Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/J4XgK_SViYAuC5zO9_8IvzjlDZA.roa
File: J4XgK_SViYAuC5zO9_8IvzjlDZA.roa (raw, json)
Hash identifier: R4Z2JV3cOF2olAesMWGeiutXAAWe/p+KT4eUf61LgX4=
Subject key identifier: 27:85:E0:2B:F4:95:89:80:2E:0B:9C:CE:F7:FF:08:BF:38:E5:0D:90
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E44CB583DC7BF7EEB51C9F98FAB85CEE3
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/J4XgK_SViYAuC5zO9_8IvzjlDZA.roa
Signing time: Wed 20 May 2026 09:50:37 +0000
ROA not before: Wed 20 May 2026 09:50:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 147.90.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:cb:58:3d:c7:bf:7e:eb:51:c9:f9:8f:ab:85:ce:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 20 09:50:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2785e02bf49589802e0b9ccef7ff08bf38e50d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:26:a6:2c:de:ba:d9:e9:4e:49:9d:9f:40:
58:49:5f:34:22:d7:4a:df:a5:a5:18:cc:3c:8f:52:
0e:7d:d3:fb:8d:a6:9e:9e:11:04:76:90:c9:bf:fe:
90:85:36:c8:ef:63:d5:9f:09:97:d1:6d:b7:71:ac:
00:1e:ea:d5:39:40:4c:58:fc:35:94:8f:fa:99:00:
19:6e:d7:84:19:b8:fe:da:8a:df:24:a2:6b:87:de:
85:8d:e5:5a:56:24:68:b1:d0:2c:3a:ec:eb:c6:06:
bb:4e:57:c7:7b:34:b9:98:42:f7:b4:8a:d4:91:84:
11:82:ca:9e:d7:ab:0d:5f:c3:be:49:2d:e6:04:eb:
73:a0:e5:48:6d:4b:bb:a7:5c:44:45:dc:1d:6f:bb:
17:99:c7:80:9a:aa:bf:dc:6e:4d:c3:46:0b:1f:e4:
f3:ad:47:00:29:ec:3b:90:80:41:4a:f1:24:97:42:
8d:f4:6d:d5:89:47:a3:58:37:b7:e4:5a:fd:c1:bb:
bf:a0:df:11:4c:fe:79:76:4e:bf:ea:b0:e0:f1:62:
c5:6b:a8:ba:b2:d4:6a:bd:68:db:9f:56:47:a3:e0:
5b:d5:56:8a:87:32:09:34:6c:39:bb:e3:bc:51:7a:
03:83:fe:bc:0d:5d:f3:0c:82:f5:7d:cd:44:94:74:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:85:E0:2B:F4:95:89:80:2E:0B:9C:CE:F7:FF:08:BF:38:E5:0D:90
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/J4XgK_SViYAuC5zO9_8IvzjlDZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.33.0/24
Signature Algorithm: sha256WithRSAEncryption
86:71:78:4f:81:eb:ee:25:79:6f:aa:ea:40:d2:7e:e5:6a:5b:
40:b0:c1:3c:9c:77:ca:98:05:5e:99:bd:09:d9:0e:2b:f4:8a:
f8:2b:72:40:ee:4d:66:b1:8a:8a:fd:28:34:ff:8e:26:28:32:
f8:13:8c:f1:fe:95:b6:cd:e6:c1:1b:c4:a0:f3:80:2b:ba:51:
82:7b:5c:b9:92:69:75:a1:9d:7b:26:6e:d8:72:ab:16:a3:87:
49:97:66:95:f6:b4:49:04:2a:35:c1:86:e1:76:e2:15:e9:d0:
96:a8:98:5e:2d:f0:c9:f7:95:36:16:b1:ba:c8:55:ab:4c:f2:
1c:2f:4c:d5:8a:f7:3a:50:11:29:79:2c:24:15:b0:0f:0f:44:
a0:9f:bc:6e:e4:df:49:e2:2c:c5:22:80:24:de:47:af:bc:6c:
3c:98:1c:f2:e4:f7:cf:7e:2c:e2:82:69:2c:60:47:be:fd:db:
73:30:27:58:99:8d:19:8d:0d:51:34:8e:7d:1a:7f:c6:f1:b3:
cc:a4:0e:d8:03:03:f8:3c:69:f5:a1:5c:0f:f5:ad:3b:d1:ed:
4f:cb:da:56:4f:13:9d:54:ae:e9:33:6c:96:47:15:c2:c0:1e:
65:36:1d:fc:be:05:e2:5f:a4:a8:b7:56:db:77:c2:8e:1a:6b:
c6:e7:94:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 00:46:41 2026 by rpki-client