Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dWN6_rxxhIvWaWVNtq2UruGM8RY.roa
File: dWN6_rxxhIvWaWVNtq2UruGM8RY.roa (raw, json)
Hash identifier: 5F0Jz2aAqdLjw32oa1sHV0cqPgve9tAr1lQ7Q5MFq2Q=
Subject key identifier: 75:63:7A:FE:BC:71:84:8B:D6:69:65:4D:B6:AD:94:AE:E1:8C:F1:16
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F7655FD823591661A57161A9861CFE7AE
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dWN6_rxxhIvWaWVNtq2UruGM8RY.roa
Signing time: Sat 18 Jul 2026 17:46:14 +0000
ROA not before: Sat 18 Jul 2026 17:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214668
IP address blocks: 158.173.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:55:fd:82:35:91:66:1a:57:16:1a:98:61:cf:e7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 18 17:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75637afebc71848bd669654db6ad94aee18cf116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:ce:48:ac:d7:cc:72:e6:03:5e:fc:20:63:
f4:6d:9a:b8:f4:52:b3:7c:0b:9a:a0:96:1d:50:0d:
4c:49:cf:1d:51:32:93:b3:16:ae:a5:11:90:6a:37:
dc:f2:ae:c2:67:e8:94:69:f5:58:98:fe:de:5b:50:
ab:b0:e2:85:9f:2f:ff:3d:cb:3d:56:97:cd:29:2b:
8b:5f:25:50:b7:ff:81:ed:9c:13:6f:af:86:af:c4:
f7:3d:5a:2e:0e:e6:cb:a4:1e:32:4a:24:2d:5e:26:
e7:e3:8e:04:87:81:bf:db:6d:d4:85:25:b0:15:7e:
64:0b:a6:fb:9a:23:41:07:ff:21:90:f1:3b:ac:ba:
07:9c:e8:cc:40:3d:33:20:cb:77:13:47:60:13:1f:
81:1c:28:db:1a:15:87:67:19:b9:9a:5d:63:e9:04:
db:a3:70:17:4c:c3:aa:c8:03:61:af:ad:97:e0:e4:
fe:ca:f3:45:f4:fb:a5:de:29:c2:78:63:36:39:51:
9f:9b:47:36:4b:f6:d7:0e:e2:0c:e1:a9:75:bf:e5:
8f:58:b7:98:ad:ed:95:36:3e:ea:6d:5c:e3:d8:ba:
96:e3:ac:24:ff:83:7b:f9:03:c6:0d:30:c4:23:d7:
45:d6:1c:41:6a:f3:37:be:58:76:cd:c7:8f:d1:c3:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:63:7A:FE:BC:71:84:8B:D6:69:65:4D:B6:AD:94:AE:E1:8C:F1:16
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dWN6_rxxhIvWaWVNtq2UruGM8RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.193.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8f:ff:8b:7a:2b:4a:70:95:20:8b:a5:b4:e7:ff:b5:07:06:
a3:5f:98:79:ea:3d:15:a2:ef:13:9a:e6:b9:44:28:d0:6f:f3:
a9:19:c8:4c:22:47:59:32:57:a0:f5:b4:bf:b3:89:44:8f:45:
98:81:2e:ed:f8:4f:ca:f7:2f:6a:5c:37:be:21:29:4f:8a:3b:
65:e6:74:45:19:46:61:3c:94:3d:11:b6:7d:44:29:00:95:a8:
c8:28:94:65:67:57:83:d5:08:fa:21:58:c1:81:7f:8f:8b:ef:
24:76:e5:50:da:60:7d:c4:50:a0:85:bb:4c:2d:a2:16:4e:87:
d4:a7:6e:68:63:0f:3c:1a:f4:0e:e3:43:15:cf:45:e9:e1:0a:
25:5d:75:c7:2b:ef:dc:4f:02:02:db:d8:aa:6b:fb:06:4a:1d:
ae:5c:f8:c5:80:fe:82:77:b7:76:38:59:0d:f4:33:1d:40:d5:
19:10:3c:52:28:a0:12:51:59:d3:a0:d4:4e:62:82:47:90:dc:
86:7c:fa:97:f1:7f:d6:44:45:fd:f3:92:78:56:3b:cd:a2:9c:
98:9b:c6:63:c0:af:a1:44:9b:5b:4d:4c:e3:1d:a4:ad:b3:a5:
fe:ff:d7:d2:3c:14:a5:e9:92:4f:dd:02:c8:50:b0:df:eb:e5:
c5:9b:91:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:41:15 2026 by rpki-client