Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/O94itZweqT5YmbypJZbfzjknSqU.roa
File: O94itZweqT5YmbypJZbfzjknSqU.roa (raw, json)
Hash identifier: uuHzncxWUW48uymzrSi0pmzDE627++oQtzUNlfAEWcM=
Subject key identifier: 3B:DE:22:B5:9C:1E:A9:3E:58:99:BC:A9:25:96:DF:CE:39:27:4A:A5
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F50B542C26FCB4FB58F343AC527B24D5B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/O94itZweqT5YmbypJZbfzjknSqU.roa
Signing time: Sat 11 Jul 2026 10:24:44 +0000
ROA not before: Sat 11 Jul 2026 10:24:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12083
IP address blocks: 158.173.224.0/24 maxlen: 24
158.173.225.0/24 maxlen: 24
158.173.228.0/24 maxlen: 24
158.173.234.0/24 maxlen: 24
158.173.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:b5:42:c2:6f:cb:4f:b5:8f:34:3a:c5:27:b2:4d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 11 10:24:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bde22b59c1ea93e5899bca92596dfce39274aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:4d:28:3d:48:99:f0:54:1d:ac:36:b2:3a:
3d:01:94:7b:e7:2a:cf:cc:e9:df:37:6b:79:e9:02:
61:83:f1:18:d9:e7:09:0e:df:93:a8:ea:02:72:3b:
29:77:61:00:b3:15:d1:66:4a:2e:fd:8e:b3:7c:ef:
75:e9:97:62:3b:32:29:bd:6a:44:f4:d1:7b:ff:66:
59:5d:6b:10:84:18:42:e4:42:4c:6d:3d:b3:30:f1:
50:93:ec:fb:d8:7a:5f:8a:f1:dd:e2:65:1c:a9:96:
01:f5:4d:6e:a8:6e:ca:f0:ab:56:9b:1c:c8:a3:41:
c3:28:10:41:57:c3:ed:74:99:00:d6:cc:ee:d9:ee:
ce:fb:0d:46:0a:e5:f0:cc:b4:75:24:44:22:4a:c0:
a4:7f:51:67:09:cd:38:75:8a:a2:e7:a5:02:08:a2:
32:99:e0:a0:8d:0f:a6:17:78:8d:d2:75:1f:fe:a3:
8a:b0:6d:ed:32:d1:ff:05:c4:dd:2a:e9:4d:58:b1:
0f:b1:ea:ed:66:8b:ea:32:dc:fe:1a:56:7a:87:c8:
f7:9a:02:9f:c5:33:dd:1d:90:fa:0b:4e:d3:45:8b:
72:76:45:33:6a:c6:bd:dd:cb:d3:e2:ba:cb:4e:63:
ce:c7:bc:66:d9:0f:db:0e:29:82:b9:6a:89:8f:97:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DE:22:B5:9C:1E:A9:3E:58:99:BC:A9:25:96:DF:CE:39:27:4A:A5
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/O94itZweqT5YmbypJZbfzjknSqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.224.0/23
158.173.228.0/24
158.173.234.0/23
Signature Algorithm: sha256WithRSAEncryption
74:01:99:3e:1a:85:76:61:5a:4b:68:39:90:42:ca:78:08:2d:
9c:c9:43:83:98:95:bc:05:f7:11:f5:13:46:a8:8c:39:46:15:
71:86:a0:2e:3d:c5:a1:1a:aa:bc:d4:7f:57:1c:a1:cb:63:38:
56:26:fd:0a:cd:4d:ec:17:72:d6:d2:b2:91:1d:07:62:fe:b9:
97:a4:b5:04:de:79:1a:fb:15:c7:56:d0:98:05:13:a5:6d:3a:
7a:51:f4:c3:22:cf:bf:be:1c:81:c3:93:5a:1b:e8:66:7e:46:
34:cc:33:30:ef:ab:fa:cd:2b:87:56:5c:ff:4f:bd:95:c0:da:
2c:b6:39:d0:96:f3:99:91:c0:3d:d0:84:34:83:89:13:f9:c9:
89:9f:18:03:e8:7d:1f:5f:7d:76:fd:d8:48:31:30:bf:3a:b8:
c7:8b:5b:42:dc:23:91:19:8a:2c:07:ce:89:20:30:e1:cc:f8:
e2:d6:88:24:1c:68:5a:f7:0e:ec:8b:e1:10:61:2f:6b:85:ac:
53:eb:68:e2:b7:05:a1:90:16:2f:81:f2:49:93:f5:d8:62:a9:
96:fa:ee:a2:40:ab:e9:b9:4c:3b:40:c3:3d:30:6c:ee:47:50:
fa:9e:5c:b5:8b:82:4d:1e:96:21:c6:f3:f1:c7:9f:0b:a8:f2:
ed:06:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:15 2026 by rpki-client