Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OOL2N7bTe5J1VcYuTpG1oh2k8M0.roa
File: OOL2N7bTe5J1VcYuTpG1oh2k8M0.roa (raw, json)
Hash identifier: qgGUXFi0+YRqA5UWFarg4G9yPBFmGKQSy2tZo6YpRjc=
Subject key identifier: 38:E2:F6:37:B6:D3:7B:92:75:55:C6:2E:4E:91:B5:A2:1D:A4:F0:CD
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019C31E61EDBA13D41E47C3F1595410BB385
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OOL2N7bTe5J1VcYuTpG1oh2k8M0.roa
Signing time: Fri 06 Feb 2026 07:41:30 +0000
ROA not before: Fri 06 Feb 2026 07:41:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 158.173.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:31:e6:1e:db:a1:3d:41:e4:7c:3f:15:95:41:0b:b3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 6 07:41:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38e2f637b6d37b927555c62e4e91b5a21da4f0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:a4:fa:70:f0:3b:be:c1:80:4d:fd:60:c8:
e2:3f:c8:38:8a:72:d4:7e:aa:53:a8:af:22:42:7a:
69:86:1d:ba:15:fe:2e:8c:cb:cf:aa:e7:07:45:68:
46:7f:eb:72:6e:b9:70:e4:fd:cd:c7:aa:e3:2f:96:
39:ef:9b:ef:4a:2c:92:df:a5:15:8d:8a:6c:a9:04:
e4:6c:1d:16:4c:86:a9:42:d2:5f:3e:a2:f4:b0:b5:
ca:85:bf:7b:66:68:6c:40:e2:3f:0a:65:32:57:0c:
f8:3d:48:23:ed:1a:96:01:63:7d:e0:b8:d2:58:b6:
25:f7:d0:6b:41:52:2a:fc:1d:7a:5c:34:cb:e8:d1:
d2:cb:f3:20:2d:d7:02:55:6a:69:1d:c1:ee:56:a9:
fb:f2:6e:b7:4c:7f:ff:5c:ce:4d:22:79:02:fc:9f:
1f:8c:2d:7b:39:e4:7b:1d:4f:14:36:97:89:8c:08:
74:d7:30:78:5a:a5:b2:ef:a4:0a:a6:ff:6c:7f:24:
a1:71:1e:3e:5a:0b:c0:6f:0d:71:31:bc:76:86:8f:
59:36:e7:f5:15:ea:1c:f1:c5:3c:13:71:cb:d6:f6:
b9:0b:f0:d6:25:21:ed:18:73:c6:08:af:9a:a3:c1:
19:57:be:c1:de:d0:ea:3f:be:6a:fa:49:d1:1b:c8:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E2:F6:37:B6:D3:7B:92:75:55:C6:2E:4E:91:B5:A2:1D:A4:F0:CD
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OOL2N7bTe5J1VcYuTpG1oh2k8M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ae:aa:ae:60:50:37:30:bd:bf:11:12:38:7e:61:3f:d5:be:
c5:f1:2b:ce:c1:9e:95:4d:be:9c:b4:85:85:6e:55:87:53:09:
7b:06:12:d9:a2:02:5c:f3:49:8f:6e:11:90:f0:91:48:f3:ec:
57:24:e1:0b:7e:3c:1c:24:b8:11:ed:60:a6:f6:1c:14:ff:f2:
96:2b:d4:d8:7c:0d:90:2a:9f:cc:c2:f3:73:31:62:38:32:d6:
e9:21:b9:f3:49:7d:62:32:5b:55:75:6f:33:33:09:ac:ab:67:
08:91:e8:92:20:91:9f:67:25:99:ee:ee:d5:91:33:98:91:f3:
7d:87:5f:4e:87:fd:03:32:6e:ad:60:3a:00:5d:76:77:41:ed:
d3:32:2e:fc:9c:0e:ed:aa:9b:92:4f:15:54:2a:21:1e:86:29:
f5:a0:26:6e:9f:59:f4:6a:e7:a7:6c:f5:94:96:dc:85:5c:86:
ad:f4:2c:97:42:89:a0:3b:e3:3b:03:58:00:fe:cd:c4:f8:1a:
74:98:37:ae:16:d8:d1:4c:9e:a7:a3:b6:bf:fe:41:a6:d7:42:
1a:87:e2:68:32:e4:51:f6:62:41:53:7b:4d:96:e1:8f:c2:04:
44:8b:3c:02:02:3e:38:3a:ff:01:c0:11:bd:3d:43:ba:1c:5e:
62:67:bd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:19:15 2026 by rpki-client