Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/YtiqiuhBWS-Sr29BjpgIjpt-wa8.roa
File: YtiqiuhBWS-Sr29BjpgIjpt-wa8.roa (raw, json)
Hash identifier: Jr9DztUQ7y+5PoNm9cPaApQzPlpmVoA9xk8lGMk02nA=
Subject key identifier: 62:D8:AA:8A:E8:41:59:2F:92:AF:6F:41:8E:98:08:8E:9B:7E:C1:AF
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F906BD8C6B773425540291183126AEF70
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/YtiqiuhBWS-Sr29BjpgIjpt-wa8.roa
Signing time: Thu 23 Jul 2026 19:20:14 +0000
ROA not before: Thu 23 Jul 2026 19:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 158.173.130.0/23 maxlen: 24
185.161.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:6b:d8:c6:b7:73:42:55:40:29:11:83:12:6a:ef:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 23 19:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62d8aa8ae841592f92af6f418e98088e9b7ec1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:e1:c9:8e:44:5b:9d:86:e7:c8:eb:0c:a4:
ae:a2:3c:0c:1b:fe:9d:11:83:ff:17:fb:84:48:d8:
9c:e7:02:9e:a8:06:95:cd:10:12:1f:e2:1e:e9:96:
43:a2:16:69:7c:47:15:06:f7:38:3e:0b:af:4d:e8:
12:fd:0f:82:b3:e8:c2:0f:67:30:d3:e6:bc:5e:53:
e6:73:cc:2c:19:97:2e:80:31:c4:6c:ba:c2:a9:ba:
75:f2:80:d2:d8:b3:cf:3d:fd:6d:2b:76:a3:2f:a7:
6c:f9:dd:64:7e:85:92:3a:75:d0:2c:8d:b0:13:35:
c0:0b:9e:8e:09:c6:99:56:f4:de:17:9b:04:3b:0f:
a0:35:4a:98:b0:1a:b6:32:5a:82:36:9c:59:7e:ec:
b3:5d:a7:d8:07:06:f5:37:a0:06:44:1a:18:c5:58:
cd:04:35:de:52:6c:93:b0:3f:a8:3f:b2:ed:bf:11:
ad:07:3f:b6:e4:a4:62:1a:07:c3:2b:39:c8:89:26:
ac:8a:45:ea:ef:94:90:d8:61:5a:bd:9f:92:d6:4f:
fe:08:df:d7:44:d0:f0:a2:21:88:8b:d7:6e:bf:52:
dd:73:c7:6c:99:c4:e1:87:d6:97:86:18:36:c3:04:
24:8d:f6:80:4f:eb:83:ec:81:92:2f:32:a3:4b:fa:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D8:AA:8A:E8:41:59:2F:92:AF:6F:41:8E:98:08:8E:9B:7E:C1:AF
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/YtiqiuhBWS-Sr29BjpgIjpt-wa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.130.0/23
185.161.110.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5d:bf:54:54:46:99:43:e6:bc:11:bd:28:49:10:f1:04:24:
d9:0f:e2:97:0e:7d:0d:8c:2f:d8:8c:98:da:a0:4e:16:c4:54:
8a:7d:bb:96:47:80:a9:c6:3a:28:92:fc:cc:24:52:f8:8e:ad:
74:20:97:2f:31:08:f9:6a:0e:98:2b:d5:38:1e:1e:3c:36:4a:
fb:12:45:bc:4f:f3:73:33:d7:5e:e5:c2:57:8c:d1:c7:81:c6:
01:5d:0c:cd:f0:1b:4c:09:f3:79:3c:02:b6:01:c4:10:0a:fd:
91:48:3f:e7:07:b7:a3:fa:58:ed:56:c3:8c:4c:d1:8d:fa:ae:
e4:32:b1:0f:c5:dd:fb:11:d4:a5:c0:c0:ce:1f:a4:b8:56:ea:
02:21:a2:f0:c8:e4:64:1e:19:cf:b6:bb:2a:bb:9d:1f:56:9d:
ec:a7:2b:da:63:3e:48:aa:a8:4d:b1:de:9f:bb:df:84:d3:ce:
ba:68:21:44:1b:94:14:b6:7f:c0:2c:be:6e:a9:40:b4:b0:ec:
30:98:53:94:6a:4e:57:c8:bd:64:a1:55:12:8b:89:f5:14:eb:
51:dc:bc:ec:b8:c1:99:91:64:88:35:ea:ea:a5:54:a7:17:f6:
56:73:89:15:12:ff:60:46:89:58:f7:fc:bb:5b:56:eb:d0:4b:
68:59:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:23 2026 by rpki-client