Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/kfWhu14XqoTSm-of-LIXoFlKmfo.roa
File: kfWhu14XqoTSm-of-LIXoFlKmfo.roa (raw, json)
Hash identifier: 2gNPbrsY3TjB4DdeKmS0SCgbXCurf3GZod3BA1mJqCs=
Subject key identifier: 91:F5:A1:BB:5E:17:AA:84:D2:9B:EA:1F:F8:B2:17:A0:59:4A:99:FA
Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial: 019EFB7FC421719921BE070D0BE1315FF76A
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/kfWhu14XqoTSm-of-LIXoFlKmfo.roa
Signing time: Wed 24 Jun 2026 21:18:34 +0000
ROA not before: Wed 24 Jun 2026 21:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 158.94.80.0/20 maxlen: 20
158.94.96.0/19 maxlen: 19
158.94.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:7f:c4:21:71:99:21:be:07:0d:0b:e1:31:5f:f7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Validity
Not Before: Jun 24 21:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91f5a1bb5e17aa84d29bea1ff8b217a0594a99fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:04:7a:bd:11:61:27:db:54:e6:f4:38:ab:
6d:30:2a:55:44:88:f8:01:32:f7:7d:ba:87:4a:e5:
83:21:2c:da:38:81:11:58:b5:30:bf:78:82:cf:2e:
65:f8:53:8d:a9:dc:77:77:b1:0e:1d:b4:66:53:a3:
5b:91:35:08:62:c5:63:f2:55:2f:1a:8a:c8:55:63:
ff:f1:6d:e3:e5:f1:7a:09:59:a4:65:6f:8f:63:0b:
e0:a9:b4:b7:16:bf:67:b7:58:34:d1:cb:19:f4:80:
87:37:71:62:ac:a1:e0:a4:49:de:d2:06:6a:a4:3d:
63:f7:1d:67:55:c0:c3:3f:e5:83:f2:bc:4b:ea:59:
98:73:e2:23:a2:2e:9b:fb:a3:b6:b2:8e:d4:c1:c9:
12:0f:39:73:a6:03:01:8e:dd:1b:c4:cf:07:01:07:
41:44:2d:6a:4f:39:54:6e:a8:ff:9c:cf:f0:98:77:
2d:e8:ca:72:43:1e:8c:1e:99:a3:7d:f0:54:34:e0:
c4:94:6f:d6:b7:17:f3:de:0e:13:cc:e6:76:06:33:
3a:37:4a:73:f2:1d:f8:c8:bd:30:03:23:3f:13:4a:
b5:0c:8e:26:2d:0a:60:2d:2b:c5:0a:26:1d:8a:a8:
10:21:6f:61:3f:7a:9e:68:06:5e:7a:df:19:14:9b:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F5:A1:BB:5E:17:AA:84:D2:9B:EA:1F:F8:B2:17:A0:59:4A:99:FA
X509v3 Authority Key Identifier:
keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/kfWhu14XqoTSm-of-LIXoFlKmfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.80.0-158.94.159.255
Signature Algorithm: sha256WithRSAEncryption
82:36:d6:ce:41:aa:8c:21:3c:b0:68:71:2e:a7:ed:ef:b5:47:
f6:9c:2c:03:8b:bd:4e:d8:07:a9:00:67:16:ac:9f:14:a5:7d:
62:66:2b:50:46:ad:c9:78:5b:c7:01:27:8b:04:02:5f:b7:3f:
f3:5f:db:40:fb:17:3e:c6:1b:a3:09:21:ce:0f:bc:83:ac:4e:
10:1f:93:82:0e:20:a6:98:d9:ac:e5:cc:60:f6:8d:99:02:c0:
4e:6b:1e:b7:4d:b7:f4:aa:19:3e:0d:cb:38:ed:59:18:49:de:
f9:8e:3d:f9:c3:4d:00:38:1e:18:a2:d8:c9:e6:ff:d9:53:e8:
42:ed:eb:8c:ca:89:78:c5:75:64:50:d5:8c:b3:a4:6d:43:43:
b2:c4:c7:96:fa:6d:33:5b:9a:e8:d8:81:39:1f:cd:20:83:33:
fe:49:f9:8b:f7:1e:98:f2:8e:61:b7:91:1e:5e:a6:f4:c4:dc:
6d:d8:3b:98:ac:44:8d:54:ec:4d:83:da:7c:87:bc:99:fe:99:
00:97:1f:44:4c:3f:71:66:14:30:a3:48:dd:08:dc:c6:71:e1:
67:38:da:af:93:ea:b0:bf:f2:69:27:01:7e:5b:1d:92:07:1f:
f3:bb:68:46:23:35:1d:d5:99:b3:e2:16:0d:4f:2e:6e:4f:af:
fe:99:2a:3d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ77f8QhcZkhvgcNC+ExX/dqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZmU2ODNiMWQ3ZTQ3YjdjN2VkYTE1NTAxNjI3YjcwOTIw
ODUzYTEwHhcNMjYwNjI0MjExODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWY1YTFiYjVlMTdhYTg0ZDI5YmVhMWZmOGIyMTdhMDU5NGE5OWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQMEer0RYSfbVOb0OKttMCpVRIj4
ATL3fbqHSuWDISzaOIERWLUwv3iCzy5l+FONqdx3d7EOHbRmU6NbkTUIYsVj8lUv
GorIVWP/8W3j5fF6CVmkZW+PYwvgqbS3Fr9nt1g00csZ9ICHN3FirKHgpEne0gZq
pD1j9x1nVcDDP+WD8rxL6lmYc+Ijoi6b+6O2so7UwckSDzlzpgMBjt0bxM8HAQdB
RC1qTzlUbqj/nM/wmHct6MpyQx6MHpmjffBUNODElG/Wtxfz3g4TzOZ2BjM6N0pz
8h34yL0wAyM/E0q1DI4mLQpgLSvFCiYdiqgQIW9hP3qeaAZeet8ZFJvrLwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJH1obteF6qE0pvqH/iyF6BZSpn6MB8GA1UdIwQY
MBaAFBD+aDsdfke3x+2hVQFie3CSCFOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTIt
YzRiZWZiMjU2MjJjLzEva2ZXaHUxNFhxb1RTbS1vZi1MSVhvRmxLbWZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTItYzRiZWZiMjU2MjJj
LzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASeXlAD
BAWeXoAwDQYJKoZIhvcNAQELBQADggEBAII21s5BqowhPLBocS6n7e+1R/acLAOL
vU7YB6kAZxasnxSlfWJmK1BGrcl4W8cBJ4sEAl+3P/Nf20D7Fz7GG6MJIc4PvIOs
ThAfk4IOIKaY2azlzGD2jZkCwE5rHrdNt/SqGT4NyzjtWRhJ3vmOPfnDTQA4Hhii
2Mnm/9lT6ELt64zKiXjFdWRQ1YyzpG1DQ7LEx5b6bTNbmujYgTkfzSCDM/5J+Yv3
HpjyjmG3kR5epvTE3G3YO5isRI1U7E2D2nyHvJn+mQCXH0RMP3FmFDCjSN0I3MZx
4Wc42q+T6rC/8mknAX5bHZIHH/O7aEYjNR3VmbPiFg1PLm5Pr/6ZKj0=
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:42 2026 by rpki-client