Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UaBOTc6Shk5S9Tj2akfhBit2RbA.roa
File: UaBOTc6Shk5S9Tj2akfhBit2RbA.roa (raw, json)
Hash identifier: TPkuda8czjWsoXR0hKYVw2p/SNmYWZR5mVviZ3hRcUE=
Subject key identifier: 51:A0:4E:4D:CE:92:86:4E:52:F5:38:F6:6A:47:E1:06:2B:76:45:B0
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0190847635979EAE400C09FC44FB62678
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UaBOTc6Shk5S9Tj2akfhBit2RbA.roa
Signing time: Wed 19 Aug 2026 07:59:28 +0000
ROA not before: Wed 19 Aug 2026 07:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 147.90.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:08:47:63:59:79:ea:e4:00:c0:9f:c4:4f:b6:26:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 19 07:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51a04e4dce92864e52f538f66a47e1062b7645b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:cc:3d:f8:86:d9:e5:2e:a4:dd:57:d0:d9:
9c:2c:33:b7:b8:a0:31:16:e4:ad:77:9c:20:1f:38:
d1:d4:d4:6a:46:70:4f:e6:f5:90:26:b1:c6:d3:12:
9d:2e:94:87:a6:03:ec:8d:55:95:f1:70:c4:b3:c6:
cc:26:03:8f:6f:a7:3a:c9:d5:98:0b:28:d7:f2:23:
1d:a2:36:24:9b:71:60:bd:c8:84:6a:64:fe:88:e1:
9b:4b:6f:71:66:0a:0c:87:65:de:3e:54:de:d2:f0:
04:c5:e8:88:68:d8:cf:f5:51:f3:ff:7f:98:61:24:
bf:0b:9b:f0:6c:7e:c6:0d:10:57:33:5e:6c:d6:da:
a0:bb:38:de:2e:6e:47:e3:f5:1b:b6:41:b3:35:3c:
e8:63:21:0f:f2:ae:12:49:c7:bd:d6:48:ab:ee:bb:
c6:ea:be:cf:67:b4:b0:a1:b3:10:22:23:4a:04:ee:
3b:a6:ce:2e:95:f8:31:3e:e8:11:07:83:ff:fc:8b:
31:b8:8b:39:66:b5:aa:51:12:61:9c:a9:6e:10:62:
cc:26:99:99:25:86:41:7c:3a:14:c9:7a:38:0f:c9:
88:35:52:ef:6c:e3:63:41:2c:5f:ad:21:ad:b6:aa:
f6:a2:ee:e5:91:2d:28:a1:03:9f:7a:8d:66:00:1e:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A0:4E:4D:CE:92:86:4E:52:F5:38:F6:6A:47:E1:06:2B:76:45:B0
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UaBOTc6Shk5S9Tj2akfhBit2RbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.106.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c6:4a:3d:3f:e4:a3:b1:fa:a9:83:0e:11:b3:d1:01:32:48:
a0:96:7e:34:96:2f:dd:2c:ca:cf:7b:3d:8e:22:8d:21:41:6f:
ad:c7:21:51:0e:0a:8b:68:42:40:2a:e8:d5:43:6b:ee:a3:a1:
77:c6:cf:e5:75:9b:7d:cb:33:15:2e:f1:d2:3e:50:48:22:48:
6e:ed:38:0b:89:b5:c0:4e:1c:8f:b6:dc:fa:49:c2:69:2c:43:
b6:d5:6d:ee:6b:01:f7:03:5f:8d:24:61:85:86:f8:ad:3d:d3:
97:81:46:76:f2:cb:e4:d6:a4:78:03:c3:d6:6b:fb:4d:f9:38:
3b:22:7c:80:3a:ab:a9:0e:f3:30:28:1a:cd:28:63:53:cb:58:
cf:ce:59:61:e7:57:bb:63:e7:f8:83:a8:67:77:53:40:f7:04:
82:a5:31:d1:05:7f:d2:75:24:58:3f:8d:db:a3:8b:be:6f:91:
17:ff:f8:e4:2b:8f:f1:81:13:b9:f9:47:bd:76:b3:ee:df:b6:
90:bf:dc:b1:c2:3f:71:5c:0b:7c:24:33:8b:57:bc:e9:57:de:
c2:2d:28:12:df:80:c7:9d:aa:f3:99:d0:42:02:8d:e2:ed:82:
20:85:b4:3e:47:06:f3:99:21:9c:81:17:4d:66:6e:7b:6c:a4:
f2:ae:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:47 2026 by rpki-client