Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/G_9HiCAh6DhgIjJNNBI5M6CZ_Co.roa
File: G_9HiCAh6DhgIjJNNBI5M6CZ_Co.roa (raw, json)
Hash identifier: jngW9791z8RNPS1AWskF9bAI5myaB/ivQGN+ISS21c8=
Subject key identifier: 1B:FF:47:88:20:21:E8:38:60:22:32:4D:34:12:39:33:A0:99:FC:2A
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DCF0B72AB8430D48668AC963F4AD3DF45
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/G_9HiCAh6DhgIjJNNBI5M6CZ_Co.roa
Signing time: Mon 27 Apr 2026 13:05:27 +0000
ROA not before: Mon 27 Apr 2026 13:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402187
IP address blocks: 158.173.215.0/24 maxlen: 24
158.173.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:0b:72:ab:84:30:d4:86:68:ac:96:3f:4a:d3:df:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 27 13:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bff47882021e8386022324d34123933a099fc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:7e:66:ba:4a:9d:23:72:e4:d9:6e:f6:85:
44:52:0e:38:d7:72:da:f5:bf:8b:70:72:f4:08:9c:
ae:0f:5d:52:ef:53:57:93:1e:ea:fc:95:f9:0a:57:
5f:0f:9b:e3:6d:f5:58:d4:38:50:0a:7c:48:a1:4d:
06:44:1b:aa:54:ab:69:ca:00:0b:8c:c9:9b:a9:ad:
80:91:3b:34:b8:cc:2b:52:5b:83:89:e9:07:32:a4:
22:11:93:78:05:d2:af:49:bb:c5:61:e5:be:cd:92:
bf:41:9a:24:c8:88:d6:df:d3:35:1d:e7:10:ff:36:
43:78:76:1b:b5:ee:a5:6b:83:e1:99:0a:be:b5:7c:
0e:2f:de:1b:e1:01:2f:e8:c2:86:97:06:cd:35:ee:
10:c5:ab:56:61:70:16:3a:62:12:58:5c:c6:03:c7:
c6:d1:c1:42:d9:b3:f7:e8:69:a1:05:02:b0:d5:29:
91:11:a1:d4:1c:f9:9a:10:01:a1:5e:87:07:24:ce:
8f:28:b3:97:c7:c7:52:6b:61:c0:af:9c:6b:7b:68:
8d:85:82:05:ff:b5:8e:03:07:2b:3f:77:c5:09:13:
2a:f5:1b:61:57:30:6b:7f:95:06:b4:4e:a5:29:83:
73:11:73:e9:1a:d5:dd:52:7d:51:ba:7f:96:e7:5d:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FF:47:88:20:21:E8:38:60:22:32:4D:34:12:39:33:A0:99:FC:2A
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/G_9HiCAh6DhgIjJNNBI5M6CZ_Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.215.0/24
158.173.221.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:88:73:86:db:92:76:2c:9a:59:fd:d7:8b:f7:f3:70:63:28:
67:8a:89:c7:d0:d1:54:53:2e:1d:e6:a4:3f:5a:7b:2e:99:5d:
d9:d8:c3:2b:e8:42:cd:bd:a5:34:0f:d3:d9:ab:1e:ec:e6:7b:
22:88:61:a8:32:33:01:51:64:49:ee:8a:2e:26:ac:68:e5:1b:
60:a8:94:7d:52:a8:ef:ea:d2:b8:1a:0f:34:3c:81:9b:a2:0f:
3e:e5:61:0f:12:b0:91:d1:66:d5:07:c7:33:50:6e:52:3b:53:
4b:9b:38:bc:2f:62:fa:76:c8:7d:d6:d6:db:b5:28:01:58:d9:
59:17:2c:90:f2:07:1b:cf:be:4b:a4:8a:2b:d5:93:c1:18:02:
a8:0f:ca:99:66:d9:ba:0c:1e:2a:d0:3a:22:38:d9:0c:aa:90:
c2:2b:a2:e0:1c:de:4f:33:70:26:e9:ec:f6:bc:b9:c8:f6:f7:
ba:8d:5d:20:a4:00:e3:a3:c8:fc:55:de:5e:de:bc:f3:fc:f0:
63:9f:04:51:2a:a0:9d:aa:b1:0f:21:fa:9a:b3:2b:50:55:03:
ad:52:fe:57:ec:83:bf:98:35:a4:a5:bc:ef:d3:2a:4c:4e:ae:
79:7a:6b:28:2c:98:59:a6:61:28:0c:3d:e4:00:0a:e9:c4:01:
ea:59:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:55 2026 by rpki-client