Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/vgwdILqwPk8rdbDhHM2c-AgAhB4.roa
File: vgwdILqwPk8rdbDhHM2c-AgAhB4.roa (raw, json)
Hash identifier: YHN5wgCeXGrO74OeH62YvznYMV0tY1MlzFEBmb4phJI=
Subject key identifier: BE:0C:1D:20:BA:B0:3E:4F:2B:75:B0:E1:1C:CD:9C:F8:08:00:84:1E
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D293DF3AEB3603389DBF9ABE41274B676
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/vgwdILqwPk8rdbDhHM2c-AgAhB4.roa
Signing time: Thu 26 Mar 2026 08:23:39 +0000
ROA not before: Thu 26 Mar 2026 08:23:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 158.173.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Apr 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:3d:f3:ae:b3:60:33:89:db:f9:ab:e4:12:74:b6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 26 08:23:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be0c1d20bab03e4f2b75b0e11ccd9cf80800841e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:cb:6d:55:7c:ab:b7:4d:c4:62:44:9d:a9:
bd:26:4f:8a:04:9a:ee:8e:7c:84:54:0d:3c:4b:7a:
f4:98:be:a6:f1:82:f0:36:aa:fa:e7:7d:51:e0:8a:
0b:45:53:7e:53:83:a5:5d:9e:e0:6c:25:73:09:19:
58:aa:cb:08:83:a5:16:86:b4:0d:a3:65:1d:22:28:
f7:96:75:10:c4:df:55:1c:2f:ee:34:34:5f:a4:21:
a6:db:7d:13:44:cb:7d:9c:1b:60:f1:06:43:a7:79:
48:c2:c7:3f:9b:dd:b9:5e:11:fb:cc:f0:4d:8a:a2:
5f:ea:fa:d1:24:0a:97:c7:3c:e7:a2:59:6b:33:da:
9e:6e:1a:d5:23:b7:12:e2:2e:03:40:38:2b:94:dd:
97:2a:3e:63:18:4d:97:bd:af:1a:b6:e8:e7:ff:71:
49:03:e5:95:00:f8:eb:a9:4c:f4:bb:e9:e1:c9:a0:
83:5a:30:5d:e8:06:06:3d:f7:93:93:94:16:fc:0c:
09:c1:1c:f8:30:ee:9f:d5:8c:c1:11:ef:1d:53:74:
04:5a:83:06:f6:a5:7a:43:2d:99:81:78:11:d9:88:
b2:d1:2f:5e:8f:8e:19:f7:90:2e:79:68:25:3c:f5:
fe:06:94:d0:d9:bb:61:4a:da:1d:4c:f2:3c:a6:2f:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0C:1D:20:BA:B0:3E:4F:2B:75:B0:E1:1C:CD:9C:F8:08:00:84:1E
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/vgwdILqwPk8rdbDhHM2c-AgAhB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.205.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:63:12:d8:25:6b:05:dd:4b:5e:db:4e:df:55:4e:d0:91:de:
71:e1:1d:3b:58:c1:01:13:11:ac:f4:bb:db:58:5b:ca:aa:d6:
de:68:4e:b2:6b:2d:20:ae:45:45:f5:8a:1c:24:ad:4f:6e:91:
61:2e:e4:80:73:a6:55:3c:cc:f4:9d:76:69:bd:d3:d9:97:79:
82:23:fa:8f:1f:0a:58:ec:dd:cb:1e:fd:d4:84:e4:e6:69:39:
7f:39:48:55:37:9d:e0:fd:64:ae:8f:18:59:b1:85:34:98:f7:
8e:a8:e5:38:05:02:d9:7b:1b:a3:75:f3:9e:06:22:60:6b:8c:
f7:c5:7a:b9:c9:a3:25:fb:87:39:22:14:b5:16:56:73:2a:73:
09:46:ce:c0:69:cc:5e:4e:93:ed:cc:40:55:6f:9f:28:6b:aa:
d6:00:89:94:bf:26:b7:6b:7b:18:13:fb:e5:b3:ec:6d:bd:6d:
dd:b6:2c:c9:6b:23:de:f9:82:02:0c:3c:58:4b:91:72:3b:e2:
b8:5d:1c:ab:e9:95:57:38:8e:f5:f3:11:3f:17:b4:b3:fc:39:
9b:35:66:9f:fa:b5:dc:0e:a7:f2:6a:06:1c:a9:5b:3f:58:8b:
c5:3a:0b:71:ae:45:b0:be:8f:bc:82:c6:28:34:a8:4f:0e:3a:
e5:29:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 14:50:23 2026 by rpki-client