Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PStLjDJSzwWCeFrjSw9go6oVkzw.roa
File: PStLjDJSzwWCeFrjSw9go6oVkzw.roa (raw, json)
Hash identifier: wi1yY163UbI++VDCQ1VzcB6jeXW4kYKIRLHuFzQq4yo=
Subject key identifier: 3D:2B:4B:8C:32:52:CF:05:82:78:5A:E3:4B:0F:60:A3:AA:15:93:3C
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F6085B855CE423EDEC35ED38057078915
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PStLjDJSzwWCeFrjSw9go6oVkzw.roa
Signing time: Tue 14 Jul 2026 12:06:43 +0000
ROA not before: Tue 14 Jul 2026 12:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 158.173.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:85:b8:55:ce:42:3e:de:c3:5e:d3:80:57:07:89:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 14 12:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d2b4b8c3252cf0582785ae34b0f60a3aa15933c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:87:39:4d:00:19:c2:0c:8f:15:0b:01:b4:
bc:e0:01:d7:90:8e:23:16:87:cf:a3:a8:a3:db:08:
4b:25:21:cf:3d:e0:ed:7b:38:4e:a8:40:70:a3:a5:
8b:98:1e:90:65:9c:a7:fe:e4:71:1b:0a:24:56:89:
61:0d:64:56:7d:71:10:d7:13:b5:68:06:4c:e3:27:
07:78:7d:9a:d6:3a:d6:f3:fc:af:0e:54:fc:b9:e7:
bc:9a:bf:25:57:49:67:35:be:8d:8c:fa:c1:39:58:
62:51:b2:14:48:a7:34:6d:cf:f3:8a:06:e0:29:f6:
9c:d3:07:a4:5c:ff:b0:a8:ba:83:ce:d6:5d:57:7e:
a7:0d:29:fa:71:98:2c:f7:d6:ac:56:5b:64:ae:70:
f5:70:59:bb:0a:0e:b7:e2:e0:a1:cd:f9:93:16:e0:
82:81:27:02:ab:ec:c0:7f:a6:c1:e8:8f:33:04:4c:
84:b9:b3:7a:71:0a:3a:3f:3f:63:4b:db:b1:5e:a3:
43:75:b0:5c:0d:02:3b:6c:83:6f:12:15:3c:80:11:
90:03:34:55:42:2b:7f:2a:ac:1f:a0:db:1e:39:6a:
d0:6e:43:02:72:34:67:fc:5c:6b:7c:75:dd:51:9c:
6b:32:37:f0:14:98:d8:82:23:7c:67:27:c9:15:b0:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2B:4B:8C:32:52:CF:05:82:78:5A:E3:4B:0F:60:A3:AA:15:93:3C
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PStLjDJSzwWCeFrjSw9go6oVkzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.201.0/24
Signature Algorithm: sha256WithRSAEncryption
db:d3:91:57:b2:4e:23:a2:3f:c7:7b:10:0b:2a:f0:87:82:60:
cc:22:9d:f4:25:2d:a6:26:46:8c:df:89:be:6f:98:ab:6c:9f:
d3:f3:3d:ad:0c:a1:b4:33:16:0f:d5:58:5c:8f:20:32:f2:7c:
b5:61:4a:89:b4:d4:ea:72:82:b3:d3:a4:11:d4:8d:62:7f:ad:
91:05:77:05:93:31:90:17:30:66:6f:be:16:81:f5:17:7e:a3:
31:66:51:e1:7f:92:08:56:57:39:da:d5:06:4d:60:23:66:ad:
03:81:4b:5b:59:52:f6:88:6c:75:68:cd:d2:cc:e0:e4:be:61:
87:aa:85:35:d1:22:09:78:45:7d:b2:e7:5a:4d:ed:6b:cc:06:
a9:12:19:0b:1f:e2:43:14:ea:1b:f4:1b:31:74:b2:e1:12:1a:
f3:e4:20:3f:b9:50:f1:c3:fe:6a:85:a9:f9:81:2b:a6:5d:b0:
58:76:25:e2:3e:ed:fc:de:d6:47:29:94:1c:cc:4b:28:de:8d:
4d:e1:1d:a9:98:a2:9d:13:b9:8d:a5:a6:39:ef:fd:d5:ea:d5:
73:60:4b:83:be:b4:1b:95:67:48:69:6b:79:03:cf:d5:06:12:
be:bd:6d:5f:7a:1a:15:00:bb:e1:fa:1c:6e:32:b1:d6:38:79:
89:d6:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:24 2026 by rpki-client