Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ea5UxI7AbN5UZhQd7hJZofpPERk.roa
File: Ea5UxI7AbN5UZhQd7hJZofpPERk.roa (raw, json)
Hash identifier: qPZgwa/orbKMHwUAyf13ACdBce+hTFU0pcilsHAX1MI=
Subject key identifier: 11:AE:54:C4:8E:C0:6C:DE:54:66:14:1D:EE:12:59:A1:FA:4F:11:19
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A17BD1BCB13E02D3B342E601049F471B06
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ea5UxI7AbN5UZhQd7hJZofpPERk.roa
Signing time: Tue 27 Oct 2026 05:25:05 +0000
ROA not before: Tue 27 Oct 2026 05:25:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54113
IP address blocks: 147.90.66.0/24 maxlen: 24
147.90.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:d1:bc:b1:3e:02:d3:b3:42:e6:01:04:9f:47:1b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 27 05:25:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11ae54c48ec06cde5466141dee1259a1fa4f1119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:c0:e7:6b:1d:12:37:51:e6:4c:15:36:28:
2c:b0:76:7e:88:08:77:f3:84:f3:15:2a:bd:43:8a:
d9:33:b5:56:fc:29:27:db:92:78:f1:33:b0:de:f0:
20:65:c0:b7:8b:d7:5e:f8:b7:93:32:f4:46:59:14:
37:7f:8a:28:37:dc:42:9f:ff:fd:58:86:54:e5:77:
32:b1:33:2c:7e:78:ba:23:d5:28:96:b8:88:8a:0e:
e1:e0:8f:7f:2e:fe:4f:ba:c5:3d:80:d2:73:b8:7e:
91:85:3a:9b:eb:64:2a:bf:b1:01:d9:8b:9f:07:58:
e9:ea:2f:30:d0:b6:16:d0:85:0a:5d:a1:46:37:74:
6e:a6:10:1f:eb:94:38:b3:b1:18:d7:f5:d7:d5:6e:
bb:00:38:cc:21:ef:70:06:1b:10:a4:42:e4:79:f9:
20:75:e6:ee:97:f1:09:d2:f3:58:12:79:06:01:b2:
f6:6b:84:e4:7a:80:2c:8e:8f:2a:ab:d2:ab:0f:43:
e5:6d:1a:f1:e5:3b:68:f2:df:1f:52:f1:7d:a3:ce:
13:c1:b0:9a:d8:69:f4:f6:4e:88:63:77:a6:cd:62:
eb:20:e7:66:98:54:26:89:4e:2f:19:c8:9a:b4:9d:
41:5e:3a:c5:8b:01:db:d6:70:3d:af:13:56:79:fd:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AE:54:C4:8E:C0:6C:DE:54:66:14:1D:EE:12:59:A1:FA:4F:11:19
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ea5UxI7AbN5UZhQd7hJZofpPERk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.66.0/23
Signature Algorithm: sha256WithRSAEncryption
73:39:5b:2f:d0:20:23:9a:bf:c9:83:96:03:12:4a:24:e4:06:
34:17:b5:eb:8c:7c:bd:1c:41:8f:d5:a1:9f:5d:ec:42:30:af:
8c:bd:f0:be:6b:ca:5a:3c:c9:a7:1b:32:74:9b:4c:b8:73:3d:
88:e3:da:4b:d0:a7:6f:e0:83:d6:5f:5c:96:30:f9:10:d5:8c:
92:58:8f:04:7d:6a:6d:50:22:91:6f:0b:e9:38:0d:4b:af:b2:
38:62:66:64:26:5f:e3:ed:45:64:be:14:ca:19:d7:9f:b7:89:
a4:71:6a:47:9e:70:9e:af:3e:63:b9:84:62:70:ad:22:af:9d:
e7:d1:10:5a:2f:15:18:d9:3b:d5:11:85:30:1f:8a:93:f0:14:
ba:c9:ce:0d:d4:4a:a1:cd:65:19:fb:03:28:a5:df:29:af:d8:
e8:25:28:68:f1:77:71:16:2f:d3:66:4c:1b:96:bb:40:05:43:
a5:e3:f1:b1:68:cb:8f:66:11:c9:fd:ff:6d:3f:c9:d2:fb:90:
a1:60:6f:72:7a:88:c6:29:3d:f6:49:c1:53:c1:c0:30:55:c0:
25:fb:f1:9b:0f:49:66:3c:dd:e3:a2:c8:30:4f:4a:14:98:3f:
ec:4c:a2:cc:96:b8:98:c3:b7:08:94:fc:13:30:84:47:16:06:
c9:ea:8c:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF70byxPgLTs0LmAQSfRxsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYxMDI3MDUyNTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWFlNTRjNDhlYzA2Y2RlNTQ2NjE0MWRlZTEyNTlhMWZhNGYxMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqzA52sdEjdR5kwVNigssHZ+iAh3
84TzFSq9Q4rZM7VW/Ckn25J48TOw3vAgZcC3i9de+LeTMvRGWRQ3f4ooN9xCn//9
WIZU5XcysTMsfni6I9UolriIig7h4I9/Lv5PusU9gNJzuH6RhTqb62Qqv7EB2Yuf
B1jp6i8w0LYW0IUKXaFGN3RuphAf65Q4s7EY1/XX1W67ADjMIe9wBhsQpELkefkg
debul/EJ0vNYEnkGAbL2a4TkeoAsjo8qq9KrD0PlbRrx5Tto8t8fUvF9o84TwbCa
2Gn09k6IY3emzWLrIOdmmFQmiU4vGciatJ1BXjrFiwHb1nA9rxNWef0kJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBGuVMSOwGzeVGYUHe4SWaH6TxEZMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvRWE1VXhJN0FiTjVVWmhRZDdoSlpvZnBQRVJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk1pCMA0G
CSqGSIb3DQEBCwUAA4IBAQBzOVsv0CAjmr/Jg5YDEkok5AY0F7XrjHy9HEGP1aGf
XexCMK+MvfC+a8paPMmnGzJ0m0y4cz2I49pL0Kdv4IPWX1yWMPkQ1YySWI8EfWpt
UCKRbwvpOA1Lr7I4YmZkJl/j7UVkvhTKGdeft4mkcWpHnnCerz5juYRicK0ir53n
0RBaLxUY2TvVEYUwH4qT8BS6yc4N1EqhzWUZ+wMopd8pr9joJSho8XdxFi/TZkwb
lrtABUOl4/GxaMuPZhHJ/f9tP8nS+5ChYG9yeojGKT32ScFTwcAwVcAl+/GbD0lm
PN3josgwT0oUmD/sTKLMlriYw7cIlPwTMIRHFgbJ6oy+
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:35:25 2026 by rpki-client