Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Wi2DuAkIK-WckadaLAfgRdId1zQ.roa
File: Wi2DuAkIK-WckadaLAfgRdId1zQ.roa (raw, json)
Hash identifier: uZAGt9N2QlnEDZjUWoI3MNS3BjsCLGb4azC6q7InyVs=
Subject key identifier: 5A:2D:83:B8:09:08:2B:E5:9C:91:A7:5A:2C:07:E0:45:D2:1D:D7:34
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0DC2A9A11144A2D31527B346958829731
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Wi2DuAkIK-WckadaLAfgRdId1zQ.roa
Signing time: Sat 26 Sep 2026 05:22:54 +0000
ROA not before: Sat 26 Sep 2026 05:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 158.173.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:2a:9a:11:14:4a:2d:31:52:7b:34:69:58:82:97:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 26 05:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a2d83b809082be59c91a75a2c07e045d21dd734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:89:7c:6f:a2:01:b1:72:54:47:48:42:22:
d5:36:4d:26:06:07:56:cb:03:2f:29:cf:55:7c:e0:
1b:51:61:dd:c0:97:ab:d2:61:9b:73:a5:77:b3:48:
92:1a:b3:78:15:79:6c:ce:e1:b2:cf:28:97:f3:45:
b9:94:a0:7d:47:a8:74:98:7c:c4:0b:e8:2a:0f:c7:
88:15:de:63:cb:72:5d:0f:59:32:db:80:87:df:f2:
cf:81:42:9e:0e:74:d8:62:bf:48:12:d7:d2:9d:6c:
67:8a:79:f9:a7:98:c1:8f:40:6d:5e:6f:9a:2d:65:
b1:82:05:58:8f:03:a6:67:dc:1c:0f:7f:c3:d3:3d:
84:00:4c:1f:e6:ad:48:fe:af:8c:74:01:61:f9:32:
cd:80:b9:fd:ba:15:08:d6:36:90:46:31:2f:55:e0:
58:46:59:db:bd:eb:10:69:93:cd:32:5a:e8:ba:b4:
59:d6:8c:c7:03:a3:a1:c5:77:ff:4d:39:34:b2:96:
d6:2c:ce:df:47:44:28:ae:74:5d:3e:2e:d8:25:7f:
1f:d3:91:98:d9:79:c9:62:d1:64:42:37:be:f9:3c:
34:cb:54:64:63:1c:78:57:eb:4e:bb:da:bb:d3:87:
4c:7c:ab:81:4f:cc:db:c6:80:c6:04:4d:85:39:f3:
5f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2D:83:B8:09:08:2B:E5:9C:91:A7:5A:2C:07:E0:45:D2:1D:D7:34
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Wi2DuAkIK-WckadaLAfgRdId1zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.130.0/23
Signature Algorithm: sha256WithRSAEncryption
65:20:2e:a6:40:a4:d9:28:fd:99:dd:a4:b8:c3:97:37:aa:24:
79:1f:ad:e3:c3:d4:2a:2e:ac:a6:85:26:b2:7f:9b:ac:bf:fc:
59:2e:c3:40:f2:87:7f:20:c0:d9:76:25:a8:ab:fd:50:11:cc:
38:15:9a:89:a1:75:fd:65:c4:c4:83:7c:88:c5:1b:d5:9d:54:
a9:56:28:5d:23:85:b5:61:f7:b3:5c:d1:f4:40:b8:96:04:14:
77:47:6e:16:d6:43:9c:63:0b:47:da:c7:ba:ab:95:68:61:cb:
c4:8c:b2:31:3b:7e:99:d3:ef:ac:7a:3f:94:9f:f9:c4:51:14:
1b:28:ac:06:cd:96:a0:70:7a:f5:93:e4:6e:44:25:a4:49:a3:
17:76:22:8d:da:40:f6:07:6f:08:85:20:69:10:7b:40:93:3a:
d5:85:72:6e:6a:7c:98:cb:64:65:cd:60:e1:85:e7:a4:9c:ec:
13:88:c7:53:ef:88:c6:a8:6a:c7:5a:92:81:8b:35:28:d6:c3:
e9:8a:a1:31:55:39:5b:a2:73:fd:0d:fb:3d:94:e5:62:44:63:
11:71:4a:0c:c6:76:d6:98:21:66:cd:d2:b8:32:76:00:6b:34:
50:f5:be:55:dc:a1:37:04:5d:95:a3:5f:a7:92:68:4e:53:75:
48:6d:a7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:00:20 2026 by rpki-client