Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DXiR77lWCQm3AN6hTgmAb2F8oSM.roa
File: DXiR77lWCQm3AN6hTgmAb2F8oSM.roa (raw, json)
Hash identifier: StK/AR0dxyHsk8r7a1J1oH3YXXPfK00NDe44xYvpooc=
Subject key identifier: 0D:78:91:EF:B9:56:09:09:B7:00:DE:A1:4E:09:80:6F:61:7C:A1:23
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0199018C9CD2F0F5688244729AED91CCD599
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DXiR77lWCQm3AN6hTgmAb2F8oSM.roa
Signing time: Sun 31 Aug 2025 19:13:36 +0000
ROA not before: Sun 31 Aug 2025 19:13:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142299
IP address blocks: 158.173.159.0/24 maxlen: 24
170.62.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:01:8c:9c:d2:f0:f5:68:82:44:72:9a:ed:91:cc:d5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 31 19:13:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d7891efb9560909b700dea14e09806f617ca123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:84:58:6a:7f:6d:33:53:47:70:95:25:b9:
da:a3:3e:74:d3:e9:7e:32:b0:3d:21:36:a7:80:a7:
4a:82:e6:ba:c5:dc:09:69:54:88:f0:84:bf:7c:59:
d6:c3:72:cd:9c:b4:d4:88:76:c0:7a:87:69:99:ba:
85:cf:7a:8b:d1:df:74:fa:3d:fb:3d:85:17:fe:78:
9f:ec:76:47:dc:a1:3e:a5:d6:7c:4d:4b:a6:77:c8:
44:be:19:3c:f3:0b:80:69:24:c7:85:16:e0:ad:a5:
e2:64:99:eb:56:76:38:fb:92:7c:1b:70:32:4e:5a:
b6:60:2a:77:85:9a:d4:90:24:62:07:e8:13:23:11:
68:85:97:e3:19:bd:ff:eb:57:ed:b3:c4:85:33:9b:
17:5d:20:4d:e8:d9:f8:8b:db:1b:a1:1c:a9:73:92:
4a:8e:c1:f5:64:0e:ba:bf:60:c9:18:da:76:63:27:
d7:4b:1f:c9:b1:94:40:ed:71:23:e7:f3:ac:ff:04:
29:f6:b3:ec:1b:fb:85:f7:2a:7c:9b:c0:10:18:a3:
ef:41:09:52:8e:a7:6b:c9:61:78:22:fe:f2:e6:38:
7f:bc:ef:fb:9a:c3:ba:3a:89:2f:b6:8a:2f:97:0a:
af:d5:06:ea:4c:89:fb:d0:05:a2:d9:7f:0c:03:bf:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:78:91:EF:B9:56:09:09:B7:00:DE:A1:4E:09:80:6F:61:7C:A1:23
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DXiR77lWCQm3AN6hTgmAb2F8oSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.159.0/24
170.62.194.0/23
Signature Algorithm: sha256WithRSAEncryption
70:9c:bb:df:a8:ad:0d:38:4f:1d:98:4d:69:5a:f9:4f:04:54:
cc:9e:cb:71:51:df:ca:92:53:70:f5:df:5f:04:76:08:4c:cc:
9e:b2:8b:9e:4e:27:9a:3c:15:df:3b:c9:99:f8:85:11:8d:ac:
71:39:47:5d:fe:92:21:eb:4b:92:e4:18:e1:fe:8e:f6:51:e4:
24:02:ae:9f:64:66:be:4e:d5:63:f8:2c:4d:5d:4c:9f:b4:1f:
fd:72:4c:88:ce:f4:db:32:77:80:10:8b:40:90:61:27:16:00:
b3:9c:61:05:17:d7:52:02:59:4d:e0:2b:0d:42:d9:20:00:4c:
0d:59:40:93:06:8d:90:c5:9b:e1:1c:56:88:ba:6a:57:60:c7:
7d:2d:d5:b1:7e:1d:5f:95:81:9e:56:85:9b:19:a2:f3:90:51:
4e:da:2f:67:22:8a:a1:a6:bc:3e:0f:a3:e5:23:2b:ee:21:ce:
6f:6a:69:2c:87:71:af:57:d1:8f:c9:53:a6:24:9f:d6:c6:9c:
ce:63:79:f0:c7:b8:23:75:7d:06:c0:23:62:7e:bb:a9:58:15:
36:94:75:09:2a:a2:6d:74:7b:f9:11:46:46:17:1d:1c:20:82:
e1:de:88:ce:bf:05:65:f3:f9:7a:80:0e:fe:dc:6a:cb:6c:07:
ea:4b:6b:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZkBjJzS8PVogkRymu2RzNWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwODMxMTkxMzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDc4OTFlZmI5NTYwOTA5YjcwMGRlYTE0ZTA5ODA2ZjYxN2NhMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0iEWGp/bTNTR3CVJbnaoz500+l+
MrA9ITangKdKgua6xdwJaVSI8IS/fFnWw3LNnLTUiHbAeodpmbqFz3qL0d90+j37
PYUX/nif7HZH3KE+pdZ8TUumd8hEvhk88wuAaSTHhRbgraXiZJnrVnY4+5J8G3Ay
Tlq2YCp3hZrUkCRiB+gTIxFohZfjGb3/61fts8SFM5sXXSBN6Nn4i9sboRypc5JK
jsH1ZA66v2DJGNp2YyfXSx/JsZRA7XEj5/Os/wQp9rPsG/uF9yp8m8AQGKPvQQlS
jqdryWF4Iv7y5jh/vO/7msO6Ookvtoovlwqv1QbqTIn70AWi2X8MA79tywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA14ke+5VgkJtwDeoU4JgG9hfKEjMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvRFhpUjc3bFdDUW0zQU42aFRnbUFiMkY4b1NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnq2fAwQB
qj7CMA0GCSqGSIb3DQEBCwUAA4IBAQBwnLvfqK0NOE8dmE1pWvlPBFTMnstxUd/K
klNw9d9fBHYITMyesoueTieaPBXfO8mZ+IURjaxxOUdd/pIh60uS5Bjh/o72UeQk
Aq6fZGa+TtVj+CxNXUyftB/9ckyIzvTbMneAEItAkGEnFgCznGEFF9dSAllN4CsN
QtkgAEwNWUCTBo2QxZvhHFaIumpXYMd9LdWxfh1flYGeVoWbGaLzkFFO2i9nIoqh
prw+D6PlIyvuIc5vamksh3GvV9GPyVOmJJ/WxpzOY3nwx7gjdX0GwCNifrupWBU2
lHUJKqJtdHv5EUZGFx0cIILh3ojOvwVl8/l6gA7+3GrLbAfqS2tH
-----END CERTIFICATE-----
Generated at Sat Sep 6 12:06:46 2025 by rpki-client