Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kOgED97KtBgwiZjR-fYz2KMwSSc.roa
File: kOgED97KtBgwiZjR-fYz2KMwSSc.roa (raw, json)
Hash identifier: LpDp6RMp7yz7HHVbBlRDGzp4sXQQIcYG8TfCtAYzVC0=
Subject key identifier: 90:E8:04:0F:DE:CA:B4:18:30:89:98:D1:F9:F6:33:D8:A3:30:49:27
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019FF21DDE2C5C98929DE515D6D10EB01D7A
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kOgED97KtBgwiZjR-fYz2KMwSSc.roa
Signing time: Tue 11 Aug 2026 18:37:51 +0000
ROA not before: Tue 11 Aug 2026 18:37:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 158.173.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:1d:de:2c:5c:98:92:9d:e5:15:d6:d1:0e:b0:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 11 18:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90e8040fdecab418308998d1f9f633d8a3304927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:a5:60:9e:84:7f:8d:3d:a6:6b:9c:43:ba:
fb:dd:13:22:07:d8:fe:90:81:87:68:f5:50:90:c1:
cd:31:60:a2:03:72:c4:cf:bb:69:15:e7:2a:a7:c7:
45:2d:94:ee:af:63:42:0b:38:55:9c:07:a6:aa:30:
c9:b4:0f:9a:d8:d8:69:6d:37:ed:44:c5:19:6e:c1:
9a:56:23:3b:4f:b3:08:4b:b0:22:c0:63:14:9c:f1:
78:7d:f5:64:b9:e3:22:59:64:a4:d9:a9:94:0b:89:
32:66:94:14:8c:57:4d:e2:bc:a2:02:20:ac:ae:13:
91:89:9b:0d:ef:f4:60:c9:27:44:39:66:83:58:02:
53:c8:fa:f1:6c:49:51:fd:19:f4:13:dc:a6:98:62:
8e:a9:a9:59:b4:51:76:d2:5f:4f:6d:cf:02:a2:77:
1a:b4:ff:15:82:53:ee:4d:f5:cc:d3:84:36:57:a6:
68:71:cd:11:aa:b1:0e:6d:3c:d2:73:b7:25:12:fd:
8f:91:05:e5:ae:d6:15:da:92:db:da:31:dd:33:39:
49:a1:f0:b7:64:ad:79:ef:f5:3e:e5:e1:e0:2c:b1:
36:2d:df:7b:71:0b:76:b3:68:23:90:cf:78:68:fc:
17:8f:82:31:7c:57:e4:49:63:b5:00:7f:01:69:a1:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E8:04:0F:DE:CA:B4:18:30:89:98:D1:F9:F6:33:D8:A3:30:49:27
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kOgED97KtBgwiZjR-fYz2KMwSSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.130.0/23
Signature Algorithm: sha256WithRSAEncryption
87:eb:17:ae:03:47:e7:94:15:bc:49:a1:76:a4:74:ba:95:e5:
66:67:13:7e:a2:04:ee:2c:9b:6f:2b:bb:e6:49:a4:aa:6d:65:
cf:3a:cf:1e:4f:17:e3:f1:32:ff:0d:b5:e2:fb:a2:e6:57:40:
a3:a4:cd:e9:85:2e:b9:f0:0f:08:99:8f:d2:d8:14:2a:97:84:
66:db:ca:7d:87:d2:d2:9a:2c:67:a5:69:91:7a:9a:f9:1d:ea:
9c:1e:d4:ec:d2:67:17:42:0b:2c:68:8c:0e:2c:88:f8:79:92:
73:17:d3:00:8b:c7:82:1b:c7:2f:3d:d8:bc:e1:28:34:62:bd:
24:ab:32:c3:82:2b:0f:d9:f4:93:35:ac:d2:b6:7f:6f:5b:f9:
0a:06:79:49:ae:64:3a:91:4b:e1:a9:af:a5:93:3c:09:17:91:
b7:6a:e1:7c:b4:ab:b5:72:e0:5f:7e:06:64:81:9c:07:6b:f0:
45:68:00:86:9a:99:6b:81:78:3b:b9:5f:76:25:1e:0c:55:05:
15:ec:d8:6f:5f:ac:25:87:b3:be:ff:57:c8:8c:7c:71:cd:1a:
b4:b6:da:5d:87:15:a0:4f:fb:95:43:5a:1a:a1:b7:78:64:d3:
d5:fb:e3:6c:26:36:10:00:f2:7d:b5:50:de:af:36:68:24:8e:
c4:93:15:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:44:08 2026 by rpki-client