Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SyCWBJF5EIH8WDsUf5VEM-jUME8.roa
File: SyCWBJF5EIH8WDsUf5VEM-jUME8.roa (raw, json)
Hash identifier: sP+M78Koz8kJcMQ3j8uBXAPAocStdNSmb7L9dIw7irQ=
Subject key identifier: 4B:20:96:04:91:79:10:81:FC:58:3B:14:7F:95:44:33:E8:D4:30:4F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019EA36C0E72BDA2D0B7F1332BD76617BCE9
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SyCWBJF5EIH8WDsUf5VEM-jUME8.roa
Signing time: Sun 07 Jun 2026 18:50:28 +0000
ROA not before: Sun 07 Jun 2026 18:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18978
IP address blocks: 147.90.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a3:6c:0e:72:bd:a2:d0:b7:f1:33:2b:d7:66:17:bc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 7 18:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b20960491791081fc583b147f954433e8d4304f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:47:87:43:a9:9e:fc:15:cd:cf:7b:65:de:
00:36:81:ce:b8:44:ea:6a:be:9c:a0:fc:86:ae:de:
4e:75:cf:f6:a9:be:fd:d6:11:49:60:99:2b:8d:3d:
d8:3b:e7:b8:1c:3a:7f:f4:a6:3d:18:af:a6:17:2d:
74:6e:92:03:c4:77:98:9b:19:17:da:a0:1a:bc:04:
a0:96:1e:2a:99:bb:20:69:83:1c:55:cb:54:9a:7e:
f5:9c:3d:a7:d1:d4:77:7b:2f:43:f0:6d:f4:cc:81:
35:7b:a4:07:de:65:c1:ee:03:99:41:d9:71:6e:8d:
50:25:57:44:53:2e:9d:08:11:c1:57:c3:78:e4:ff:
a8:66:9f:c3:0c:c4:01:52:c1:bb:4d:df:92:48:9e:
a3:6d:ec:f6:ae:36:6c:e9:64:72:03:7f:e9:11:99:
bd:8a:eb:32:34:46:cf:1c:5b:6f:19:12:fc:27:59:
db:11:ee:64:68:e1:05:75:be:87:2d:57:91:5d:99:
1a:06:9e:f1:f1:0d:24:de:29:21:dc:6e:13:98:9d:
4d:0a:cd:09:b5:29:39:f1:af:66:0c:0d:d8:27:bc:
6c:83:eb:b5:c9:99:d1:af:b5:e1:69:cb:0c:0f:93:
43:91:7f:29:10:a4:8e:93:9b:c0:6c:8c:29:15:7f:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:96:04:91:79:10:81:FC:58:3B:14:7F:95:44:33:E8:D4:30:4F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SyCWBJF5EIH8WDsUf5VEM-jUME8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.120.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:c4:36:d9:d2:5d:2f:1e:cd:67:fb:64:2b:b3:1c:4a:64:21:
e3:85:e2:5b:58:c0:96:65:bf:27:41:c0:14:aa:ed:64:ad:b2:
8c:2f:53:95:c8:9c:69:74:c8:c0:2e:80:22:8a:25:8c:99:b8:
b9:ff:2d:26:c7:6b:5d:09:61:9a:97:6f:7e:73:a4:bd:d2:f9:
2c:bf:eb:46:a9:b9:f4:07:07:ac:5e:f5:16:b0:54:fd:a6:a7:
6f:fa:f1:36:79:e5:0f:8b:cd:0b:dd:37:22:3d:be:1b:2c:ec:
e0:8c:ca:bc:70:ef:5e:75:20:e0:dd:b1:cd:f9:0b:ed:7b:68:
86:0e:4d:46:eb:26:5e:68:eb:e1:5d:20:dd:25:82:64:8b:90:
93:dd:45:b6:81:74:f1:ab:06:7e:95:bd:25:52:c7:da:e5:3d:
13:2e:4b:95:d4:d2:97:14:53:70:ca:0c:8e:3d:54:4e:70:34:
1a:d4:9f:5f:8a:e0:f0:eb:54:10:62:5a:51:79:13:bf:10:ff:
e8:38:e1:db:45:72:96:17:d1:05:24:e5:a3:fe:cd:04:d5:79:
87:b1:c8:29:0a:b8:cd:8d:43:67:2f:f6:7a:ca:d0:ba:cc:c5:
8a:94:b5:2e:1f:3b:25:2d:38:e7:5d:2d:54:28:26:9c:b2:8d:
82:8c:2e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 00:45:06 2026 by rpki-client