Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/44r2hiICwt4mmYBuaZgpl98eJ-o.roa
File: 44r2hiICwt4mmYBuaZgpl98eJ-o.roa (raw, json)
Hash identifier: IPljTxPxLysh1yta0pnJTc1St7zsy0DcC7PN+zxHldw=
Subject key identifier: E3:8A:F6:86:22:02:C2:DE:26:99:80:6E:69:98:29:97:DF:1E:27:EA
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019EDA756B6B8C6D4BA7CE3A482EA1DD9E75
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/44r2hiICwt4mmYBuaZgpl98eJ-o.roa
Signing time: Thu 18 Jun 2026 11:19:48 +0000
ROA not before: Thu 18 Jun 2026 11:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 147.90.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:75:6b:6b:8c:6d:4b:a7:ce:3a:48:2e:a1:dd:9e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 18 11:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e38af6862202c2de2699806e69982997df1e27ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:33:40:12:28:ec:26:e6:a6:e2:80:91:25:
23:10:ac:16:cc:65:ed:f4:b2:f1:b4:02:6c:8b:c8:
a6:1f:6a:54:16:5a:5a:45:90:75:de:36:98:e0:d0:
d4:59:ad:3e:cf:bf:03:95:9e:fd:8a:dc:6b:f4:88:
70:64:d5:97:1c:01:f9:95:7a:83:92:d8:b8:c1:5b:
ba:f2:6b:c4:67:4e:2d:6e:69:45:f5:2f:61:5a:d7:
ba:7d:b2:be:95:fa:b8:37:e6:19:7b:db:0e:f1:26:
fa:e9:17:b2:69:07:07:55:61:d9:66:88:f0:fc:af:
a3:d3:20:06:d0:17:34:7d:8f:e5:5f:51:11:28:22:
27:7b:fd:ff:b5:e2:1b:cb:75:ac:18:52:b0:05:c3:
95:51:b4:cd:14:65:50:b4:89:95:06:09:ab:89:4b:
25:fc:97:73:86:0c:f5:fd:f6:9d:8a:e9:71:dc:3f:
46:8d:1c:dd:ed:83:29:bc:1d:0d:92:f2:50:c7:27:
be:00:17:6b:86:78:b3:8d:54:21:e2:64:06:dd:77:
8d:24:79:d9:06:e7:8c:cb:ce:da:95:ad:6a:d5:8a:
70:33:bb:11:1d:60:c8:7a:0f:c7:e0:83:44:8e:33:
9e:d8:14:72:1a:5d:8f:b2:4e:2d:2d:2a:06:13:9c:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:F6:86:22:02:C2:DE:26:99:80:6E:69:98:29:97:DF:1E:27:EA
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/44r2hiICwt4mmYBuaZgpl98eJ-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.59.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d8:47:bc:99:99:5e:ef:d8:f1:d6:4b:92:1b:8c:b5:96:98:
39:29:8d:5e:70:93:ab:ca:0d:56:04:cc:be:85:e7:26:48:00:
e1:2b:3f:7f:40:00:8c:59:85:d2:a5:f2:bb:05:35:33:10:78:
9b:5f:b4:ef:3b:36:25:9b:1f:63:17:6a:9b:c8:db:c4:95:18:
85:46:f8:79:6d:ff:c8:03:6a:0f:63:0a:03:31:ca:ee:e9:42:
48:68:c9:69:08:3e:27:09:5a:5d:7b:b1:68:ce:48:1a:fa:9e:
3e:6b:80:6b:1c:3d:ef:8b:44:41:b7:4d:1d:1b:6a:32:59:b3:
4d:3a:3b:a3:0d:c2:6f:f2:39:28:1a:d1:7b:b9:a1:48:11:4a:
b2:42:80:37:e8:fb:f1:71:8a:b2:4a:79:83:6d:33:6e:9c:e7:
b7:c8:ee:de:72:f3:92:2d:b5:12:72:d0:c4:9e:c8:9c:36:73:
21:83:95:24:f6:01:d1:94:2f:67:d9:4e:53:23:20:e3:9d:33:
a0:23:81:1f:0d:bb:aa:89:3a:82:6f:9f:4b:35:c9:c1:51:f2:
f7:ee:54:a2:22:5a:d2:8b:ce:3a:37:57:d7:10:ef:84:51:6d:
f8:09:47:bb:b4:99:5d:a9:c6:b2:ac:19:ad:43:3f:8d:b6:8c:
c1:52:90:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:54 2026 by rpki-client