Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VoYQyonyxGzaIM5KVpqOapq921I.roa
File: VoYQyonyxGzaIM5KVpqOapq921I.roa (raw, json)
Hash identifier: 8Bw6pUBDmmefG/7pBOLdCTVRtsPm6N/E5aIaA/0oJpk=
Subject key identifier: 56:86:10:CA:89:F2:C4:6C:DA:20:CE:4A:56:9A:8E:6A:9A:BD:DB:52
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D0089479CE99210BB1F158CB6D2912F7E
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VoYQyonyxGzaIM5KVpqOapq921I.roa
Signing time: Wed 18 Mar 2026 10:41:29 +0000
ROA not before: Wed 18 Mar 2026 10:41:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42708
IP address blocks: 158.173.166.0/24 maxlen: 24
170.62.246.0/24 maxlen: 24
170.62.247.0/24 maxlen: 24
198.55.30.0/24 maxlen: 24
212.78.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:89:47:9c:e9:92:10:bb:1f:15:8c:b6:d2:91:2f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 18 10:41:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=568610ca89f2c46cda20ce4a569a8e6a9abddb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:2e:32:79:2a:ba:83:9f:66:c6:4f:64:5b:
99:78:07:6b:bc:fc:74:7d:8f:a8:f6:89:d2:7c:5b:
3f:a8:dc:3f:af:0c:97:77:7d:64:71:f4:41:cf:e9:
e1:1d:92:a6:93:56:f4:ed:30:85:b9:94:c0:3e:a1:
93:ed:07:26:d7:bd:2c:1f:ba:81:1d:c3:ab:1a:fe:
39:6f:4b:f5:96:3e:c3:58:3c:11:76:fe:8f:d0:3d:
05:46:6d:ce:c3:d1:a7:2b:8b:3a:10:bf:f5:5b:c7:
8d:1a:46:c6:7d:41:ba:8f:a8:2d:a0:45:d5:36:ca:
49:01:9b:38:21:3e:63:e1:a5:47:cc:e7:f5:05:6a:
d0:f6:d8:97:e7:8f:34:5f:a0:91:a8:fe:7b:a4:e5:
7c:63:9f:16:0c:f1:c7:e5:53:51:e5:5c:44:9d:8e:
6c:a9:b4:65:b1:7f:68:aa:64:40:88:0e:fc:ec:70:
1c:47:27:a0:83:45:5b:b6:e5:bc:7b:e4:66:13:a2:
14:86:5f:08:2e:ae:6d:9b:d4:da:24:bd:26:37:8c:
15:e9:12:af:ea:54:ff:e1:96:48:80:62:d7:12:96:
28:f9:7d:60:41:87:05:10:2d:60:03:74:40:e5:f7:
76:f0:4a:b9:80:36:e4:6a:3f:2a:9b:13:98:2b:71:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:86:10:CA:89:F2:C4:6C:DA:20:CE:4A:56:9A:8E:6A:9A:BD:DB:52
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VoYQyonyxGzaIM5KVpqOapq921I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.166.0/24
170.62.246.0/23
198.55.30.0/24
212.78.244.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:f7:45:e3:5b:c5:a4:f1:f6:82:14:94:5c:78:2c:1f:e5:5d:
87:78:c6:d6:6e:94:34:ff:2a:a7:eb:f5:f1:9c:50:39:e2:d2:
0c:93:84:44:c1:0c:22:d0:b9:b4:b3:76:46:b7:96:9d:65:9f:
17:3f:a8:20:8f:67:e1:56:63:58:0f:50:f0:0d:54:64:e1:d0:
1d:55:11:69:f1:c1:80:2b:03:13:52:c2:9c:26:55:04:5a:6e:
db:61:61:3d:4a:8a:21:92:12:0f:cb:84:2c:b2:62:7f:52:cc:
0b:51:9c:93:e7:90:8e:62:f1:9d:2b:e5:b5:41:3d:49:11:14:
3a:a7:96:db:cd:39:97:d5:62:89:c4:05:f5:6f:1c:9e:f6:0e:
13:69:55:ec:97:c2:c4:1d:c1:19:d1:ac:8c:42:67:f0:d0:d8:
f0:97:f4:29:54:cf:49:2b:1b:dd:80:0d:bb:04:9e:cf:88:24:
07:4f:41:a4:68:b9:c4:02:20:c6:d0:a3:50:81:29:cb:a7:df:
c5:8a:c0:9b:96:5e:dc:ba:6f:2d:f5:b4:ba:66:c8:b2:4d:91:
d2:0d:e4:bd:fb:20:aa:09:38:9a:0b:d4:72:bf:67:a9:3c:97:
01:27:8f:e3:57:01:66:b9:f3:11:63:7d:df:98:e6:4c:f7:d1:
de:57:3f:55
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ0AiUec6ZIQux8VjLbSkS9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwMzE4MTA0MTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Njg2MTBjYTg5ZjJjNDZjZGEyMGNlNGE1NjlhOGU2YTlhYmRkYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljsuMnkquoOfZsZPZFuZeAdrvPx0
fY+o9onSfFs/qNw/rwyXd31kcfRBz+nhHZKmk1b07TCFuZTAPqGT7Qcm170sH7qB
HcOrGv45b0v1lj7DWDwRdv6P0D0FRm3Ow9GnK4s6EL/1W8eNGkbGfUG6j6gtoEXV
NspJAZs4IT5j4aVHzOf1BWrQ9tiX5480X6CRqP57pOV8Y58WDPHH5VNR5VxEnY5s
qbRlsX9oqmRAiA787HAcRyegg0VbtuW8e+RmE6IUhl8ILq5tm9TaJL0mN4wV6RKv
6lT/4ZZIgGLXEpYo+X1gQYcFEC1gA3RA5fd28Eq5gDbkaj8qmxOYK3EaBwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFaGEMqJ8sRs2iDOSlaajmqavdtSMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvVm9ZUXlvbnl4R3phSU01S1ZwcU9hcHE5MjFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAnq2mAwQB
qj72AwQAxjceAwQA1E70MA0GCSqGSIb3DQEBCwUAA4IBAQDI90XjW8Wk8faCFJRc
eCwf5V2HeMbWbpQ0/yqn6/XxnFA54tIMk4REwQwi0Lm0s3ZGt5adZZ8XP6ggj2fh
VmNYD1DwDVRk4dAdVRFp8cGAKwMTUsKcJlUEWm7bYWE9SoohkhIPy4QssmJ/UswL
UZyT55COYvGdK+W1QT1JERQ6p5bbzTmX1WKJxAX1bxye9g4TaVXsl8LEHcEZ0ayM
Qmfw0Njwl/QpVM9JKxvdgA27BJ7PiCQHT0GkaLnEAiDG0KNQgSnLp9/FisCbll7c
um8t9bS6ZsiyTZHSDeS9+yCqCTiaC9Ryv2epPJcBJ4/jVwFmufMRY33fmOZM99He
Vz9V
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:51 2026 by rpki-client