Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EFuqYt16r6JA0KhC8uTlok_8jUQ.roa
File: EFuqYt16r6JA0KhC8uTlok_8jUQ.roa (raw, json)
Hash identifier: vy+IRqRUr2TB1U/xa0zn+czVBL7TwCQXCL3bkUUsWlM=
Subject key identifier: 10:5B:AA:62:DD:7A:AF:A2:40:D0:A8:42:F2:E4:E5:A2:4F:FC:8D:44
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019EAAD2F3DAAEEC5687E71978722193AE42
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EFuqYt16r6JA0KhC8uTlok_8jUQ.roa
Signing time: Tue 09 Jun 2026 05:20:12 +0000
ROA not before: Tue 09 Jun 2026 05:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 158.173.208.0/24 maxlen: 24
158.173.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:d2:f3:da:ae:ec:56:87:e7:19:78:72:21:93:ae:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 9 05:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=105baa62dd7aafa240d0a842f2e4e5a24ffc8d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:ae:9a:bc:a4:99:19:03:07:e3:37:5e:01:
dc:dd:4b:e9:62:ca:b0:03:43:0d:78:cb:0a:5a:5f:
20:fe:0c:d0:f9:fb:06:76:a6:9c:c8:94:a1:ef:30:
5c:41:7c:39:f0:fb:18:7f:2c:42:53:f1:cd:a4:7b:
97:49:5e:29:94:9e:50:c5:4e:05:31:a9:dd:37:19:
8a:26:e3:d0:fe:61:53:97:0c:56:99:53:d7:66:b3:
c7:1c:d5:18:9d:b1:7c:cc:f7:fd:c3:64:56:83:cc:
59:6b:e5:f6:ac:1a:a0:d8:6d:e8:e7:b5:9f:53:f7:
c7:aa:4e:6a:3c:8a:c5:1b:ae:35:7f:c0:2b:d0:57:
42:3f:7b:0c:81:7a:90:73:27:ca:e4:4e:60:6d:c0:
ff:01:ed:dd:c5:a8:74:26:36:eb:00:74:e8:2c:14:
9d:b8:8e:71:e6:61:50:dd:86:4b:15:cb:f4:4e:27:
c5:42:f5:dd:77:bf:7a:98:66:78:0e:31:b3:5d:62:
21:24:86:c1:e2:a8:07:d7:1f:71:28:38:ed:96:7e:
52:9e:78:b4:5f:38:cd:12:a5:e6:63:b3:6c:46:3b:
aa:e3:e3:c3:7d:3c:f7:84:2f:7e:ce:ff:4b:0f:23:
9b:0e:60:98:c0:53:98:6e:15:bc:df:bd:ee:82:24:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5B:AA:62:DD:7A:AF:A2:40:D0:A8:42:F2:E4:E5:A2:4F:FC:8D:44
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EFuqYt16r6JA0KhC8uTlok_8jUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.208.0/24
158.173.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:dd:3d:0d:e0:33:93:15:d1:6e:e8:9d:ed:be:f7:97:8d:1e:
82:11:57:31:3d:69:d5:f7:2c:24:10:1c:89:71:27:06:35:60:
e5:b9:c0:c5:20:46:cf:42:53:1e:b7:41:40:ae:fd:00:d5:4f:
07:5f:b7:c9:46:8c:86:8b:ef:25:0e:75:95:35:02:7d:9a:2f:
b9:59:fc:96:4d:fa:d2:67:cc:e4:46:19:65:f7:09:19:23:40:
bc:51:04:3b:8a:d2:6d:c7:a6:6a:9b:79:f4:10:8a:fb:12:ac:
d0:69:9e:36:f5:fb:44:a3:31:5f:ce:7a:d6:70:70:cb:fb:dd:
08:af:4b:fd:5b:0c:b8:2e:b8:19:f9:b7:26:f3:74:7e:27:10:
65:ad:b9:21:46:f5:0a:3f:56:76:1c:ac:d9:1a:9e:b3:fe:51:
5b:25:fc:1a:11:1b:54:d5:36:c6:27:65:51:52:f2:32:d2:43:
72:3f:1b:14:e1:37:9f:41:e2:d3:3e:6f:2f:36:86:61:14:38:
9a:c0:61:37:84:18:6e:21:1b:f6:3d:46:3f:68:44:ff:ca:be:
a1:70:7a:19:2a:a0:6c:64:e5:93:31:54:08:8c:a4:d4:64:f1:
41:05:3b:4b:6f:89:b2:e9:7b:c7:45:32:df:7c:a4:38:0c:3c:
9a:19:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:41:16 2026 by rpki-client