Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/2w42tFhujcPcJ0s1Rcxj6i7CinA.roa
File: 2w42tFhujcPcJ0s1Rcxj6i7CinA.roa (raw, json)
Hash identifier: 8zl1m9LNRJAtBYfJwiB5/BdRn1Tr+34kYZ3RPNZzGpQ=
Subject key identifier: DB:0E:36:B4:58:6E:8D:C3:DC:27:4B:35:45:CC:63:EA:2E:C2:8A:70
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A05142E1F07C56133FBFD6C228A5990407
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/2w42tFhujcPcJ0s1Rcxj6i7CinA.roa
Signing time: Sun 30 Aug 2026 06:02:12 +0000
ROA not before: Sun 30 Aug 2026 06:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218869
IP address blocks: 147.90.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 06:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:42:e1:f0:7c:56:13:3f:bf:d6:c2:28:a5:99:04:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 30 06:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db0e36b4586e8dc3dc274b3545cc63ea2ec28a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8e:c4:f6:33:41:b2:8b:9c:e7:c5:45:f6:36:
3c:21:05:86:b1:4e:33:3d:cd:d3:bd:00:ff:19:58:
9c:91:e7:8b:5d:dc:f1:34:1e:28:06:c5:f6:67:9c:
73:48:8e:f8:3a:65:25:ec:68:f3:07:61:ed:f6:ff:
58:5b:94:ca:5f:63:0b:52:4d:24:35:d2:a3:aa:56:
ac:aa:10:a0:f6:31:20:a3:01:cd:6b:17:d5:92:ef:
95:6c:30:89:f1:3a:94:af:9e:c5:61:ef:90:29:71:
13:e7:3e:e3:b8:ce:c0:46:4b:0b:5e:c7:0a:1f:1f:
ac:90:6a:33:cb:21:d4:c8:f9:f2:02:26:7b:d7:32:
81:08:15:d6:11:db:48:75:17:35:62:28:d0:89:83:
ab:2d:84:2a:55:8a:bf:01:f4:e3:8e:8d:c4:e8:a3:
00:84:63:f6:b1:1f:d8:44:fe:b1:03:90:b9:4f:b4:
94:fb:f3:59:e8:1b:da:05:4c:db:78:af:cc:b1:09:
ad:2d:8b:bd:b8:79:78:3b:d4:f7:f4:21:e0:5c:84:
bd:2a:ba:be:c0:eb:a1:58:3c:6a:30:f9:00:14:08:
79:71:7c:80:26:eb:6a:5d:4f:aa:8c:27:7f:6d:7f:
2f:25:e3:a5:f2:1b:a5:f8:63:42:7d:46:d4:86:d0:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:36:B4:58:6E:8D:C3:DC:27:4B:35:45:CC:63:EA:2E:C2:8A:70
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/2w42tFhujcPcJ0s1Rcxj6i7CinA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.23.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ce:2f:0b:38:8c:e9:e6:52:a9:81:eb:45:5f:99:30:a5:46:
bf:de:3e:ed:80:12:37:68:f5:ec:50:7c:b6:9b:e0:e8:1e:7d:
b3:2f:c7:55:30:3a:38:91:7c:9b:c6:55:91:89:75:b3:c0:2f:
c6:69:2e:02:45:72:98:eb:84:ad:a3:c2:cf:61:97:0c:af:e2:
a4:e2:a0:f1:47:a9:7b:60:f5:54:c6:ba:c4:71:1c:31:a4:5e:
9b:67:b6:88:98:db:29:12:01:1d:85:34:5f:52:69:61:3c:bd:
cc:39:34:c3:15:25:d7:0d:3b:1e:20:b7:88:d7:ab:70:48:37:
15:e9:bd:c3:fe:6e:39:ee:e4:f6:84:e8:48:0d:56:fd:b8:1c:
c3:08:88:4a:b1:3a:0d:fc:42:9a:af:75:c8:bd:60:2a:bc:3d:
c7:40:de:1e:4d:dc:b9:59:9a:68:02:17:f9:a4:96:23:b5:31:
45:51:45:94:7a:d0:ec:44:2a:1f:65:e0:d3:ec:4f:eb:71:23:
14:f1:e9:2f:a2:f2:b4:d7:6b:24:7b:e8:c1:29:f1:8e:ed:fd:
ff:de:dc:53:63:22:ea:57:db:ef:48:92:f6:42:0b:3c:e3:92:
48:06:13:96:1a:9a:f5:cc:d8:29:cd:68:84:20:a9:ff:a3:77:
f2:39:f4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:55:51 2026 by rpki-client