Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UDW3xtJmQA03Tp7wcjTIJuYz-pE.roa
File: UDW3xtJmQA03Tp7wcjTIJuYz-pE.roa (raw, json)
Hash identifier: XuuUfw1nDh23ZnXasVv1y6Qb5dNRCF5MBPkKKBhQv4E=
Subject key identifier: 50:35:B7:C6:D2:66:40:0D:37:4E:9E:F0:72:34:C8:26:E6:33:FA:91
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019FCBCAF8AEC2FDE6BDF04C503EEC248E2C
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UDW3xtJmQA03Tp7wcjTIJuYz-pE.roa
Signing time: Tue 04 Aug 2026 08:01:44 +0000
ROA not before: Tue 04 Aug 2026 08:01:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 158.173.226.0/24 maxlen: 24
203.188.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:ca:f8:ae:c2:fd:e6:bd:f0:4c:50:3e:ec:24:8e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 4 08:01:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5035b7c6d266400d374e9ef07234c826e633fa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:83:5b:80:dd:3a:32:04:c6:80:37:a2:b1:
75:d8:d7:93:20:60:3c:24:bd:6b:79:20:07:ac:29:
02:69:96:ff:97:f7:bb:cd:b0:b9:4c:45:e5:53:ea:
26:bc:b0:a5:b5:a8:5c:63:73:6d:a5:46:5b:5c:85:
95:2a:82:ef:0f:9a:94:85:9f:c1:98:89:db:98:dc:
6a:c0:cd:81:de:e0:0a:9e:86:64:65:96:0a:93:05:
d3:ef:5e:5b:b3:4a:38:ee:4b:81:4f:ee:08:79:47:
93:61:e9:4a:c0:cc:38:df:d3:0b:8d:12:d7:6c:ea:
a5:96:07:49:8f:a4:74:0f:24:4c:d0:06:29:e1:5f:
c6:3a:0c:71:ad:89:a8:23:af:43:2e:6c:39:05:c3:
97:45:b6:30:eb:90:5e:c5:7e:ad:b2:8f:5c:82:12:
9a:c4:5b:f7:34:30:de:41:7f:a2:a9:e5:03:c7:ff:
7c:41:fd:f4:1f:5b:3e:e6:6c:a4:77:8c:8c:cf:f6:
a7:bf:c8:f9:1e:90:b2:4c:33:78:9c:3f:83:af:f3:
7f:8e:28:12:4f:47:cb:44:72:c5:cb:5a:e3:dc:3d:
fe:98:6c:c9:11:69:9b:c5:80:3d:18:10:21:5e:3b:
8d:3a:0b:77:69:8e:6d:67:3e:39:8a:f7:7b:4f:ca:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:35:B7:C6:D2:66:40:0D:37:4E:9E:F0:72:34:C8:26:E6:33:FA:91
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UDW3xtJmQA03Tp7wcjTIJuYz-pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.226.0/24
203.188.168.0/24
Signature Algorithm: sha256WithRSAEncryption
91:bf:3a:1b:59:c7:4e:52:ac:45:84:1b:c8:9e:aa:dc:b0:9c:
84:09:7d:0a:6c:b4:53:14:1d:15:f6:08:a6:f5:d5:10:0a:59:
8e:59:e5:7c:9a:91:22:e9:36:5d:8d:df:52:86:a2:6f:48:e8:
31:2d:9b:ae:b6:35:29:58:6d:5f:79:c6:92:28:82:9e:d0:50:
1c:8b:09:0e:b8:8e:ac:e9:a4:a5:6e:53:d9:7c:27:e5:81:78:
4c:b9:2e:44:d3:60:e2:fb:3e:87:20:d2:55:3e:ed:50:9a:a1:
f4:73:a3:4f:4d:59:9f:ef:a7:ad:ea:a1:16:9f:f9:4e:95:0b:
52:bf:d2:a2:80:cd:61:79:4e:30:44:49:19:96:d8:0e:70:ca:
65:a4:f7:2f:8c:7c:10:d3:33:c4:cd:45:68:1c:36:21:25:8e:
91:f1:0b:3d:5e:66:f0:a9:d1:b0:1b:5c:76:19:27:98:14:e8:
6c:24:41:de:80:84:c4:5d:02:89:b9:6a:da:f0:2d:1f:ab:f6:
ae:57:42:26:c8:f9:5d:4d:40:ee:6d:51:21:01:5d:fc:5b:d9:
71:2d:02:fb:f8:de:47:4f:8b:b9:16:47:fe:cb:4d:6b:48:78:
1a:dc:ad:ed:63:9d:86:15:8a:c5:e6:a4:81:4c:77:9c:a5:57:
fb:a1:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:09 2026 by rpki-client