Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/f44eszNs6D0v-HlrJ5Pij4HVGbw.roa
File: f44eszNs6D0v-HlrJ5Pij4HVGbw.roa (raw, json)
Hash identifier: XeLc3+LlZiDsoAd2z0IPPwCPGa5TaG+qU4Bkpy26DEM=
Subject key identifier: 7F:8E:1E:B3:33:6C:E8:3D:2F:F8:79:6B:27:93:E2:8F:81:D5:19:BC
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A143FCF9D82256BB7064F317E7D16FC9FB
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/f44eszNs6D0v-HlrJ5Pij4HVGbw.roa
Signing time: Fri 16 Oct 2026 09:13:34 +0000
ROA not before: Fri 16 Oct 2026 09:13:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210558
IP address blocks: 124.198.131.0/24 maxlen: 24
124.198.132.0/24 maxlen: 24
147.90.182.0/24 maxlen: 24
147.90.214.0/24 maxlen: 24
147.90.219.0/24 maxlen: 24
185.19.40.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:fc:f9:d8:22:56:bb:70:64:f3:17:e7:d1:6f:c9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 16 09:13:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f8e1eb3336ce83d2ff8796b2793e28f81d519bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:17:cb:34:44:cf:64:c8:db:b1:f8:cf:68:
bc:8b:93:dd:e2:db:28:e2:04:2d:fc:fa:5c:a5:2b:
40:50:5c:3f:78:54:5e:f8:2d:a7:45:44:28:88:dd:
5b:4d:f3:f7:88:c8:62:24:cc:c0:96:d3:03:a5:1f:
07:ad:c6:86:02:42:30:66:ee:6a:17:c8:19:13:5d:
14:d2:17:38:a4:a5:e2:7a:5a:da:59:04:e5:a1:43:
62:0b:f7:b8:eb:3c:86:df:68:c7:f3:a1:93:73:1c:
7f:7c:35:1c:3f:14:94:d8:0c:2c:30:61:6b:eb:91:
79:a1:f5:2c:d5:cc:4c:4f:ef:f3:9f:1d:18:37:80:
eb:7b:aa:5b:a0:d1:6c:c0:ae:f0:50:09:65:6b:14:
c9:3d:77:60:10:a7:f5:ca:71:32:39:0a:3e:73:1c:
ce:7b:7d:c0:15:be:d7:c0:e6:f3:cd:70:cf:97:fe:
94:85:e1:40:c7:90:fe:d6:90:dd:3a:46:b2:c4:f7:
fd:bb:a5:53:35:82:76:4e:08:59:51:93:ca:01:22:
37:95:16:08:61:22:ae:6e:16:83:6c:77:0e:cc:57:
e5:70:ba:23:89:95:9c:46:46:24:5c:95:de:c1:00:
b9:7c:62:fb:dc:39:1d:db:cd:ce:94:05:d7:84:e1:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8E:1E:B3:33:6C:E8:3D:2F:F8:79:6B:27:93:E2:8F:81:D5:19:BC
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/f44eszNs6D0v-HlrJ5Pij4HVGbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.198.131.0-124.198.132.255
147.90.182.0/24
147.90.214.0/24
147.90.219.0/24
185.19.40.0/24
203.188.171.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:cd:30:8d:82:af:22:09:5a:91:12:c3:04:fb:ba:1e:36:8d:
8f:5f:9d:08:e1:a9:78:dc:49:65:74:c6:f4:b6:7b:93:94:8f:
6f:c1:44:dc:f6:30:07:16:fc:97:3d:ad:e2:1f:57:5a:eb:94:
c3:88:6b:71:e7:7f:a5:fa:c9:a5:02:ac:97:14:cb:f6:63:71:
7f:a1:f6:92:01:54:cf:61:cc:64:29:36:18:f9:8d:04:5a:07:
47:4f:01:c0:0a:6f:fc:65:03:f2:ef:20:cd:a3:93:30:94:8f:
31:6d:b3:9e:98:bd:d0:97:e1:5f:6d:7e:72:40:84:4a:5b:62:
f0:d1:8f:6f:2d:aa:aa:ed:8b:74:94:bd:88:bc:0b:d9:60:6f:
9f:20:74:e4:e6:20:32:86:5f:08:a7:de:b6:54:4d:c5:46:f2:
e3:75:c4:7a:44:2b:86:82:d9:26:98:c3:cb:96:1c:5c:56:80:
01:5d:5c:a6:e8:ea:57:64:65:60:10:7d:76:6e:fd:d7:23:e2:
95:51:04:ea:3c:68:9f:32:49:c8:a3:01:2a:1b:aa:28:b6:aa:
bf:4f:b4:8a:6f:2c:ae:66:d9:4c:7c:52:f2:3b:c5:ad:ac:b0:
a7:82:a4:27:98:2d:5e:15:4c:e7:08:1e:bd:6f:53:15:36:ea:
b6:0e:1b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:16:25 2026 by rpki-client