Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-RzJU_jwtqLeeyZlH1tdRo4Zc58.roa
File: 1-RzJU_jwtqLeeyZlH1tdRo4Zc58.roa (raw, json)
Hash identifier: Pyr857oMopB5bTLIbVZr81NBew0Z+jbNj/anQHj2lfA=
Subject key identifier: F9:1C:C9:53:F8:F0:B6:A2:DE:7B:26:65:1F:5B:5D:46:8E:19:73:9F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A028103D91B8AD8273D2997C59B1745A9F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-RzJU_jwtqLeeyZlH1tdRo4Zc58.roa
Signing time: Sat 22 Aug 2026 06:02:27 +0000
ROA not before: Sat 22 Aug 2026 06:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 147.90.30.0/24 maxlen: 24
147.90.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:10:3d:91:b8:ad:82:73:d2:99:7c:59:b1:74:5a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 22 06:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f91cc953f8f0b6a2de7b26651f5b5d468e19739f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:2a:c6:87:8e:47:5b:4c:16:df:da:fe:be:
57:10:fd:79:e8:01:06:92:d9:54:91:1e:3b:5d:47:
90:58:f8:08:08:2c:f1:52:b2:5d:08:b6:9c:7f:7e:
1a:d1:75:4d:05:d9:b6:51:a9:90:80:3d:0c:91:f0:
ec:02:87:64:dd:7d:3f:0b:0a:54:46:f1:83:26:ad:
bc:0b:70:3f:63:fd:85:c8:2c:d5:f5:eb:a2:4e:72:
41:4c:c3:ed:e9:fd:93:7b:07:14:56:22:29:50:19:
99:fc:8b:12:d4:d1:95:55:e6:fa:f7:af:95:77:a6:
10:ba:b2:ee:d1:cc:06:34:2e:71:88:91:40:e6:f2:
0d:a3:9a:b6:0a:94:f7:23:68:14:d0:62:fa:0c:54:
65:2e:13:1d:3b:c7:4d:95:7f:51:2c:bb:7c:da:34:
2d:a6:3b:31:63:36:3b:1e:98:60:0a:5e:98:a6:98:
5e:49:c8:30:05:d2:43:bd:3e:9e:09:0e:c0:1c:16:
5f:7c:fc:ab:f6:dc:7c:fd:27:78:f6:f8:98:c7:9c:
8b:85:7d:ed:e9:87:2c:f2:e7:1b:a7:1c:b8:4f:92:
0f:a3:6a:86:27:26:97:72:12:28:b6:4a:5f:61:03:
ed:7f:58:fd:81:8e:e1:80:0f:30:4a:a6:75:87:fe:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1C:C9:53:F8:F0:B6:A2:DE:7B:26:65:1F:5B:5D:46:8E:19:73:9F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-RzJU_jwtqLeeyZlH1tdRo4Zc58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.30.0/23
Signature Algorithm: sha256WithRSAEncryption
40:84:e8:34:25:1c:b8:71:27:ad:5f:d4:9a:08:0e:d2:a0:4e:
2a:eb:5b:af:a2:f1:dc:0f:82:99:7e:2b:2c:e1:03:1a:77:fe:
02:0a:57:8b:97:a9:d6:2f:ec:f4:bc:13:e1:36:36:f1:d0:37:
ff:65:7b:29:82:59:a3:ec:4a:7e:24:09:61:1b:40:f8:91:40:
45:43:6a:84:ba:51:67:1c:cd:83:f3:90:d0:35:85:53:c3:73:
27:7f:b5:af:35:ee:15:42:fc:a1:f7:67:8d:1c:e1:19:f7:9e:
2a:8e:5b:40:df:35:7e:af:40:81:b6:1c:89:4f:9f:22:0d:d0:
6c:bd:74:5d:c1:af:1c:d3:b3:32:d3:9a:83:5f:4c:b7:a1:f9:
71:6c:9b:14:72:d6:18:b5:6e:11:c2:01:4c:b0:85:0a:59:d4:
1d:d4:bf:81:45:45:aa:f3:4d:a1:f4:27:ea:69:dd:57:43:19:
44:b8:e8:18:77:35:cb:07:3f:6b:62:5a:ed:34:b8:96:bf:0c:
76:d7:64:4c:47:16:23:cb:90:46:6e:f9:01:96:3e:52:48:62:
2c:d3:95:6b:b7:b7:9d:6b:1c:57:dd:6c:33:cb:3d:02:c9:fc:
5e:35:f7:b6:48:d2:e9:4a:98:48:f0:90:d4:0b:29:e2:6c:ca:
3a:a5:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:13:48 2026 by rpki-client