Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/9q3SC2W8YIdr6db1JS74n_p1BRg.roa
File: 9q3SC2W8YIdr6db1JS74n_p1BRg.roa (raw, json)
Hash identifier: 8iXpUfZfUSVu9mEfMV06oUDkHffuSTC91ErKT6bHNuA=
Subject key identifier: F6:AD:D2:0B:65:BC:60:87:6B:E9:D6:F5:25:2E:F8:9F:FA:75:05:18
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D9C116E6F68F5AB2ED822FC5F94F2899B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/9q3SC2W8YIdr6db1JS74n_p1BRg.roa
Signing time: Fri 17 Apr 2026 15:31:21 +0000
ROA not before: Fri 17 Apr 2026 15:31:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39351
IP address blocks: 147.90.117.0/24 maxlen: 24
155.2.208.0/24 maxlen: 24
155.2.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 12:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:11:6e:6f:68:f5:ab:2e:d8:22:fc:5f:94:f2:89:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 17 15:31:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6add20b65bc60876be9d6f5252ef89ffa750518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:ae:ad:48:ae:0e:5b:cc:88:73:64:56:bc:
c4:f2:95:82:f4:8a:f5:18:fa:4a:a5:65:07:c9:02:
1a:0b:78:a4:cc:86:cd:1e:da:5a:a0:b6:8c:f3:c4:
0f:b6:6c:75:7b:da:6a:bd:fc:75:5c:11:5e:03:58:
41:39:25:b4:ed:40:ea:85:ad:5c:b0:cd:ce:f6:13:
9e:b2:8b:d0:53:7d:d5:22:b4:5f:34:80:86:e1:79:
b0:ed:67:36:ea:7e:1e:87:ba:78:05:d9:f4:98:e8:
be:e5:47:ef:ce:3a:aa:4e:1b:ed:ef:4d:e4:d4:d4:
b4:68:fc:11:46:fa:e4:87:40:f5:a6:72:4d:a9:50:
55:16:b9:be:5d:52:ac:b7:0d:9a:b9:19:54:4c:8d:
a9:64:59:19:ee:02:dc:8b:c2:91:6b:7e:a6:60:2f:
3f:f3:dd:ca:12:62:2d:79:5a:bc:62:d0:93:55:de:
55:16:6b:8a:84:0e:b0:e3:8c:de:49:54:58:af:97:
2f:18:43:95:90:ad:e0:64:b1:b0:c1:4c:52:25:05:
a0:56:92:71:e1:dd:9e:41:2d:f9:72:c2:8b:80:a2:
f5:5c:b1:de:25:f3:7a:9d:ae:7b:a3:41:4a:19:91:
f8:d6:45:ac:f2:63:8a:d7:4a:ad:3d:6e:a8:6e:17:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AD:D2:0B:65:BC:60:87:6B:E9:D6:F5:25:2E:F8:9F:FA:75:05:18
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/9q3SC2W8YIdr6db1JS74n_p1BRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.117.0/24
155.2.208.0/23
Signature Algorithm: sha256WithRSAEncryption
40:f2:7d:9e:29:04:98:cd:d1:73:57:82:d7:c4:63:58:bf:dc:
ef:01:c0:8a:69:af:d9:36:f5:28:63:68:6b:d2:7f:ed:23:5f:
b2:cb:79:1d:d9:69:42:95:56:bb:53:b1:a7:14:9c:a5:cc:27:
0f:e5:07:c0:bf:52:31:45:4a:96:30:a4:55:1c:e7:1d:87:4d:
5b:f1:48:8a:9c:2a:ca:60:b4:59:e3:e7:a7:38:de:93:a5:a5:
5a:cd:d4:77:f2:96:00:16:ff:4b:c6:e9:8a:07:f3:7a:34:9e:
ae:04:32:61:57:5a:54:8f:46:49:1f:f2:31:33:65:e7:4f:f1:
10:18:ed:d8:99:7e:3c:dd:2b:89:9b:3f:4f:48:e6:d0:54:b8:
dd:36:d7:a3:e2:0c:b2:b6:ea:59:4a:3d:a7:ac:fa:81:61:fe:
cf:9d:87:06:c0:a8:2c:0c:22:32:06:d3:65:34:cf:3d:42:c7:
06:3f:15:6d:dc:67:cc:5c:18:c9:29:93:9c:9c:3e:28:d0:dd:
67:26:9f:e5:1f:38:54:aa:d7:ea:e3:54:fe:80:54:3b:98:24:
72:4b:13:0b:a7:0b:38:92:b8:62:5b:16:30:a3:76:d6:65:6d:
7d:45:c4:20:04:d9:84:27:72:c3:2d:a5:71:4a:36:6a:eb:08:
b9:66:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 20:29:57 2026 by rpki-client