Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/En_DPAfWx5zUKuCoV-2fIbq2u8E.roa
File: En_DPAfWx5zUKuCoV-2fIbq2u8E.roa (raw, json)
Hash identifier: 8MaB8wyDmJ+a6wyQn+pQgzOFh7EE1W2s+AWj9nHcDqY=
Subject key identifier: 12:7F:C3:3C:07:D6:C7:9C:D4:2A:E0:A8:57:ED:9F:21:BA:B6:BB:C1
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E6F46BDA57F0E2476D3F80555FF16D9DF
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/En_DPAfWx5zUKuCoV-2fIbq2u8E.roa
Signing time: Thu 28 May 2026 15:49:27 +0000
ROA not before: Thu 28 May 2026 15:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 158.173.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:46:bd:a5:7f:0e:24:76:d3:f8:05:55:ff:16:d9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 28 15:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=127fc33c07d6c79cd42ae0a857ed9f21bab6bbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:c2:f9:8b:fc:d5:46:06:c5:e2:bd:e8:d1:
d5:17:af:c3:e2:11:a5:0a:72:b4:68:31:16:5f:5a:
bb:0a:66:33:02:38:e0:cc:ae:a8:ed:39:ef:b7:7d:
f7:17:6b:8b:a6:70:54:28:f1:50:9b:da:3f:d4:7e:
84:87:39:4b:c5:21:66:0b:40:95:da:5f:0d:72:e5:
93:da:97:13:7a:77:ac:68:b9:d7:e9:98:01:85:07:
07:22:9a:b6:8f:8a:63:36:dc:73:ba:39:53:89:2c:
ba:2b:a1:88:5e:82:22:ce:12:e8:3d:dc:de:7c:e1:
c3:29:a5:ed:7e:4b:24:a8:51:a8:2e:9c:03:87:a2:
20:02:d6:6c:8c:fb:1a:e5:f2:b8:57:f2:2f:92:61:
50:21:e6:39:55:cb:69:28:d1:b1:2a:f9:7c:2b:b5:
5d:92:6d:b3:cc:14:97:53:11:c6:39:a3:d0:67:39:
03:f8:d5:0c:d8:95:a8:6b:cf:e8:6e:3c:71:96:2c:
0e:28:39:ab:3b:16:e4:c1:94:a9:c2:8d:91:15:3c:
b9:6a:62:04:b3:8c:0b:3a:9f:d6:7d:a4:a5:86:82:
76:4a:0f:78:70:cb:e2:23:f7:64:b1:85:32:07:d5:
a9:f7:77:7e:c3:4b:45:a9:5c:08:3e:f0:5d:61:8c:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7F:C3:3C:07:D6:C7:9C:D4:2A:E0:A8:57:ED:9F:21:BA:B6:BB:C1
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/En_DPAfWx5zUKuCoV-2fIbq2u8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.204.0/23
Signature Algorithm: sha256WithRSAEncryption
61:e3:31:4d:3d:c7:ae:f2:81:e4:fc:83:75:0f:86:5c:e7:ce:
b7:a1:9d:21:c8:65:40:3a:b3:16:49:f3:17:6e:7c:52:71:1d:
c8:b3:f3:43:13:bc:c4:d5:1e:33:b8:78:97:78:e2:28:9c:e0:
e2:bd:9f:ae:82:68:ea:1f:66:ca:9b:d9:af:4c:1c:1f:49:b1:
1f:6e:24:61:50:49:e3:ea:3e:9e:fe:04:8a:2e:51:6c:d5:fa:
15:86:2f:0c:71:75:7a:40:52:1f:13:8b:a9:0f:16:03:79:80:
1a:44:0e:d9:0f:2e:bf:03:35:50:8e:03:f3:91:4c:cd:e4:73:
08:af:6b:0f:0a:ce:57:f0:d2:e6:d5:ad:64:9a:4c:a6:17:5c:
9f:a5:83:53:3b:59:35:6b:c6:c5:44:5f:23:7d:90:8f:e5:3b:
28:e1:42:2e:28:fd:14:22:4e:4e:23:2a:65:5b:cc:c2:4d:c8:
ce:e7:55:26:c8:ad:45:88:49:ec:b4:76:3c:05:44:db:65:d9:
5c:53:f1:da:95:65:60:b3:ab:55:17:6f:4f:2a:8b:cf:93:87:
0f:81:0e:19:99:dc:20:39:95:b8:0f:29:a6:37:be:7f:33:84:
10:f5:c7:98:fc:78:ed:81:5e:7e:88:c1:97:7b:fb:3d:bf:3f:
5a:b1:67:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:01 2026 by rpki-client