Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/NGCDr_zJzQXzVXP2HLeseHnD1jI.roa
File: NGCDr_zJzQXzVXP2HLeseHnD1jI.roa (raw, json)
Hash identifier: jhxWOrfnat3IooOF+YfmKVmm9EG+ozCqidfp9EN0Fgc=
Subject key identifier: 34:60:83:AF:FC:C9:CD:05:F3:55:73:F6:1C:B7:AC:78:79:C3:D6:32
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0323EC00D7C85A68FB2455AD6EAC41D23
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/NGCDr_zJzQXzVXP2HLeseHnD1jI.roa
Signing time: Mon 24 Aug 2026 05:29:28 +0000
ROA not before: Mon 24 Aug 2026 05:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 147.90.27.0/24 maxlen: 24
147.90.104.0/24 maxlen: 24
147.90.107.0/24 maxlen: 24
147.90.109.0/24 maxlen: 24
147.90.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:3e:c0:0d:7c:85:a6:8f:b2:45:5a:d6:ea:c4:1d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 24 05:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=346083affcc9cd05f35573f61cb7ac7879c3d632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:13:37:83:a8:4a:e7:5e:93:e2:dc:8b:2f:
89:d1:f5:ac:51:19:40:9b:b2:f6:7a:e6:6e:98:37:
73:81:08:de:8c:4b:ff:c1:bb:fd:e6:13:12:d6:07:
53:6e:d3:e7:e2:1d:03:b2:7b:55:79:1e:91:74:24:
76:0f:dd:62:be:f6:56:17:98:e9:7e:b3:72:39:62:
ad:0d:4f:66:84:38:6a:cb:59:aa:0c:d2:c9:b6:53:
38:d8:76:62:41:69:b5:0c:1c:37:55:7d:32:74:6e:
38:48:c1:9f:73:42:c8:68:d5:1d:56:1e:64:59:ec:
f4:9f:a6:f8:41:af:62:70:9c:d0:fa:9f:22:2c:07:
84:fe:17:e8:e8:07:1d:ed:48:71:39:19:da:84:48:
c5:b1:a5:03:e5:8f:04:78:7d:47:46:72:23:cb:df:
29:3d:b2:d3:04:bb:8d:4f:36:17:c3:aa:5e:2c:6f:
34:11:a4:78:df:bd:7e:e1:9d:15:8c:c5:2c:57:11:
61:d6:e6:76:45:ea:44:06:43:27:3b:0e:c9:8b:9f:
be:34:7e:41:01:94:23:ef:60:8c:31:04:15:7c:a2:
2c:d1:61:b8:86:5d:5a:ca:15:85:e5:8f:95:b8:e8:
ac:2d:de:8f:66:9b:6a:08:41:78:9f:15:26:f1:2d:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:83:AF:FC:C9:CD:05:F3:55:73:F6:1C:B7:AC:78:79:C3:D6:32
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/NGCDr_zJzQXzVXP2HLeseHnD1jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.27.0/24
147.90.104.0/24
147.90.107.0/24
147.90.109.0/24
147.90.111.0/24
Signature Algorithm: sha256WithRSAEncryption
87:68:fb:ff:e9:cf:0a:f6:2e:d3:7d:b5:4c:e4:c4:da:b2:8d:
c4:d4:ef:a0:8e:c0:f0:cb:dd:d4:2e:58:78:68:c0:40:44:42:
ab:ac:a9:76:ef:4e:ee:72:2f:1f:81:b4:e4:92:a1:54:49:30:
f5:19:20:fc:82:12:b4:f5:3e:c0:93:2b:32:f8:e6:46:ac:d4:
46:e3:3c:93:f7:e0:4a:43:6a:44:ea:48:1c:9a:73:65:9a:e0:
70:db:45:5a:ee:ae:af:f9:bc:fd:1b:fd:18:2b:5e:13:41:43:
c5:b8:d1:fc:43:e8:ab:1d:00:aa:e4:26:12:02:0a:9f:65:12:
9f:9b:cb:b2:95:ff:15:f5:d9:ad:5f:17:ee:85:05:c9:9d:3a:
ed:a2:25:ed:aa:25:d5:3c:bf:43:b4:42:79:93:62:c3:d2:5a:
af:da:f7:9c:e5:48:96:4b:6b:3c:23:8c:12:77:07:25:aa:7c:
f3:5c:e5:23:b3:17:1e:04:be:b9:96:d2:6c:95:21:13:65:14:
72:8e:89:c1:17:4e:15:40:41:6e:38:d2:23:32:04:0e:d3:48:
af:05:03:f0:0d:59:5a:2c:5b:5e:2c:67:03:94:cc:d9:54:e8:
71:5d:a2:01:6a:12:f6:4c:a3:bc:3b:33:9b:7c:28:27:e4:11:
b4:e9:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:14:43 2026 by rpki-client