Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/k58Jy1n41IJYZg7BLeBFAoXcdOI.roa
File: k58Jy1n41IJYZg7BLeBFAoXcdOI.roa (raw, json)
Hash identifier: ndjlQvAxKsaslU/dkea0+pF7TSTK+ry1Cyzxhiz8NSI=
Subject key identifier: 93:9F:09:CB:59:F8:D4:82:58:66:0E:C1:2D:E0:45:02:85:DC:74:E2
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F560DF86384125C8846E067F7F95CD363
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/k58Jy1n41IJYZg7BLeBFAoXcdOI.roa
Signing time: Sun 12 Jul 2026 11:19:43 +0000
ROA not before: Sun 12 Jul 2026 11:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 147.90.1.0/24 maxlen: 24
158.173.224.0/24 maxlen: 24
158.173.225.0/24 maxlen: 24
158.173.228.0/24 maxlen: 24
158.173.234.0/24 maxlen: 24
158.173.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:56:0d:f8:63:84:12:5c:88:46:e0:67:f7:f9:5c:d3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 12 11:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=939f09cb59f8d48258660ec12de0450285dc74e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:1e:e7:a1:0c:d8:02:23:6d:4b:35:7b:fa:
c7:a7:32:9b:4f:7f:c0:b3:26:19:bb:1c:ea:49:f4:
62:41:5f:86:a7:6c:80:b6:97:66:25:f2:56:49:2c:
1f:36:68:82:f3:3e:7e:74:1a:c2:e4:cf:a2:a5:f3:
a3:b9:ea:5a:70:bf:52:e6:ec:6c:b5:53:43:5c:b9:
03:1c:63:fc:59:1c:47:7e:61:e6:b7:0a:97:93:43:
25:96:34:91:97:79:20:b4:62:80:51:80:85:77:59:
9c:09:93:fc:c3:99:c5:90:ab:76:b7:bd:d3:44:f6:
34:26:27:b7:81:97:e4:88:e0:33:6f:3e:b7:72:03:
79:82:b7:4f:29:27:26:de:27:3f:e2:46:73:44:df:
a0:4e:99:2d:fa:60:91:47:e4:eb:7e:d8:90:62:b5:
5a:af:bc:9b:37:0f:ad:3e:7a:81:9c:f5:41:e9:54:
45:29:af:ce:ad:da:46:9f:70:f5:72:57:b5:c2:93:
b8:a6:c2:4e:af:5c:e1:ad:0e:e0:59:7d:76:e8:c7:
fe:9b:ee:72:c4:24:69:96:bf:2c:0a:ed:a9:a2:f4:
75:fd:c9:82:63:3d:64:e8:30:75:5d:f1:86:77:f4:
ef:46:7a:2e:c8:fb:87:08:5a:9a:76:9f:38:74:ff:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9F:09:CB:59:F8:D4:82:58:66:0E:C1:2D:E0:45:02:85:DC:74:E2
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/k58Jy1n41IJYZg7BLeBFAoXcdOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.1.0/24
158.173.224.0/23
158.173.228.0/24
158.173.234.0/23
Signature Algorithm: sha256WithRSAEncryption
77:4c:91:b9:11:22:f2:5a:0f:0d:04:4f:22:23:bc:59:c2:e3:
d8:c6:c6:06:65:cf:1d:40:44:34:33:6b:59:af:8f:4a:58:29:
68:81:55:b8:7e:71:24:8e:9c:72:c1:49:55:07:09:30:da:d6:
56:6d:23:5c:7e:b3:9b:04:a0:a1:97:86:4c:79:3e:95:92:16:
d9:2e:2b:3a:3e:33:3c:00:10:82:ea:27:f8:f1:14:b7:ad:39:
96:95:08:7c:65:73:4d:91:cb:74:ec:19:65:da:27:b3:6e:98:
62:6e:35:2b:ef:ae:57:92:57:38:01:66:bf:fb:26:32:ec:c6:
ac:ee:38:5d:bb:98:5a:bc:6e:d4:0d:14:21:13:47:ec:ec:4f:
84:48:85:29:37:06:8e:26:9c:91:09:58:02:65:13:96:8b:8f:
1e:c3:69:cc:7e:b7:bf:38:a5:c8:c2:04:12:ee:99:1e:e9:4b:
2e:3b:00:ad:f9:0a:bb:32:f2:f4:7b:74:ca:64:91:b5:01:c9:
15:6e:fa:96:b7:e3:6d:f7:c9:53:59:dc:9f:ba:fc:32:81:61:
fa:58:32:ea:a5:7d:58:47:2f:7b:c3:53:7d:be:22:4a:88:79:
b4:52:80:69:43:89:b3:4f:35:85:3f:77:e7:a4:22:f4:f7:c1:
a6:72:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:26 2026 by rpki-client