Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rulA00IGY1Bb16ItRws_GYnaW5c.roa
File: rulA00IGY1Bb16ItRws_GYnaW5c.roa (raw, json)
Hash identifier: mJSayRMaHV8KszGluns/+FaOvrRu2IB1MyCvWtfm6mg=
Subject key identifier: AE:E9:40:D3:42:06:63:50:5B:D7:A2:2D:47:0B:3F:19:89:DA:5B:97
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019EEEED11E0A7722A60AD620137A6AB914E
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rulA00IGY1Bb16ItRws_GYnaW5c.roa
Signing time: Mon 22 Jun 2026 10:42:54 +0000
ROA not before: Mon 22 Jun 2026 10:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 158.173.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:ed:11:e0:a7:72:2a:60:ad:62:01:37:a6:ab:91:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 22 10:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aee940d3420663505bd7a22d470b3f1989da5b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:15:d8:5d:ca:8c:79:49:02:9b:5c:ec:8f:
9a:46:07:05:55:51:0c:29:76:ab:9f:50:4b:d3:7f:
ca:9d:9e:ca:bf:e4:8b:27:a2:b8:d5:ae:7b:22:9b:
6f:27:e0:91:f1:4f:77:3c:56:73:bb:cc:76:82:16:
ab:91:d0:40:30:09:52:ba:1d:04:21:5c:5a:12:54:
1e:f8:bf:73:66:14:2d:ea:f7:6a:e4:09:3b:97:cc:
b4:4b:9a:07:39:ec:11:57:98:82:69:31:21:57:23:
3e:f6:d7:69:43:fe:19:3a:d1:7d:27:c7:0a:bc:f0:
36:88:a5:3a:02:ab:5a:4e:b5:b5:30:78:53:60:0d:
08:eb:fd:9f:10:97:14:89:da:42:7e:d3:2a:1e:b9:
4a:93:5d:cd:61:14:93:14:5e:57:89:60:56:e9:1c:
f5:65:58:ed:f1:bb:0f:c6:c4:80:36:dd:d0:15:ef:
3f:6c:30:e0:ab:0f:51:bd:b5:19:d0:91:27:f4:96:
cf:72:51:43:01:82:eb:23:a4:80:00:2b:03:f7:38:
d1:ce:39:0e:13:8f:7d:e7:dc:91:fc:37:3c:68:fc:
31:6f:68:8e:ff:6d:74:0d:da:93:13:eb:3d:f0:0f:
3c:d9:f7:30:a3:6e:ac:0b:43:67:42:39:f4:eb:5a:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:40:D3:42:06:63:50:5B:D7:A2:2D:47:0B:3F:19:89:DA:5B:97
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rulA00IGY1Bb16ItRws_GYnaW5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:07:8e:b7:c2:1f:f5:2c:ef:9d:46:0c:bc:be:91:57:f7:05:
4d:df:fa:d0:9a:82:d2:87:64:ac:bc:35:d9:67:b5:9e:77:ad:
16:b2:b0:a4:27:c5:c8:2c:96:f9:64:ae:b9:ad:2b:9a:72:4c:
ea:94:97:3f:75:9d:84:b8:30:4e:2a:43:ed:c6:a1:aa:37:f5:
e3:44:23:69:61:a0:91:b6:b8:bb:1c:10:a3:19:27:04:73:37:
92:6b:fa:49:ab:94:de:80:82:f5:8f:ee:f4:67:c0:92:5a:d0:
8c:fc:2a:f6:f0:bb:53:2c:67:e4:02:29:ad:e7:42:7e:30:d7:
01:6d:fd:07:94:9c:b4:46:b9:27:1d:17:32:56:78:22:07:e4:
0c:5d:7d:33:5c:36:05:78:69:61:a9:31:9d:65:a0:25:fc:9c:
a8:f0:b2:aa:61:d1:91:ff:1a:40:d7:ea:18:dc:da:d4:35:00:
6d:0f:96:6c:3e:26:87:4f:07:10:54:2a:f5:65:af:91:73:4c:
5a:7a:f2:4e:cb:38:b9:18:64:7e:d5:77:62:e4:a9:67:4b:d6:
19:dc:db:a8:80:a9:6a:b1:dc:e1:de:a5:01:2b:0f:ad:09:f5:
d3:89:1e:02:1c:61:07:c6:e3:a6:3b:32:bd:f8:e8:8c:79:e9:
78:f5:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:33 2026 by rpki-client