Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8uuwcjdzsGo5vqwnxZwlEmF61VY.roa
File: 8uuwcjdzsGo5vqwnxZwlEmF61VY.roa (raw, json)
Hash identifier: tEoDK2sGsik+JPJdYmDgy/dOQaOnETIZPNFvJvx658g=
Subject key identifier: F2:EB:B0:72:37:73:B0:6A:39:BE:AC:27:C5:9C:25:12:61:7A:D5:56
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DDA45A135DCE79449AAFE3F435C5A2311
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8uuwcjdzsGo5vqwnxZwlEmF61VY.roa
Signing time: Wed 29 Apr 2026 17:24:49 +0000
ROA not before: Wed 29 Apr 2026 17:24:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 147.90.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 11:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:45:a1:35:dc:e7:94:49:aa:fe:3f:43:5c:5a:23:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 29 17:24:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2ebb0723773b06a39beac27c59c2512617ad556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:dd:74:40:69:9f:90:6b:23:2a:0e:66:18:
e9:e9:75:17:f2:60:8c:a4:9b:09:ae:13:9a:e2:4d:
f8:14:70:9a:74:46:3f:85:d1:dc:ec:6d:d4:69:96:
c4:74:84:cc:ef:2b:d6:4d:23:2d:a9:86:9b:23:fd:
95:99:46:2e:34:f4:ef:68:09:e0:b5:c3:db:4a:04:
14:59:c2:af:bf:02:5b:a2:14:7d:41:28:04:f4:5e:
1a:c7:cf:e7:d7:97:79:5f:f2:51:39:fb:8f:47:46:
33:2b:97:3a:89:20:56:c8:74:6c:74:64:91:3a:f2:
19:59:03:f0:56:d0:09:a5:a2:03:f8:c8:d3:d9:3e:
7c:a1:fb:5c:bc:43:8b:99:50:1b:c4:77:30:8f:c2:
67:4c:36:ae:3e:a1:35:ff:c1:e6:0d:f0:82:ba:9d:
b8:a1:ae:18:9a:a2:4d:7f:0d:3d:cb:ec:5f:79:30:
f0:05:4a:5d:8b:f8:1b:bb:68:cd:79:81:39:13:7b:
7f:b0:ad:3b:94:2c:2d:cc:73:50:ce:23:75:5b:de:
68:be:48:73:f7:fe:51:d7:d7:0b:df:2e:88:7d:a4:
a9:49:13:f0:f4:24:63:73:58:cf:59:f1:da:d9:1c:
d8:a6:51:cd:bc:7b:59:5e:f9:44:2b:da:39:22:e9:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EB:B0:72:37:73:B0:6A:39:BE:AC:27:C5:9C:25:12:61:7A:D5:56
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8uuwcjdzsGo5vqwnxZwlEmF61VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.22.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:7b:27:c4:90:62:ae:06:8a:3f:eb:be:40:e4:cb:96:c7:9d:
cb:2d:c2:6b:fa:f5:07:54:8c:e8:e1:1a:c4:ba:c0:42:86:6a:
e6:08:6f:f0:15:8d:8a:a3:8b:cf:c3:a6:29:2c:e9:3c:0d:a5:
05:93:af:4c:aa:d0:92:3c:ee:e5:8a:14:64:4b:6c:1e:7e:5f:
e7:6e:bf:fc:c1:40:13:c0:f1:89:82:b0:b7:86:be:7f:a2:42:
74:3c:ec:29:85:09:cc:cf:20:0c:15:e4:f7:fe:ad:ca:94:66:
2f:48:29:89:f7:98:fc:e3:c1:ee:e0:be:3c:8a:16:a0:03:1a:
8e:a0:24:12:f0:00:ca:b8:ff:fe:f8:a2:8d:98:cb:ef:71:e1:
0e:dc:d4:19:91:fd:a6:a6:61:8b:0b:97:14:42:d3:e7:e6:e7:
9f:1d:ca:71:da:d2:f4:d0:0c:81:71:26:f8:fc:3d:4e:47:1d:
ff:24:b6:f9:a9:0e:10:7f:9a:31:e8:ce:a7:a9:90:c9:59:9d:
04:0d:c9:d5:fb:3f:ba:e4:a1:9b:9b:d4:bc:a4:25:a0:f1:03:
99:f9:ad:d5:d6:2f:02:9d:64:4a:d8:cd:8e:d6:89:7a:3e:54:
80:d9:69:92:77:7d:5e:80:04:c9:21:84:93:9d:82:20:28:d2:
8e:d0:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:13:17 2026 by rpki-client