Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7-WCGgyAVqC12q94i3iVP3eKv2c.roa
File: 7-WCGgyAVqC12q94i3iVP3eKv2c.roa (raw, json)
Hash identifier: 8VPP80cAAaQkXdtcNQYsZBW+zburJBSgFpjWvGRfoHE=
Subject key identifier: EF:E5:82:1A:0C:80:56:A0:B5:DA:AF:78:8B:78:95:3F:77:8A:BF:67
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DB8EA29EEB8DB0C72CF18E7F4D7A5BA13
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7-WCGgyAVqC12q94i3iVP3eKv2c.roa
Signing time: Thu 23 Apr 2026 05:57:27 +0000
ROA not before: Thu 23 Apr 2026 05:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 147.90.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 12:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b8:ea:29:ee:b8:db:0c:72:cf:18:e7:f4:d7:a5:ba:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 23 05:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efe5821a0c8056a0b5daaf788b78953f778abf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:84:42:c8:de:7c:b4:f1:07:46:87:be:25:
63:b5:4a:a2:4f:d7:b3:f5:14:12:55:e4:28:b0:9a:
a0:b8:c3:ce:76:51:b2:c9:a9:47:f7:7b:ec:ed:36:
d8:03:58:76:07:6c:f4:a5:fe:b6:22:e6:a2:6d:51:
cb:21:11:93:0e:80:70:56:fa:e9:23:5b:52:2b:3c:
89:a6:9c:79:8e:8e:f1:45:d5:28:a9:3b:7f:f5:97:
b9:d6:b9:62:0b:14:c2:a0:6b:2f:74:82:36:ff:42:
4b:a9:86:54:c8:ed:bf:90:b9:af:a1:e5:1b:bb:af:
e9:b4:6c:73:74:5e:01:74:f4:28:f7:0c:c9:1a:4f:
f1:e0:c4:d9:ec:82:f1:56:56:8e:73:b8:44:63:ea:
b2:8d:1f:5e:47:90:ce:c7:dd:e1:6e:f2:32:b0:50:
ff:52:e8:02:5a:04:26:8b:c1:e7:5c:a4:89:70:8c:
e1:1b:3b:dd:d4:b2:d2:f2:c5:1c:03:77:d7:23:c8:
61:80:76:8f:26:c0:11:58:da:1e:ae:a3:14:6c:7d:
96:cf:cc:d2:81:d8:8b:f1:70:c2:15:6e:95:d7:c6:
28:09:98:47:5b:3c:2f:fb:70:42:22:83:4d:ff:0a:
bb:ab:b9:08:82:2e:af:4a:ad:2a:7c:de:50:0c:76:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E5:82:1A:0C:80:56:A0:B5:DA:AF:78:8B:78:95:3F:77:8A:BF:67
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7-WCGgyAVqC12q94i3iVP3eKv2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f8:13:a5:95:d5:a1:6f:18:bf:e1:6f:f2:62:ea:6a:79:a9:
bd:03:c1:55:9b:1a:9f:78:45:b8:ac:c0:ed:35:9c:ca:6c:79:
8c:34:61:5c:25:f6:9a:9f:81:79:7b:64:9b:24:c0:95:f3:8a:
e2:80:4f:7a:c5:3d:a9:5f:10:20:28:6c:f6:e6:2c:8b:44:1d:
96:40:b4:a3:23:0f:55:c7:41:38:89:c0:23:cd:cb:b6:e2:3e:
1f:0e:7a:2d:d6:3c:0f:f5:52:14:f6:2a:32:4f:d4:68:ba:d2:
05:f7:c8:aa:17:93:36:87:f7:60:ed:3a:12:cc:3f:f3:7c:dc:
7c:30:1e:4b:95:d4:14:dd:de:a2:58:25:4c:4d:40:96:01:a7:
7f:c0:ed:c9:cc:7f:92:c6:f5:ad:98:81:ce:62:d5:de:f3:b3:
5c:2d:7d:6f:e0:2e:1c:60:7a:64:d9:97:93:4d:af:49:ea:8b:
de:3d:db:10:23:25:4b:f7:ba:28:e5:51:c2:7e:bd:83:12:b1:
fe:d3:fa:f9:46:81:64:57:37:e1:6d:55:76:fa:d1:f2:2c:da:
f7:bf:00:22:7f:26:ae:e5:34:b0:97:0a:21:ba:b0:d8:5c:ea:
7d:fa:16:aa:3f:cc:d7:4e:13:20:50:c2:dc:e2:31:1c:f2:18:
32:8b:39:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ246inuuNsMcs8Y5/TXpboTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwNDIzMDU1NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmU1ODIxYTBjODA1NmEwYjVkYWFmNzg4Yjc4OTUzZjc3OGFiZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXiEQsjefLTxB0aHviVjtUqiT9ez
9RQSVeQosJqguMPOdlGyyalH93vs7TbYA1h2B2z0pf62IuaibVHLIRGTDoBwVvrp
I1tSKzyJppx5jo7xRdUoqTt/9Ze51rliCxTCoGsvdII2/0JLqYZUyO2/kLmvoeUb
u6/ptGxzdF4BdPQo9wzJGk/x4MTZ7ILxVlaOc7hEY+qyjR9eR5DOx93hbvIysFD/
UugCWgQmi8HnXKSJcIzhGzvd1LLS8sUcA3fXI8hhgHaPJsARWNoerqMUbH2Wz8zS
gdiL8XDCFW6V18YoCZhHWzwv+3BCIoNN/wq7q7kIgi6vSq0qfN5QDHY5QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO/lghoMgFagtdqveIt4lT93ir9nMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvNy1XQ0dneUFWcUMxMnE5NGkzaVZQM2VLdjJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk1obMA0G
CSqGSIb3DQEBCwUAA4IBAQBL+BOlldWhbxi/4W/yYupqeam9A8FVmxqfeEW4rMDt
NZzKbHmMNGFcJfaan4F5e2SbJMCV84rigE96xT2pXxAgKGz25iyLRB2WQLSjIw9V
x0E4icAjzcu24j4fDnot1jwP9VIU9ioyT9RoutIF98iqF5M2h/dg7ToSzD/zfNx8
MB5LldQU3d6iWCVMTUCWAad/wO3JzH+SxvWtmIHOYtXe87NcLX1v4C4cYHpk2ZeT
Ta9J6ovePdsQIyVL97oo5VHCfr2DErH+0/r5RoFkVzfhbVV2+tHyLNr3vwAifyau
5TSwlwohurDYXOp9+haqP8zXThMgUMLc4jEc8hgyizkM
-----END CERTIFICATE-----
Generated at Fri Apr 24 20:30:43 2026 by rpki-client