Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4-h_7ItgXSji14Ab8C4rmicPxCQ.roa
File: 4-h_7ItgXSji14Ab8C4rmicPxCQ.roa (raw, json)
Hash identifier: vcczXTCtb8XtzsdHiFIsqyLFANbf+zAPKSw4GUbkAsg=
Subject key identifier: E3:E8:7F:EC:8B:60:5D:28:E2:D7:80:1B:F0:2E:2B:9A:27:0F:C4:24
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019CCC737F1C6AD856CAB408415FA041E044
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4-h_7ItgXSji14Ab8C4rmicPxCQ.roa
Signing time: Sun 08 Mar 2026 07:57:27 +0000
ROA not before: Sun 08 Mar 2026 07:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 147.90.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 06:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cc:73:7f:1c:6a:d8:56:ca:b4:08:41:5f:a0:41:e0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 8 07:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3e87fec8b605d28e2d7801bf02e2b9a270fc424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:86:8d:f8:ef:30:e3:7d:34:19:82:7e:ca:
02:b0:d8:ed:11:89:46:ac:fb:ce:59:cb:49:52:8e:
53:a9:60:4f:ad:16:30:a4:43:5a:b6:76:0f:d1:46:
20:98:bf:38:7e:5b:d1:da:59:44:af:b0:0f:d2:1f:
15:31:54:35:2d:dd:5b:ce:34:d3:17:cd:0d:09:8d:
ba:48:55:3e:16:05:6c:8a:30:78:d4:a1:6c:bf:2a:
10:96:05:c6:7a:f1:67:60:02:42:99:cc:90:cb:80:
d4:98:a4:99:3d:65:91:3f:1b:65:79:d3:6f:98:06:
81:9c:00:42:cc:4f:aa:cd:6b:58:3f:26:f9:b7:eb:
ae:2b:58:fd:53:0b:a5:42:8c:1a:75:6d:3b:8b:8f:
df:8d:69:df:9e:fc:b2:14:45:8d:6e:70:63:1e:99:
30:1a:7c:f2:5f:8a:94:c0:55:45:b6:b5:90:ca:71:
ef:41:95:70:3d:db:5e:77:9b:75:5f:c9:4e:e5:bb:
ff:47:0d:da:3c:45:28:45:e1:9a:b8:c4:29:7a:50:
77:f8:63:70:5e:43:5a:5b:e8:60:ba:f1:4c:f6:32:
99:d5:f9:a9:b1:83:64:87:ab:af:4e:c8:23:e5:44:
d9:12:d0:e1:6f:92:77:fc:19:2a:0c:e9:47:9d:06:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E8:7F:EC:8B:60:5D:28:E2:D7:80:1B:F0:2E:2B:9A:27:0F:C4:24
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4-h_7ItgXSji14Ab8C4rmicPxCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.216.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:42:96:02:00:34:13:59:a6:f1:58:d1:51:55:95:cc:84:b9:
7c:d2:22:87:74:9e:19:b5:1b:09:ed:9b:2a:68:f3:45:45:e9:
9d:c7:41:d7:47:e5:3d:57:13:3a:3a:89:2d:35:4d:3d:50:20:
7b:f8:40:54:68:bb:e1:07:cd:2e:6d:9f:af:70:5e:66:e9:85:
ce:82:25:10:0d:7c:3f:ab:71:dd:05:eb:f2:a9:23:33:bc:38:
d2:a0:d9:71:7e:86:af:7e:06:67:e6:f8:57:0a:19:3a:2b:e8:
4f:70:2a:08:c5:4b:5f:de:b2:ee:d8:e7:3f:bc:a0:f6:1a:f9:
76:4e:f7:97:94:5f:55:30:29:a8:2d:24:f4:ca:b7:03:0c:96:
46:64:8b:f1:79:ed:7b:8d:8b:9d:6b:a5:f5:e8:4d:5c:f4:f8:
17:42:10:2c:a2:a9:a9:49:17:2e:06:40:c6:c5:97:0a:3f:fb:
a4:90:46:d1:ea:e8:71:bf:e2:59:9c:1a:46:be:02:b3:a2:bb:
25:a2:1c:75:37:6e:f3:00:fa:db:a2:72:56:d8:2e:a6:52:b7:
55:1d:90:65:21:99:b7:76:21:0d:73:8b:38:22:79:4d:42:e8:
9a:17:c8:c1:94:26:39:7e:95:06:d2:b5:eb:fd:25:ae:00:39:
83:b7:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 09:17:13 2026 by rpki-client