Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ECN9ICcOJ4RWuk10SOA8yn4ZuMs.roa
File: ECN9ICcOJ4RWuk10SOA8yn4ZuMs.roa (raw, json)
Hash identifier: 9I7dQPZdbSEoWdhxW0Ue9Fjfo0KWwZ6FvizKGV12Ffc=
Subject key identifier: 10:23:7D:20:27:0E:27:84:56:BA:4D:74:48:E0:3C:CA:7E:19:B8:CB
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019FA2F15CEBD29D280FBDA51A30EB23228F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ECN9ICcOJ4RWuk10SOA8yn4ZuMs.roa
Signing time: Mon 27 Jul 2026 09:39:14 +0000
ROA not before: Mon 27 Jul 2026 09:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198707
IP address blocks: 158.173.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:f1:5c:eb:d2:9d:28:0f:bd:a5:1a:30:eb:23:22:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 27 09:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10237d20270e278456ba4d7448e03cca7e19b8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:68:7d:54:b9:b1:52:f6:47:7f:6a:d4:00:74:
b9:ca:37:8b:aa:2e:90:03:d0:04:1f:9d:10:67:ad:
bc:e3:56:93:14:03:0e:f0:2d:15:cc:8c:29:b2:42:
ec:30:44:48:21:b8:e9:ef:47:b9:28:b9:de:b3:2b:
21:51:34:f7:4b:9f:fc:0d:35:bb:85:b4:fc:57:14:
bd:78:32:51:76:39:dd:ae:b1:e9:d2:4b:5f:9c:b0:
f9:12:f1:59:ae:ba:bc:27:5c:6a:50:3a:00:36:ae:
6b:91:28:be:cc:9f:b1:ec:79:11:b6:b5:e5:9c:65:
6a:c7:83:ea:b5:ef:7c:5d:49:79:1d:32:6b:81:4f:
4b:8e:3f:f1:c4:25:a3:14:8c:e1:b7:d2:a6:a5:ef:
c5:28:f2:88:0e:8b:05:43:54:21:73:fb:7c:d7:0a:
a8:21:0a:0e:da:6c:60:66:fb:4b:7f:28:35:1b:ac:
0d:6f:e1:32:5e:3e:fd:85:65:89:b3:bf:28:be:dc:
7f:fd:36:62:ab:1d:78:d0:78:ca:e7:f7:ce:99:ff:
a7:ed:f5:f3:1e:f4:fd:5b:ca:93:cd:70:a3:be:66:
40:61:76:41:07:44:ca:bf:3c:65:d4:ba:bc:88:f3:
40:cc:82:d4:c4:a0:a7:67:de:7e:98:0a:a8:37:f8:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:23:7D:20:27:0E:27:84:56:BA:4D:74:48:E0:3C:CA:7E:19:B8:CB
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ECN9ICcOJ4RWuk10SOA8yn4ZuMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.227.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ce:74:bc:20:30:c7:5d:e4:9b:3d:4b:19:7c:7c:e5:59:5f:
52:58:49:83:56:e8:78:c9:dd:a1:af:f7:bc:a3:41:14:c6:a9:
6e:2c:84:59:82:00:0a:62:ec:f6:e6:e1:08:17:e9:ea:50:be:
02:70:8a:5e:ed:2d:b6:87:d9:e4:f0:ab:b5:98:18:cb:9e:46:
03:eb:76:20:39:01:1f:79:fc:68:86:26:c6:b5:98:f9:5e:b4:
56:87:bb:dc:6a:c6:e8:26:ef:e9:34:f3:71:bb:df:3a:2c:64:
7b:6e:95:e3:42:b6:4a:c5:d0:9f:09:3f:7d:9e:70:04:c2:dc:
ec:f4:c2:9e:6f:f9:14:8c:2a:13:57:16:a7:9f:35:13:6b:bc:
95:55:f3:60:d6:48:b0:29:62:3c:03:cc:ea:e4:97:4c:0f:fe:
fe:1f:7c:7a:48:a8:8c:96:87:7b:93:19:fc:2f:3f:c0:60:f5:
dd:10:27:a5:f0:cb:18:8e:0a:e6:96:4b:7b:d3:04:37:14:3a:
e5:40:bc:00:9d:51:5c:ba:90:53:5f:37:b7:90:3d:26:d1:cf:
e4:44:0a:2c:ea:aa:aa:8a:1c:53:10:9d:8a:b9:73:e6:df:ec:
8d:11:2b:c4:ee:87:dc:d4:0d:41:f9:55:39:81:29:b4:6c:59:
36:4f:c4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:56 2026 by rpki-client