Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IhWV_XWPyXpLPHWNkx6fhE1l34I.roa
File: IhWV_XWPyXpLPHWNkx6fhE1l34I.roa (raw, json)
Hash identifier: RzK2t521XavJY9gsLNs2rskPp6TSy9bKmmeAY+SeudI=
Subject key identifier: 22:15:95:FD:75:8F:C9:7A:4B:3C:75:8D:93:1E:9F:84:4D:65:DF:82
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A06FF806DEC2D9466CF95C818383C5ABB9
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IhWV_XWPyXpLPHWNkx6fhE1l34I.roa
Signing time: Sat 05 Sep 2026 05:08:40 +0000
ROA not before: Sat 05 Sep 2026 05:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 147.90.54.0/24 maxlen: 24
158.173.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:f8:06:de:c2:d9:46:6c:f9:5c:81:83:83:c5:ab:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 5 05:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=221595fd758fc97a4b3c758d931e9f844d65df82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:53:7c:a9:00:12:95:65:d7:b5:d5:36:55:7a:
b0:58:c6:67:aa:0c:02:8e:8e:80:34:a1:2c:57:42:
2c:8d:43:3a:d3:69:b8:64:0b:fe:7c:6d:34:58:6b:
a2:39:4a:04:b6:a4:3b:01:14:6f:69:3b:46:a6:13:
cc:b1:61:6c:b1:34:73:1f:97:e1:5c:2d:8e:44:88:
fd:64:3b:67:c0:df:01:33:b7:0d:71:2f:89:b9:b4:
af:2e:58:fd:a9:71:70:06:ce:e1:a9:db:6e:41:6d:
14:18:3a:15:66:af:07:c2:ca:88:a5:ef:ff:ed:52:
a8:8b:b3:4a:7c:30:85:3f:12:ed:ba:02:19:8e:58:
ad:f9:80:a8:b1:2e:57:f3:33:e7:4d:1b:5f:df:33:
06:99:e6:18:a2:7d:e9:26:c7:44:dc:48:aa:e9:41:
14:10:6a:fb:af:45:16:ff:dd:13:f9:9c:3d:f1:96:
ee:a7:61:15:8b:97:0e:a8:14:49:8e:ce:3d:40:7d:
c3:e6:bf:a2:b6:d7:7b:e0:ab:7c:bb:21:19:54:2b:
41:ff:54:03:c0:bb:16:23:3e:03:6c:f0:af:0b:06:
6b:1d:e1:c3:b7:8b:25:9c:1b:f1:19:4d:57:93:6f:
24:b1:2a:26:0f:9a:4b:23:1f:a6:6f:e4:db:a0:cd:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:15:95:FD:75:8F:C9:7A:4B:3C:75:8D:93:1E:9F:84:4D:65:DF:82
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IhWV_XWPyXpLPHWNkx6fhE1l34I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.54.0/24
158.173.204.0/23
Signature Algorithm: sha256WithRSAEncryption
22:61:0b:69:8d:63:53:6e:bf:3b:9a:e8:63:25:45:83:d8:1f:
7d:9b:00:c0:81:29:7f:31:42:2c:7b:07:52:23:0e:5b:bd:0e:
1f:cd:f4:18:13:19:21:27:b1:91:5c:05:cc:b4:29:0b:75:40:
b7:23:6b:cb:e3:e4:d8:2d:6a:c4:b5:8f:ca:ba:57:3d:e8:16:
c7:12:69:ca:1f:6d:56:5c:07:21:8e:8b:d2:b8:ec:db:c7:58:
fe:56:65:c3:06:6b:74:8c:ea:5c:14:7e:95:c2:28:3a:f5:56:
83:ea:77:66:a2:f9:62:ef:3e:19:f1:36:86:9e:fb:24:41:09:
7b:a7:d9:f4:22:a4:ca:54:1e:23:4e:77:1e:fd:5a:40:f0:96:
ba:f0:b9:b7:3f:d0:89:b9:2a:c7:80:db:3b:21:4e:58:94:4e:
6b:8a:ee:49:f0:e5:e4:f2:18:59:d3:2a:fc:8f:c4:de:eb:2d:
1a:c3:bb:74:23:9a:75:fe:68:72:33:be:95:03:6d:21:86:92:
f1:cc:64:78:7e:2b:9f:f6:d1:0b:13:5b:c2:e1:35:13:61:43:
cd:b2:26:e5:33:42:f4:3a:ac:97:34:6e:f8:18:2f:1f:85:c0:
60:7a:27:06:7b:db:7b:60:5a:cb:7b:9d:0b:92:c8:5a:2a:69:
3f:0a:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:13:49 2026 by rpki-client