Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/k3uB-cZXyx3pSOIEXUzVsYlUlyg.roa
File: k3uB-cZXyx3pSOIEXUzVsYlUlyg.roa (raw, json)
Hash identifier: cF/fp/KSeUrBG/GGBoopDa9U2GlSZZ1UBvQQClaBpJI=
Subject key identifier: 93:7B:81:F9:C6:57:CB:1D:E9:48:E2:04:5D:4C:D5:B1:89:54:97:28
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019C7B57580DD5E0AE9AE7F92EFB857A4D76
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/k3uB-cZXyx3pSOIEXUzVsYlUlyg.roa
Signing time: Fri 20 Feb 2026 13:57:27 +0000
ROA not before: Fri 20 Feb 2026 13:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 158.173.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:57:58:0d:d5:e0:ae:9a:e7:f9:2e:fb:85:7a:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 20 13:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=937b81f9c657cb1de948e2045d4cd5b189549728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:34:49:c3:72:ff:29:7f:1f:9b:b6:b0:da:
ef:b3:b5:9d:c2:8a:6b:a2:bc:dd:dd:70:0f:e8:36:
f0:c2:8c:2a:ca:a3:cc:ac:63:67:69:5c:8b:85:af:
e9:41:0a:8b:25:c7:bb:65:3b:12:9f:3f:d3:2a:3d:
72:ff:1f:6e:b3:4c:52:25:47:2a:7f:ee:68:b8:76:
5b:1e:a9:52:82:6e:81:fd:8e:73:ff:e6:31:2c:67:
d8:ae:10:72:33:d1:9c:2c:f7:1d:e4:5e:1a:ae:76:
7d:52:a4:66:eb:73:8c:b9:ec:cc:47:18:0b:00:29:
a6:e1:d3:36:e1:92:8e:31:53:e6:8d:d2:91:c4:7d:
a7:21:00:93:ee:ba:c5:ad:87:08:6b:09:56:c8:01:
52:f2:f2:78:17:18:06:4d:65:66:dd:c6:0d:a6:e4:
f7:b4:7b:bf:ec:f6:46:26:72:85:3d:f3:ed:58:f6:
52:19:f0:96:12:8a:10:ab:a1:49:62:94:b7:cd:69:
57:9c:b1:9e:28:d4:78:31:2e:11:e4:d6:61:5a:f3:
a1:8b:cd:42:c2:90:8c:5d:3a:2d:13:a8:f4:fe:0a:
f6:6d:f9:4a:4b:e9:8d:d2:d0:07:cd:0d:cb:97:aa:
96:5f:d2:a2:16:aa:2e:5f:ec:92:19:c8:2a:5c:36:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7B:81:F9:C6:57:CB:1D:E9:48:E2:04:5D:4C:D5:B1:89:54:97:28
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/k3uB-cZXyx3pSOIEXUzVsYlUlyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.130.0/23
Signature Algorithm: sha256WithRSAEncryption
66:ef:11:73:53:2c:90:f5:d1:96:3d:66:ee:c1:ef:9f:3f:27:
0f:27:1a:04:08:a3:cc:f7:4a:1a:18:a2:47:4a:1b:16:26:fc:
97:26:63:3a:7f:97:11:ca:88:41:bd:85:9e:d8:2f:9a:5e:60:
31:81:e3:b3:18:9d:fc:49:ea:c8:bf:8b:36:8e:d8:d0:27:57:
82:d0:61:59:7c:83:af:b9:59:70:a4:54:b5:d1:90:6e:e2:31:
8c:25:bd:d4:a5:e7:f3:5d:58:35:ed:f8:3b:c6:25:63:53:46:
0f:1f:13:f6:56:d3:c5:9f:a6:71:42:81:69:06:87:b0:3e:f7:
6e:97:9b:81:f4:e3:99:6b:db:43:eb:b3:cf:9b:aa:26:14:e0:
0f:bc:52:31:93:40:6c:9d:49:74:15:4a:67:69:20:99:84:13:
86:02:fb:c8:aa:ac:0d:d4:9a:f8:e3:c6:ee:3c:08:f2:ee:9e:
3e:c0:da:6b:ba:3a:ef:08:66:c0:81:bd:0b:51:6e:2c:2e:64:
58:8b:75:78:76:3e:0f:10:c9:74:ba:2c:78:db:c4:1f:e6:ce:
43:0f:65:7b:2c:fa:73:98:14:e1:ec:8e:67:78:a0:a8:f8:24:
35:11:47:52:1e:40:9c:43:57:2a:6d:e7:93:87:e6:ab:c8:00:
f8:38:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:51:04 2026 by rpki-client