Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TuNAHCwJbc4dsajPAJSDTu0vPBs.roa
File: TuNAHCwJbc4dsajPAJSDTu0vPBs.roa (raw, json)
Hash identifier: GAQnKh+rsYQ89YgZ2H9zofpjsE3Utqk1n+3GaHKhAnQ=
Subject key identifier: 4E:E3:40:1C:2C:09:6D:CE:1D:B1:A8:CF:00:94:83:4E:ED:2F:3C:1B
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A04852FAA7CAC9E10F3E47111B3D24B1FA
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TuNAHCwJbc4dsajPAJSDTu0vPBs.roa
Signing time: Fri 28 Aug 2026 12:23:12 +0000
ROA not before: Fri 28 Aug 2026 12:23:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 147.90.202.0/24 maxlen: 24
158.173.240.0/24 maxlen: 24
170.62.239.0/24 maxlen: 24
170.62.244.0/24 maxlen: 24
170.62.245.0/24 maxlen: 24
173.209.0.0/24 maxlen: 24
193.142.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:52:fa:a7:ca:c9:e1:0f:3e:47:11:1b:3d:24:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 28 12:23:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ee3401c2c096dce1db1a8cf0094834eed2f3c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:f0:8c:72:89:3d:88:bc:de:68:b7:3c:a1:
09:fd:56:2d:3f:af:2b:87:b3:7d:53:f7:ba:4a:ee:
16:05:c8:6a:3b:04:b4:7e:1d:d3:77:b6:b8:c6:0e:
07:39:78:6e:a4:ab:df:f3:83:d2:78:6b:e4:80:45:
51:9d:fa:ba:f4:f9:5b:b3:7b:a8:cf:4f:98:77:1c:
62:1b:44:7b:bf:4e:92:e2:2b:f7:d2:36:64:7e:b8:
8b:18:4b:a9:16:31:f5:30:75:f0:12:4e:c4:17:f2:
ae:cb:ea:bd:39:40:a6:3c:21:32:30:56:f0:63:26:
c4:d3:76:33:ab:e8:f4:41:c8:2f:9e:21:61:2d:09:
cf:62:aa:a8:a5:ca:0f:6e:90:3b:e9:44:61:b2:70:
fc:26:49:78:65:0f:b1:c3:b8:ef:d4:9a:44:ea:41:
bd:c2:ba:f0:54:9c:d1:a0:98:97:12:e2:d4:77:6d:
76:50:c3:5a:f4:c4:73:65:13:74:a3:bb:e5:03:46:
4a:0b:17:89:b3:31:7f:3b:3b:1e:b7:67:5a:43:4c:
ed:8f:c7:b8:fb:cf:ff:95:bc:75:a8:3d:be:6a:7c:
2c:c5:c8:97:bf:48:d6:ee:74:16:59:76:e3:39:6f:
38:c6:77:e3:cd:5c:fd:a8:99:fb:03:a2:e4:89:0c:
e3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E3:40:1C:2C:09:6D:CE:1D:B1:A8:CF:00:94:83:4E:ED:2F:3C:1B
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TuNAHCwJbc4dsajPAJSDTu0vPBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.202.0/24
158.173.240.0/24
170.62.239.0/24
170.62.244.0/23
173.209.0.0/24
193.142.58.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:f0:c3:58:50:83:45:25:8f:d2:c8:b8:77:32:cf:95:19:16:
0f:0d:53:3e:55:e1:46:c7:62:68:eb:db:eb:c6:52:aa:27:78:
30:27:7e:70:d9:ac:20:ed:0d:41:93:1b:89:50:35:3b:97:48:
3f:14:33:b3:a4:11:27:1b:e1:e2:9a:57:15:11:12:46:06:dc:
68:f0:8f:4b:62:1c:09:32:85:a1:95:98:5a:43:c0:61:42:aa:
36:19:4b:d0:dc:83:e7:ec:17:e9:9e:d6:ff:a7:cb:c1:dd:c8:
f3:fa:e6:06:d1:43:64:a0:cf:ab:66:1c:3b:cc:0b:f5:99:bd:
df:89:a7:f1:b1:18:90:93:58:32:7e:05:cc:3e:f3:99:c3:e0:
15:26:2f:e3:fb:23:f1:52:14:d3:ed:15:45:34:9c:b9:08:6b:
da:9b:86:f9:86:3e:e5:6e:7c:e7:fa:0b:79:73:5e:9d:50:82:
8b:b8:0b:44:8b:de:96:51:d0:3b:2d:fe:b6:af:af:ab:3d:c9:
c9:6a:64:b8:44:c0:22:e5:8f:00:b6:93:c2:d7:41:a3:cd:95:
2a:10:cb:7f:91:a8:45:a7:70:46:35:c5:73:2b:f0:fe:5a:ce:
01:11:35:80:1c:c5:f5:39:46:bf:2f:81:de:8d:ed:7a:b6:88:
1f:24:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:28 2026 by rpki-client