Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ki7QGXcuEwd4aFgT0qKmXqVktN4.roa
File: Ki7QGXcuEwd4aFgT0qKmXqVktN4.roa (raw, json)
Hash identifier: vwnnyBvchASVRJYiqokTjCX9lxF7bEIYyOu0VfwsGg4=
Subject key identifier: 2A:2E:D0:19:77:2E:13:07:78:68:58:13:D2:A2:A6:5E:A5:64:B4:DE
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F72FC23A38DF691D22987EAD84A8D4DD1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ki7QGXcuEwd4aFgT0qKmXqVktN4.roa
Signing time: Sat 18 Jul 2026 02:09:14 +0000
ROA not before: Sat 18 Jul 2026 02:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209466
IP address blocks: 158.173.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:fc:23:a3:8d:f6:91:d2:29:87:ea:d8:4a:8d:4d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 18 02:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a2ed019772e130778685813d2a2a65ea564b4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:ee:b4:1f:d1:2e:63:ee:67:9e:e2:2c:24:
32:46:f3:3f:9a:30:1a:36:f6:23:b0:f6:93:81:00:
ba:cd:e3:8c:62:88:77:4d:24:73:04:76:f0:78:8e:
86:c3:8b:60:5d:56:bc:cf:f6:5b:ab:00:90:12:f6:
87:44:0e:06:90:e9:66:39:cf:e8:3c:b1:d6:22:94:
85:fc:99:a3:c2:8a:66:39:9d:f8:06:dd:be:9a:e1:
1e:d7:2b:f1:97:c3:2e:4f:83:c1:28:4b:d9:df:35:
0a:ae:9b:07:d6:b4:d5:ad:45:49:97:9d:af:8a:cf:
a9:70:04:66:f6:00:16:14:b6:cb:5a:dc:70:b1:65:
b7:ed:dd:0c:23:28:ac:24:15:7a:7b:a1:ef:c4:74:
41:8e:99:ce:2a:bd:05:31:7b:f4:ca:3b:df:0c:b7:
b4:59:2a:49:8c:ea:c4:49:5d:c4:1c:df:e9:ec:f7:
13:6e:26:df:60:b3:fd:38:42:5c:78:da:96:28:e4:
e2:db:87:f9:77:c9:10:d9:cd:16:eb:61:11:eb:94:
27:ff:6f:b4:99:35:6f:da:d4:1e:3d:b7:ca:c2:7b:
12:35:f9:10:8c:63:a7:9f:fe:b7:6c:60:f0:e5:67:
40:35:6b:4b:a5:2e:aa:67:e7:df:e6:df:5c:16:28:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2E:D0:19:77:2E:13:07:78:68:58:13:D2:A2:A6:5E:A5:64:B4:DE
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ki7QGXcuEwd4aFgT0qKmXqVktN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a6:00:30:68:fa:a5:9a:b0:29:1f:53:1f:f0:bf:f9:99:86:
5a:64:93:d2:00:5f:a4:4a:2e:61:1d:f9:2f:94:2b:d3:1c:bc:
6e:35:4e:5e:0a:2e:ae:18:d4:77:7b:28:18:3f:ab:fa:fd:f3:
02:fb:2b:f8:28:af:53:07:46:17:47:46:cb:ed:e2:50:72:27:
28:38:64:9d:ac:ad:a3:3c:17:72:8c:01:ad:92:41:6e:4a:3a:
94:f6:f0:c3:59:12:31:08:e1:e8:38:d0:d3:62:14:0f:ef:78:
55:7e:23:19:f0:4f:8c:a2:1b:2c:3f:2b:dc:38:ca:30:d6:ff:
7b:61:95:2e:8e:24:55:20:d9:ce:18:34:88:24:f6:a7:72:cc:
db:45:93:01:17:1f:d4:da:9f:0f:21:5f:f6:7e:ba:36:a0:00:
54:07:d1:72:36:c9:75:b7:45:42:94:ee:99:13:63:5d:af:1b:
4e:58:2f:d1:9d:24:58:06:13:e9:4e:9f:11:cb:fc:10:a1:36:
c3:9f:91:64:eb:72:c4:22:7a:01:a3:e9:1b:c5:a6:63:a4:0e:
d7:3c:22:e9:52:5e:69:2e:9e:97:07:6f:59:56:e0:35:76:20:
02:fc:a7:1c:e0:48:68:b1:c7:ec:d7:42:34:42:c4:ca:34:88:
38:fd:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:51 2026 by rpki-client