Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/jbH6aQ7Hvf9Q7cFYpQ6Ej5X8a3g.roa
File: jbH6aQ7Hvf9Q7cFYpQ6Ej5X8a3g.roa (raw, json)
Hash identifier: ZlGBGbxY4QCDWUVb4cXiywho/o7qQaGXAXB4qmXvhdw=
Subject key identifier: 8D:B1:FA:69:0E:C7:BD:FF:50:ED:C1:58:A5:0E:84:8F:95:FC:6B:78
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D9047DA259BD78F26A20931DD45D87B14
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/jbH6aQ7Hvf9Q7cFYpQ6Ej5X8a3g.roa
Signing time: Wed 15 Apr 2026 08:35:21 +0000
ROA not before: Wed 15 Apr 2026 08:35:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 158.173.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:47:da:25:9b:d7:8f:26:a2:09:31:dd:45:d8:7b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 15 08:35:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8db1fa690ec7bdff50edc158a50e848f95fc6b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:90:1b:ab:1b:38:00:f2:36:f9:b3:81:a5:
0d:b1:a0:5c:f0:d4:9d:35:2f:ad:3c:91:ca:b7:b9:
e2:b0:09:c8:6c:d5:57:1f:2d:52:14:06:35:a1:21:
b9:bb:62:d6:6b:4b:bf:f9:26:f0:18:55:94:5d:84:
ab:95:0d:fe:bb:4d:77:09:2c:05:50:03:4c:17:a6:
42:1f:a3:f3:01:88:59:cd:63:47:20:a8:af:84:6e:
9e:93:d4:2b:87:2f:b9:c1:f3:ba:6a:0f:39:ef:00:
0b:fe:ae:82:f5:92:38:d9:91:46:fb:f0:6a:57:b8:
86:cb:f5:65:07:80:53:75:77:9b:59:50:99:a3:5c:
18:a7:6f:3b:05:7d:c4:2c:e2:e9:73:53:91:09:58:
70:33:89:11:53:8e:5e:a5:9f:a0:0f:8c:63:a7:a7:
45:b6:f4:75:8d:21:18:7b:74:98:9e:7c:d7:4a:5c:
46:ce:75:7a:ce:d9:76:e7:bf:4b:b9:1d:11:a1:24:
85:ab:66:4d:86:1d:bc:e8:ee:e8:46:7f:4b:16:32:
c9:84:bd:fe:d4:b6:8a:2e:85:5e:c4:78:73:44:0b:
c9:30:c7:da:eb:40:84:a4:75:b6:a1:85:b7:37:52:
eb:4a:14:3b:ce:ac:8b:31:fb:f5:da:52:54:58:82:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B1:FA:69:0E:C7:BD:FF:50:ED:C1:58:A5:0E:84:8F:95:FC:6B:78
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/jbH6aQ7Hvf9Q7cFYpQ6Ej5X8a3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.202.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:76:78:55:d1:d1:91:4f:98:59:84:fb:8a:15:5d:a1:c6:89:
78:90:c2:35:0a:38:0b:c9:32:a0:49:47:45:4f:5a:27:64:2d:
dd:40:27:87:14:82:25:f4:cc:cf:b2:c5:e7:71:b2:53:fe:cc:
16:65:3b:e0:2b:f9:b2:80:0e:42:cf:ef:94:83:d8:bb:46:37:
ff:68:ad:db:8d:76:77:c2:f3:9d:1e:31:78:8f:6e:10:cf:69:
54:80:5e:7a:4f:9e:e4:6c:ef:ef:58:89:c2:34:d7:ea:f2:0d:
a3:f5:2c:a5:6d:7b:48:de:5b:93:cf:45:44:54:7c:75:74:9e:
92:82:12:ad:52:23:f5:d8:e1:f0:97:e5:80:17:db:c7:eb:96:
8a:b0:b9:f5:81:e3:c0:7b:a8:96:93:02:7a:5b:97:0f:fb:6b:
20:6b:19:c5:d3:d3:d7:6c:8f:9e:45:cd:96:5b:f0:b4:ed:eb:
df:b9:66:00:44:de:70:92:d0:9b:6e:f0:d7:48:bb:6d:06:8d:
5c:c0:65:06:0f:88:9b:ca:78:27:d7:b1:e3:e3:b5:0a:0f:2c:
7e:bc:10:2c:0c:64:ee:5a:28:56:00:e2:56:be:52:11:37:43:
cb:11:4a:a2:6a:b0:5d:d4:fd:05:2c:7e:fc:15:c4:8a:0c:67:
c4:0e:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:45 2026 by rpki-client