Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/L9JfqHQKZf1FxY3PYqTdKge9rxc.roa
File: L9JfqHQKZf1FxY3PYqTdKge9rxc.roa (raw, json)
Hash identifier: 2G3mF/+r7bPBBY6rCOkO9uU5bLWCK74gsHKTu0Xo38A=
Subject key identifier: 2F:D2:5F:A8:74:0A:65:FD:45:C5:8D:CF:62:A4:DD:2A:07:BD:AF:17
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E6D00772A509341F02718787BAC038343
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/L9JfqHQKZf1FxY3PYqTdKge9rxc.roa
Signing time: Thu 28 May 2026 05:13:27 +0000
ROA not before: Thu 28 May 2026 05:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206804
IP address blocks: 147.90.237.0/24 maxlen: 24
158.173.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:00:77:2a:50:93:41:f0:27:18:78:7b:ac:03:83:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 28 05:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fd25fa8740a65fd45c58dcf62a4dd2a07bdaf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:79:a8:be:a3:18:29:c5:d2:12:90:3e:ee:
d6:b2:bc:37:5b:c4:b6:99:c1:26:3b:dd:4b:81:75:
30:46:fd:40:b5:f8:0d:22:4f:b2:7f:01:da:c5:d4:
f6:76:23:ae:16:7e:7d:e8:f5:fc:01:17:0e:a5:70:
d7:3b:14:ae:5d:81:8c:a0:14:ae:01:3c:6c:fb:14:
3f:27:4d:33:b3:ac:c4:2e:6c:9d:6f:4c:8a:73:35:
00:48:66:7f:f6:f3:86:f8:9c:f3:4b:eb:f7:3e:8e:
56:ba:95:99:de:b7:a2:ab:10:6d:35:11:7d:fc:c8:
5c:3f:6f:8f:1c:e1:87:f3:b3:ee:d9:a3:ff:96:a5:
bd:cb:43:cb:fa:44:15:9f:80:30:63:d2:65:d0:89:
39:30:db:29:c5:fd:b8:6d:4c:a5:2d:4e:08:a0:23:
8b:28:f4:df:d5:9f:bd:3d:b7:43:4f:7b:8d:df:5f:
5a:1f:99:0e:29:00:cd:40:a3:a0:31:9b:67:2a:23:
26:67:78:51:cb:3e:e1:a4:a7:27:3b:e4:de:60:ca:
93:81:49:14:26:3b:09:f3:e9:5c:bc:47:a2:62:2f:
7a:26:86:90:c1:65:17:73:f2:26:fa:c2:7a:93:59:
a7:5a:c7:01:a9:fe:09:a8:e4:5f:5a:18:fa:c4:99:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D2:5F:A8:74:0A:65:FD:45:C5:8D:CF:62:A4:DD:2A:07:BD:AF:17
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/L9JfqHQKZf1FxY3PYqTdKge9rxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.237.0/24
158.173.162.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8f:ff:d2:2c:5d:90:87:bf:eb:45:aa:f3:8c:3e:1d:71:a5:
8c:71:94:51:e6:70:6e:f0:6a:a8:98:17:f4:d4:64:d3:dc:7e:
73:1c:16:a6:d8:ea:5b:1d:c8:55:bb:40:9f:76:d4:eb:ad:2d:
af:0b:98:28:38:bc:52:6d:78:4b:9b:4c:06:4e:4b:f5:52:6c:
68:fe:d5:4c:ed:41:a2:aa:83:f0:7e:53:04:b5:31:e7:e4:ce:
86:6b:74:a1:98:09:2d:fd:1f:e0:0d:89:92:26:ac:f5:ba:b4:
ed:ea:0c:42:f8:35:f4:92:f8:eb:f8:9d:16:b5:60:70:16:31:
1b:b5:0f:97:21:96:ee:7b:54:86:e7:ff:a6:15:92:2b:97:5f:
c6:74:13:3c:c4:df:ce:2f:c2:b2:d4:a6:eb:6c:c9:b1:4d:1f:
5e:5c:d2:53:29:c6:e6:62:1c:08:58:37:55:2a:53:b7:ce:f5:
81:3b:ca:65:4f:a7:43:5a:3b:55:da:57:6e:6f:18:96:08:4d:
98:69:41:ad:bb:fb:b9:b9:0d:23:82:bb:88:64:d1:93:84:af:
50:02:75:4f:73:63:41:08:b6:ef:6d:78:0a:89:e0:83:25:14:
46:0d:80:4d:70:c2:86:2f:c0:1c:5a:d4:88:bc:29:24:7a:4d:
46:c3:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:47:07 2026 by rpki-client