Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JEdgurNPnYOtMRI83xL3mJ0JSw0.roa
File: JEdgurNPnYOtMRI83xL3mJ0JSw0.roa (raw, json)
Hash identifier: 2lgJBny9+k9rsr5I7Z50K1eDZv9M039UB3EJCevz5vc=
Subject key identifier: 24:47:60:BA:B3:4F:9D:83:AD:31:12:3C:DF:12:F7:98:9D:09:4B:0D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019FB1A16F70BD14EC081EC12EADB1122EB0
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JEdgurNPnYOtMRI83xL3mJ0JSw0.roa
Signing time: Thu 30 Jul 2026 06:06:14 +0000
ROA not before: Thu 30 Jul 2026 06:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 147.90.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:a1:6f:70:bd:14:ec:08:1e:c1:2e:ad:b1:12:2e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 30 06:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=244760bab34f9d83ad31123cdf12f7989d094b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:be:c8:aa:8d:cd:01:1d:ea:76:eb:6c:a7:
a7:cd:d9:a7:92:37:7a:e3:57:c6:33:11:55:25:3b:
6b:f1:73:5c:e8:82:d2:01:bd:99:db:18:2e:89:1b:
81:26:ae:07:bf:b2:eb:fa:f5:b7:2e:25:dd:36:02:
a5:3c:10:78:5e:0b:bc:ae:c4:59:b2:e9:2b:75:8d:
64:a1:cf:f2:15:0c:44:f1:5c:92:dc:cf:54:52:08:
6d:a5:b3:d5:53:f1:4e:d1:6d:a3:24:9c:36:62:f3:
0b:20:ec:32:83:45:ec:f6:4d:d7:78:95:72:5a:7c:
13:0f:b0:d5:e0:15:f3:11:a3:99:d0:4e:00:f1:e0:
5d:49:03:3e:0c:38:e5:77:ee:d9:1f:6d:61:f5:2c:
fc:d5:4e:c5:8d:b2:5d:ea:77:7c:5d:89:dd:63:39:
7e:4e:ff:82:13:30:9b:2d:d7:a6:33:25:5e:04:3b:
18:ab:c2:aa:e7:27:c9:27:90:81:7f:66:de:d8:65:
f3:78:80:6f:42:e5:54:6b:90:bb:0f:da:e6:38:6c:
54:85:a4:78:aa:2d:0f:b2:8b:54:8a:79:39:14:30:
41:75:43:37:da:45:ee:29:58:05:e5:fb:54:06:99:
67:bc:36:98:c4:f2:87:33:6e:0a:1e:18:4b:a0:6b:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:47:60:BA:B3:4F:9D:83:AD:31:12:3C:DF:12:F7:98:9D:09:4B:0D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JEdgurNPnYOtMRI83xL3mJ0JSw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:16:be:e3:d9:02:d1:87:be:34:7d:fc:2b:67:03:d1:c7:de:
ec:af:ad:33:ae:97:d7:26:84:17:08:e6:45:03:2d:76:51:5d:
bc:d8:5f:7f:1b:5e:2a:fd:03:60:3b:48:47:e5:53:2e:ab:12:
cb:55:4f:26:e1:53:4c:ba:b5:ef:ea:e0:f0:3f:94:0d:e0:9b:
40:1b:7b:e1:2f:b1:08:8e:5d:16:01:9b:69:6f:e8:32:87:f4:
39:c8:4f:2b:d8:2d:cf:3a:33:b6:26:9a:50:c7:0a:b0:91:c4:
e5:33:fa:dc:6f:4f:7b:44:6c:d4:df:ba:0f:cd:55:b2:a0:a1:
44:d2:71:49:59:50:70:99:58:5e:ac:87:c3:b8:dd:13:31:47:
be:2c:a6:86:4e:0d:d0:a6:bd:02:3e:d1:08:0e:86:68:08:be:
96:27:6a:ad:3f:31:45:52:6b:8c:9b:ca:16:aa:6a:d1:01:6c:
45:c0:91:84:dc:36:bd:aa:17:c2:94:09:d6:90:d6:d5:02:05:
5f:7e:ec:70:60:e3:61:0f:b4:2f:c7:a2:8c:3b:09:97:16:b1:
fd:23:44:47:dd:c9:3e:18:0f:54:cc:31:07:21:94:10:28:09:
e4:aa:ec:08:01:8c:43:80:a4:b2:ee:3d:4a:f6:d1:d2:b2:f0:
f6:5a:d0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:04 2026 by rpki-client