Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UBocl5nV4LQBtCOqSsqhLS0PX6o.roa
File: UBocl5nV4LQBtCOqSsqhLS0PX6o.roa (raw, json)
Hash identifier: MswRrlUgbsHcsWW70L6oxeDKQ24+bT0WSh6ORaGChJo=
Subject key identifier: 50:1A:1C:97:99:D5:E0:B4:01:B4:23:AA:4A:CA:A1:2D:2D:0F:5F:AA
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A01B8BE55233AA85D6792C892245B305A9
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UBocl5nV4LQBtCOqSsqhLS0PX6o.roa
Signing time: Wed 19 Aug 2026 19:42:28 +0000
ROA not before: Wed 19 Aug 2026 19:42:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 147.90.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 15:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:8b:e5:52:33:aa:85:d6:79:2c:89:22:45:b3:05:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 19 19:42:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=501a1c9799d5e0b401b423aa4acaa12d2d0f5faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:55:54:c8:d6:31:81:93:98:b0:68:15:d5:fa:
66:8a:4e:5a:a9:ec:b5:90:a3:4b:45:d8:ca:18:f9:
20:52:89:12:87:ec:17:f8:08:39:0d:e8:34:91:f8:
52:1d:c5:d4:cf:3b:8c:c4:e8:68:15:6a:58:7a:a1:
93:7c:1c:a5:60:74:1a:66:9c:14:60:21:1b:8a:23:
b7:c9:28:44:f2:3d:7f:c4:81:80:ab:f0:72:4e:a2:
7b:e6:11:f8:be:4c:ec:23:ee:22:a8:e9:33:00:81:
15:66:8a:0d:6b:16:3e:3e:c2:ac:e7:eb:97:a9:a5:
85:97:e6:23:ff:4e:89:2f:84:a1:00:2f:f8:24:14:
42:28:06:87:4f:eb:c8:1a:36:c6:0b:36:b0:2d:e3:
42:4b:a1:e9:c4:94:6e:6b:74:46:92:27:ee:6c:6f:
29:9b:c5:02:c6:8e:9c:72:26:10:d0:54:4b:d6:ae:
05:a4:89:f6:74:d7:84:3d:6c:10:89:8b:4a:60:3f:
9d:e3:2e:99:37:28:51:a6:0b:ad:ee:ca:86:cc:cf:
8b:65:8b:cf:04:0c:9c:04:22:d9:2f:c2:f3:80:c0:
f4:2a:3f:8f:19:e6:df:0d:a6:0c:e0:c7:75:49:c8:
29:8b:bb:43:e0:61:1d:38:71:9e:f3:76:b0:bf:f1:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:1C:97:99:D5:E0:B4:01:B4:23:AA:4A:CA:A1:2D:2D:0F:5F:AA
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UBocl5nV4LQBtCOqSsqhLS0PX6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.188.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4a:2a:54:33:dc:b8:60:27:6e:9a:e6:f1:0e:ee:7a:4e:87:
16:ef:5c:7e:ae:80:d2:b3:76:38:87:c5:69:19:53:fe:6c:c7:
d4:25:c4:77:94:91:6a:9d:1f:cf:86:2e:35:9a:fb:6c:dc:e4:
83:b0:20:e0:b8:19:29:e2:42:27:5a:04:ea:bd:dc:6b:7e:23:
17:92:71:a3:fd:3a:12:53:75:ac:ab:fd:24:0d:f6:6d:56:14:
16:56:7b:1f:e8:8c:0a:41:e8:83:eb:3d:ea:72:8f:be:45:b3:
4d:4b:f3:21:d4:f9:9c:a4:e2:d1:fd:e7:a9:07:1e:f9:1d:20:
4c:8d:7f:81:26:22:6f:c1:5c:94:a8:9e:48:cd:0b:b8:55:33:
b5:34:6f:c3:7c:fe:47:ae:c4:3c:61:48:18:83:31:07:59:0f:
bf:5b:36:de:14:6d:d1:06:51:3c:33:f1:c4:4a:cc:ac:3f:34:
51:fd:a4:f1:e1:b8:ea:fd:d1:20:7d:1f:af:df:71:00:70:ab:
c1:c6:72:97:28:f4:45:d5:f4:a6:bc:be:d9:9a:cb:a7:7e:f5:
9d:20:cc:65:b4:4e:0b:b1:d1:a3:2c:e1:7d:96:69:96:36:4d:
7b:ac:6d:de:b5:29:0f:d2:b0:28:6d:58:28:dc:ff:c5:a7:4d:
c4:31:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:48:21 2026 by rpki-client