Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IBLUJ--GFy9KwACsdP03CR1dqyA.roa
File: IBLUJ--GFy9KwACsdP03CR1dqyA.roa (raw, json)
Hash identifier: bjmo5aK9yjxm3V6ZqAultBN9EHA8worHbJr2XvsNaBI=
Subject key identifier: 20:12:D4:27:EF:86:17:2F:4A:C0:00:AC:74:FD:37:09:1D:5D:AB:20
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A07AD2A76271A3EA8E1E029ECAA6AE3FC8
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IBLUJ--GFy9KwACsdP03CR1dqyA.roa
Signing time: Mon 07 Sep 2026 07:43:40 +0000
ROA not before: Mon 07 Sep 2026 07:43:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218869
IP address blocks: 147.90.23.0/24 maxlen: 24
147.90.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:d2:a7:62:71:a3:ea:8e:1e:02:9e:ca:a6:ae:3f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 7 07:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2012d427ef86172f4ac000ac74fd37091d5dab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:42:dd:14:a9:5d:29:75:f4:82:74:b9:5e:
a4:e5:2e:dc:ac:02:f3:bd:db:5b:15:75:c9:8c:29:
3b:dc:cd:92:7e:fc:7f:29:af:f4:78:c3:cd:b7:48:
84:cc:6c:a6:0e:7a:67:35:15:94:29:57:8c:ba:6c:
b3:81:d1:23:8f:6b:90:46:1a:b7:d4:43:a1:33:ee:
26:9e:47:32:34:7e:e8:e9:d3:3e:0a:96:51:33:c7:
29:09:69:0c:6d:0d:95:87:e9:c7:85:35:6d:eb:04:
32:e9:54:b5:a9:3e:ff:06:b3:87:e5:d3:71:ec:2e:
71:32:af:e2:ff:b4:c0:5d:ee:66:e1:e6:98:6a:c9:
2f:ad:7c:31:d4:8b:db:0e:a2:d4:23:06:6f:2d:6b:
92:be:f7:ce:3d:69:e0:a2:78:a5:2f:46:68:20:37:
df:ab:24:f4:14:08:83:f3:00:95:0e:84:9d:08:58:
5d:0d:78:51:57:3f:b4:77:6b:a2:d2:51:f0:63:e5:
ee:fc:f9:46:f8:47:f0:be:9a:1b:9d:87:aa:7e:b9:
02:42:5e:da:f7:74:8e:5e:0d:6f:22:c2:34:e0:77:
cf:53:ac:66:87:ce:98:25:c7:36:a0:b4:4f:b4:99:
c7:92:53:60:7d:70:26:e8:57:b4:ca:fb:97:f4:19:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:12:D4:27:EF:86:17:2F:4A:C0:00:AC:74:FD:37:09:1D:5D:AB:20
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IBLUJ--GFy9KwACsdP03CR1dqyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.23.0/24
147.90.43.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:64:97:bd:4f:35:b6:18:66:cd:cc:ea:9c:67:1f:9d:f9:99:
e1:8a:f5:91:b2:78:22:1f:b7:bb:46:bb:10:bf:57:53:65:d9:
75:da:dd:a0:df:6e:dc:55:ad:9a:61:84:f7:e4:c3:4d:40:f3:
34:78:e6:6b:b3:cb:76:ac:54:25:8b:2d:fb:5c:64:d0:3e:68:
4b:91:05:cd:d9:1c:ca:6d:a3:85:ce:7f:b8:fb:38:8e:de:8c:
96:80:6f:f1:9e:f4:e8:84:b3:2a:38:1d:45:76:ee:32:44:d4:
13:17:e0:d1:4d:f6:ca:82:b1:8b:dd:66:5c:6b:46:b1:aa:1a:
39:75:d3:02:1f:ec:f2:a2:62:5f:3a:21:b9:36:71:07:69:ab:
8c:81:55:75:f5:f8:4b:26:70:9b:d8:4b:c4:20:e2:b1:b8:7e:
77:eb:52:7a:a2:17:66:24:b3:4f:5b:37:05:f0:2b:8c:8e:77:
96:19:dd:4b:c9:56:b2:d6:36:dc:87:eb:0f:b7:4d:1f:50:f3:
c2:8c:bc:67:cd:e1:e7:99:10:e7:63:00:68:ff:9f:ca:2f:0c:
b1:a0:50:4c:38:e9:c2:a1:c1:f4:cb:34:90:d2:80:e8:a1:88:
3e:4e:49:5d:ca:83:68:44:63:d4:5c:67:9f:19:87:50:3b:1a:
b6:4a:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:14:39 2026 by rpki-client