F9:6A:3A:F3:6F:E3:07:B4:E1:66:6D:DF:2F:1A:0B:14:3F:E7:C4:E1
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E6F46BCED65272D0228FC6F9C1F10B2F5
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-Wo682_jB7ThZm3fLxoLFD_nxOE.roa
Signing time: Thu 28 May 2026 15:49:27 +0000
ROA not before: Thu 28 May 2026 15:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 158.173.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:46:bc:ed:65:27:2d:02:28:fc:6f:9c:1f:10:b2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 28 15:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f96a3af36fe307b4e1666ddf2f1a0b143fe7c4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:cf:46:72:7c:24:70:98:fd:9b:52:fe:2d:
29:27:7b:5f:6a:d5:5a:e0:9c:e7:c8:1e:88:1f:cc:
8b:e9:2c:47:3d:8b:e5:30:ac:14:75:b2:21:4d:4f:
53:b8:92:ab:4e:2b:f3:bd:29:f5:89:94:22:e7:e4:
ed:8a:fc:e4:7a:b2:d9:f1:34:69:58:2f:06:86:55:
89:0f:1b:be:d3:ac:7c:b4:e0:fa:37:4b:3b:d4:d3:
53:51:15:c4:04:5c:5b:54:cb:2b:3f:a4:1d:d2:db:
39:10:fb:bf:ae:8c:d2:eb:06:73:f6:4d:2d:b6:54:
3d:d7:b6:15:fa:8c:bd:2d:91:b2:a6:6a:62:c0:e9:
32:9b:f4:e1:4a:06:16:22:5d:80:57:c0:77:53:a6:
d4:f2:e0:f5:f8:83:b2:28:6a:dd:f3:35:1d:02:61:
93:02:e0:86:88:04:70:f9:8b:0c:4e:a9:8b:89:49:
94:65:f3:ea:b9:cc:37:24:c4:1e:1d:29:68:2c:87:
27:fb:78:d7:4e:48:cd:f1:57:a7:ed:d9:9c:30:2a:
ef:2d:1b:be:9f:43:d1:33:ec:5c:c7:2e:d0:4b:1a:
65:08:c1:b6:b3:36:f2:ab:88:b3:aa:9e:83:93:fb:
f3:0a:42:d8:c1:a5:4c:a3:86:eb:1f:cf:65:ce:3a:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6A:3A:F3:6F:E3:07:B4:E1:66:6D:DF:2F:1A:0B:14:3F:E7:C4:E1
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-Wo682_jB7ThZm3fLxoLFD_nxOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.204.0/23
Signature Algorithm: sha256WithRSAEncryption
42:6c:94:58:4c:30:1c:2b:24:ac:e4:4b:81:7b:2c:7d:46:d4:
f1:60:5f:fc:eb:f7:b8:02:30:5a:7f:80:eb:52:55:d7:ff:8f:
b1:b9:9a:2c:f5:06:01:0a:52:03:8d:45:23:80:36:13:13:33:
da:e5:98:dd:7c:0a:d1:b8:49:01:36:5f:99:00:e1:37:8c:be:
1e:b8:81:e6:c5:be:05:e8:f2:51:ec:35:da:77:d5:a6:60:61:
9f:9a:8f:e5:77:e2:60:d8:13:ff:5a:c2:9e:ec:42:79:8a:d5:
39:0f:aa:b7:62:52:80:76:48:9b:7f:f8:ba:a2:dd:ff:e9:6b:
d7:82:9d:7c:90:3e:78:08:47:7e:cf:73:95:92:35:21:5b:2d:
2a:10:11:86:13:de:6f:a3:bf:d1:8a:a5:20:f1:bb:39:31:19:
a5:d3:9e:bb:9b:a4:38:f0:2a:cf:0f:2c:b7:22:ae:6c:02:69:
da:38:14:82:c2:e2:10:46:c2:8c:09:30:a5:8c:52:d3:18:13:
66:80:77:17:53:1e:d9:3e:67:00:5c:79:fc:10:cd:1c:6e:78:
ea:41:a5:88:af:be:20:0b:b4:52:98:32:a7:11:84:1f:62:60:
47:14:3f:5d:03:bc:d8:6e:1f:30:ac:08:1e:c2:aa:61:33:8a:
e3:1c:89:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:55 2026 by rpki-client