Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GDfVLBKqWEKB9X4Am9h4YxMZbBA.roa
File: GDfVLBKqWEKB9X4Am9h4YxMZbBA.roa (raw, json)
Hash identifier: rUi6vjXh6Ha/CGc+sutXXuDBsZXdC6m3Ud+DICD8LpE=
Subject key identifier: 18:37:D5:2C:12:AA:58:42:81:F5:7E:00:9B:D8:78:63:13:19:6C:10
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A05DF24245FCD83AAAC2FFAB5E1EE76E59
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GDfVLBKqWEKB9X4Am9h4YxMZbBA.roa
Signing time: Tue 01 Sep 2026 17:09:12 +0000
ROA not before: Tue 01 Sep 2026 17:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 147.90.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:f2:42:45:fc:d8:3a:aa:c2:ff:ab:5e:1e:e7:6e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 1 17:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1837d52c12aa584281f57e009bd8786313196c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:88:09:99:f0:64:9c:28:17:7e:c8:6f:31:ea:
77:22:20:af:69:14:03:0b:36:20:6d:10:1c:db:73:
a2:b1:c8:ed:f1:74:21:6e:cb:5d:82:30:26:6a:36:
aa:c8:1b:b1:30:d3:ce:ac:5d:c6:ac:7e:98:f3:00:
11:a8:5a:94:3f:28:0d:42:c6:74:cc:d3:66:32:9a:
46:9f:63:9d:06:4a:81:dc:09:5b:ad:68:a6:74:c1:
b6:4a:62:dd:7f:be:6b:a8:f8:57:59:4f:d7:b1:f1:
fb:96:ad:91:3d:2a:c7:88:d7:a9:d5:02:85:6a:f7:
e7:34:ce:0a:45:d3:bf:44:94:7b:f7:25:5d:35:7a:
57:c6:5a:ab:46:3d:02:95:8e:d0:eb:97:ae:4a:6f:
38:7f:0d:7a:85:c3:51:ee:98:c2:36:c7:69:25:b2:
00:e8:e8:71:ab:c3:06:ff:56:cf:f5:eb:7d:29:65:
fd:69:06:29:02:5b:48:43:d1:fe:28:e6:a4:41:d4:
24:be:9e:4b:9b:40:32:60:c4:74:38:98:fc:92:60:
72:a3:30:44:8f:00:d2:d6:79:3e:0d:4d:7d:2e:8a:
83:f8:fa:fd:be:42:30:ab:bb:c9:d1:ce:24:cc:fe:
3c:e6:b4:c4:7b:ab:73:65:15:6f:d5:eb:40:57:53:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:37:D5:2C:12:AA:58:42:81:F5:7E:00:9B:D8:78:63:13:19:6C:10
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GDfVLBKqWEKB9X4Am9h4YxMZbBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4c:c2:44:33:0c:07:f9:0c:ef:6e:46:7e:d3:0f:6e:c1:ed:
2e:07:6b:85:55:72:eb:04:4c:0b:80:38:7f:cc:ce:95:79:a8:
95:cd:22:f2:74:f5:b2:61:3b:21:37:20:0d:51:c5:3c:ab:a0:
29:54:c7:3f:e2:6b:e7:1b:78:90:1d:8c:3e:25:19:f4:08:5a:
42:a2:7a:70:6d:b2:76:2c:fd:ca:40:da:4b:72:12:63:21:71:
c1:30:5a:44:98:5b:cc:3b:32:88:97:ae:27:98:1f:f7:77:f0:
72:8e:61:d4:df:a4:4c:b1:4b:8d:5c:ff:9d:88:66:97:14:0b:
03:36:6a:2e:25:ea:ba:55:94:a4:9b:c4:74:e0:58:4a:de:13:
e2:ed:68:77:84:8a:77:a7:62:5b:7c:4b:3f:b6:b7:0a:3d:53:
de:62:eb:b7:47:ae:a6:0f:34:7a:75:c6:21:f8:27:28:fc:8e:
f4:7e:7c:0e:8f:67:28:7b:28:61:c7:d7:93:de:e3:5d:2c:96:
d0:2a:a5:bc:3a:82:3b:f7:f9:d1:d2:4f:23:38:f0:3e:18:23:
47:bb:87:51:fc:82:21:b5:96:c4:3f:32:21:fa:c8:ed:21:03:
f2:33:c9:a4:73:cf:9b:81:66:a8:3e:73:9d:63:ae:c0:76:bc:
53:3d:c4:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBd8kJF/Ng6qsL/q14e525ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwOTAxMTcwOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODM3ZDUyYzEyYWE1ODQyODFmNTdlMDA5YmQ4Nzg2MzEzMTk2YzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ogJmfBknCgXfshvMep3IiCvaRQD
CzYgbRAc23Oiscjt8XQhbstdgjAmajaqyBuxMNPOrF3GrH6Y8wARqFqUPygNQsZ0
zNNmMppGn2OdBkqB3AlbrWimdMG2SmLdf75rqPhXWU/XsfH7lq2RPSrHiNep1QKF
avfnNM4KRdO/RJR79yVdNXpXxlqrRj0ClY7Q65euSm84fw16hcNR7pjCNsdpJbIA
6Ohxq8MG/1bP9et9KWX9aQYpAltIQ9H+KOakQdQkvp5Lm0AyYMR0OJj8kmByozBE
jwDS1nk+DU19LoqD+Pr9vkIwq7vJ0c4kzP485rTEe6tzZRVv1etAV1N6dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBg31SwSqlhCgfV+AJvYeGMTGWwQMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvR0RmVkxCS3FXRUtCOVg0QW05aDRZeE1aYkJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk1oUMA0G
CSqGSIb3DQEBCwUAA4IBAQCsTMJEMwwH+QzvbkZ+0w9uwe0uB2uFVXLrBEwLgDh/
zM6VeaiVzSLydPWyYTshNyANUcU8q6ApVMc/4mvnG3iQHYw+JRn0CFpConpwbbJ2
LP3KQNpLchJjIXHBMFpEmFvMOzKIl64nmB/3d/ByjmHU36RMsUuNXP+diGaXFAsD
NmouJeq6VZSkm8R04FhK3hPi7Wh3hIp3p2JbfEs/trcKPVPeYuu3R66mDzR6dcYh
+Cco/I70fnwOj2coeyhhx9eT3uNdLJbQKqW8OoI79/nR0k8jOPA+GCNHu4dR/IIh
tZbEPzIh+sjtIQPyM8mkc8+bgWaoPnOdY67AdrxTPcSt
-----END CERTIFICATE-----
Generated at Tue Sep 8 18:13:46 2026 by rpki-client