Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/332yLactDM3cjeqyFfzQyb_mzxM.roa
File: 332yLactDM3cjeqyFfzQyb_mzxM.roa (raw, json)
Hash identifier: 3WdZPkrNi7gszgp7BjtbWei/e5S84N/s+e2e64voCjQ=
Subject key identifier: DF:7D:B2:2D:A7:2D:0C:CD:DC:8D:EA:B2:15:FC:D0:C9:BF:E6:CF:13
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E403FB4A4C68B4B7DA7506E264C6C77F7
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/332yLactDM3cjeqyFfzQyb_mzxM.roa
Signing time: Tue 19 May 2026 12:39:37 +0000
ROA not before: Tue 19 May 2026 12:39:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 158.173.240.0/24 maxlen: 24
170.62.239.0/24 maxlen: 24
170.62.244.0/24 maxlen: 24
170.62.245.0/24 maxlen: 24
193.142.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:3f:b4:a4:c6:8b:4b:7d:a7:50:6e:26:4c:6c:77:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 19 12:39:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df7db22da72d0ccddc8deab215fcd0c9bfe6cf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:65:ea:05:b9:44:7b:c0:48:27:7c:4e:ea:
7a:a2:0e:db:41:e9:e0:ba:44:75:47:e9:43:9d:d6:
98:f4:46:34:ef:42:dd:b0:db:9b:42:9a:0f:2a:93:
f9:48:7a:c7:75:4e:e8:f1:dd:78:bd:57:92:57:ac:
0c:2c:37:dc:f0:ac:51:11:29:f0:e5:39:9b:83:c0:
a2:bf:1c:41:aa:10:86:1c:69:6b:49:0a:12:15:ef:
8a:07:ef:19:5a:e3:b1:d2:97:b9:6b:b9:bc:dc:c3:
7d:1e:3d:c1:0a:d5:68:e9:c7:b8:61:50:22:dd:7f:
6e:60:c4:60:1c:a0:af:50:ca:3f:b7:2f:4c:1c:19:
6a:e9:5c:0a:03:8a:a6:2d:64:d7:59:95:d1:5f:bf:
5c:b8:32:b1:d7:a5:5e:71:b1:8c:f7:a7:ff:2f:a3:
02:79:4b:c3:d1:89:0f:9d:a8:1d:87:d2:e5:a6:ad:
81:fa:eb:97:7e:a5:33:1d:5b:2d:aa:cd:f1:20:f0:
4e:60:85:91:7e:a1:00:48:c4:b3:43:84:e7:ba:b9:
25:9c:2f:da:f5:9f:bf:f0:92:a4:10:9f:e5:71:23:
2c:1a:33:f7:fd:d2:f5:1e:b3:ed:a0:bd:d3:15:42:
c0:1d:2e:35:9b:69:6d:e8:67:18:93:85:ea:47:ab:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7D:B2:2D:A7:2D:0C:CD:DC:8D:EA:B2:15:FC:D0:C9:BF:E6:CF:13
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/332yLactDM3cjeqyFfzQyb_mzxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.240.0/24
170.62.239.0/24
170.62.244.0/23
193.142.58.0/24
Signature Algorithm: sha256WithRSAEncryption
25:48:ad:c5:f7:1c:c7:29:b3:3f:56:2a:62:35:c8:7f:58:3c:
0c:be:b3:e6:98:b4:05:16:e4:2a:13:e7:82:1d:5c:6f:d2:53:
54:60:05:b4:c8:dc:81:bb:2f:c6:df:a1:d9:8d:f6:af:a8:9a:
24:90:fb:d5:34:74:6b:ef:26:1d:69:6a:8e:88:95:4d:8c:5c:
38:28:1d:ef:54:c3:f2:9a:ec:1a:de:e7:90:91:15:b9:4e:fb:
d5:e1:b7:5a:46:71:a5:ee:27:64:80:41:d3:3b:b9:57:be:85:
c7:35:cd:0b:d0:45:06:98:91:ee:34:a3:67:91:8b:b1:30:75:
33:4b:6c:9e:5b:3e:dd:b3:8e:a9:e0:b8:e3:be:c5:51:5f:31:
17:e0:81:fc:27:c8:4b:d9:d4:fb:41:90:ef:0e:1f:36:4c:58:
d7:f9:ff:7b:56:6a:12:93:35:07:5b:2c:55:bb:f4:76:d7:50:
8f:32:b3:55:d0:3b:bf:b5:69:11:f9:21:88:8c:7c:da:11:45:
9e:52:38:54:0c:85:ec:d6:3f:96:4d:68:f7:4b:f8:f2:7c:e8:
2a:2d:4f:b3:d7:d9:d7:5b:e2:05:09:fa:5e:00:d3:96:09:a8:
b3:ef:ac:14:a5:b3:2b:9b:c9:a6:38:61:3e:25:93:9c:98:91:
d5:f6:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:03 2026 by rpki-client