Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/T9WNKeuMvNGjUWK3SFqS4fWCNcY.roa
File: T9WNKeuMvNGjUWK3SFqS4fWCNcY.roa (raw, json)
Hash identifier: jFAfCBMKS53y81FR370RuRJodFD89OQUiyFgF4VuE/U=
Subject key identifier: 4F:D5:8D:29:EB:8C:BC:D1:A3:51:62:B7:48:5A:92:E1:F5:82:35:C6
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D70F5A7E9CC24B9A6388CBF908394E7D8
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/T9WNKeuMvNGjUWK3SFqS4fWCNcY.roa
Signing time: Thu 09 Apr 2026 06:37:20 +0000
ROA not before: Thu 09 Apr 2026 06:37:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402276
IP address blocks: 147.90.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:f5:a7:e9:cc:24:b9:a6:38:8c:bf:90:83:94:e7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 9 06:37:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fd58d29eb8cbcd1a35162b7485a92e1f58235c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:ff:86:69:c7:56:16:1d:a8:e0:63:6d:20:
c0:f1:99:28:fd:f3:7e:b4:8e:bf:1e:76:d8:f4:20:
5b:9d:04:38:e9:87:52:b5:e0:8d:7f:a8:c7:17:bf:
a4:fc:55:46:d2:13:65:cf:fb:e4:f3:bb:d2:a6:9b:
fb:c4:dd:d6:6e:24:9f:96:41:0c:ca:58:bf:e9:d4:
5a:c6:64:e6:4b:11:bf:aa:cd:f2:52:7d:92:0c:87:
a6:8d:33:68:3e:f4:17:e4:b2:48:ba:23:b2:d6:08:
ab:55:4e:c0:25:0f:a1:bd:8a:fc:d1:4c:99:eb:9c:
a6:77:55:36:f3:0c:8c:ba:11:cb:02:e5:22:0d:5c:
02:3c:cc:a7:e1:1f:98:13:00:26:ec:a5:74:fa:e2:
a8:ba:68:f6:26:f5:83:79:32:fe:a8:e0:b5:fb:68:
0f:6f:10:f8:2d:6d:60:c7:87:86:12:d0:47:ae:19:
57:b6:be:e4:b0:72:65:af:d1:54:f5:ae:b2:cb:91:
7a:24:94:61:e8:4d:8f:57:ae:23:5d:fb:28:c6:b9:
a1:d3:a7:20:6f:a5:db:18:20:e6:45:fa:13:69:88:
90:95:6e:a3:78:86:97:08:1e:61:a7:77:b8:a9:ab:
31:3a:c2:f3:28:36:2c:99:b1:41:cc:84:35:33:66:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:8D:29:EB:8C:BC:D1:A3:51:62:B7:48:5A:92:E1:F5:82:35:C6
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/T9WNKeuMvNGjUWK3SFqS4fWCNcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.51.0/24
Signature Algorithm: sha256WithRSAEncryption
64:aa:a4:bd:ea:38:6d:e9:e5:10:05:1b:20:a0:30:3d:92:c4:
a4:1a:78:81:4c:95:59:64:c1:f8:9e:e3:ea:5c:1b:54:ea:3d:
eb:80:d8:bb:ee:6f:31:e3:55:b6:a0:d3:47:d4:81:ac:1d:5b:
d1:3d:53:60:1f:c6:27:e3:b1:d9:a8:3a:b6:9c:c5:cd:07:71:
92:43:35:82:4e:8a:01:85:74:58:5d:9d:c5:58:9b:70:0f:6f:
9d:d8:a3:4b:b1:ac:40:c6:b2:cc:f9:bc:a4:bd:14:88:47:cd:
bd:3c:1d:49:9e:4e:64:bb:d6:3b:ad:ec:79:f5:ba:a9:c9:36:
4c:2b:25:2a:52:21:90:29:61:e4:8a:e5:78:df:67:f1:1c:55:
dd:a4:2b:b2:6d:07:a4:89:28:73:89:bd:41:5c:ff:1b:22:1f:
da:0c:8c:d8:3f:bd:c8:59:f8:54:6e:af:9c:5c:00:6c:0e:4f:
24:e7:39:f2:50:8c:0f:ba:26:dc:7a:c6:01:71:bd:30:f5:3a:
0d:63:4b:39:01:93:a1:93:1f:46:79:e0:55:fe:7b:bf:a4:58:
bd:c3:19:42:3a:18:11:49:73:ed:4a:32:f3:86:f0:09:23:89:
94:a0:a4:8c:d5:6b:b0:a9:58:da:df:53:8d:54:3e:28:52:b3:
0c:73:ac:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:56 2026 by rpki-client