Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Uj1-ezll-pFeWw5p6uL1RWVOnIo.roa
File: Uj1-ezll-pFeWw5p6uL1RWVOnIo.roa (raw, json)
Hash identifier: 7MV9cJbZmAZCj8jODeaOti9iQsuAyZncF2haeTdbX8g=
Subject key identifier: 52:3D:7E:7B:39:65:FA:91:5E:5B:0E:69:EA:E2:F5:45:65:4E:9C:8A
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019EFFE8A3114BAD01D08D94DC20F273D639
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Uj1-ezll-pFeWw5p6uL1RWVOnIo.roa
Signing time: Thu 25 Jun 2026 17:51:36 +0000
ROA not before: Thu 25 Jun 2026 17:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 147.90.24.0/23 maxlen: 24
147.90.34.0/24 maxlen: 24
147.90.42.0/23 maxlen: 24
147.90.46.0/23 maxlen: 23
147.90.53.0/24 maxlen: 24
147.90.64.0/23 maxlen: 23
147.90.126.0/24 maxlen: 24
147.90.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:e8:a3:11:4b:ad:01:d0:8d:94:dc:20:f2:73:d6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 25 17:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=523d7e7b3965fa915e5b0e69eae2f545654e9c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:c6:e8:99:33:86:b4:d9:e3:99:fd:fa:43:
84:a4:20:03:dd:ee:24:4e:5a:b6:e5:91:e4:34:d7:
53:7a:89:c3:d2:1d:03:ed:3b:a8:e4:68:18:e4:31:
85:fd:1b:66:3d:b2:5c:be:54:c3:94:13:2f:9d:e0:
f5:f1:26:3e:e7:42:bb:17:0c:a6:d7:85:68:97:fd:
5e:5b:1a:17:6b:52:c6:06:40:33:84:6f:97:29:47:
16:4c:4e:92:3c:d3:c9:17:84:fd:bf:c1:f9:35:60:
82:60:39:93:95:c7:23:19:16:52:3e:2d:2c:9e:5d:
46:6b:86:29:9c:d8:33:c0:1c:84:ce:2f:68:64:bd:
f9:30:75:b2:15:ff:70:87:31:f5:ae:97:7a:e4:c2:
f8:1f:7c:bb:97:e8:22:41:0b:24:c7:b2:cf:2e:b5:
21:a9:92:c9:58:aa:26:b9:eb:15:47:ae:eb:fb:e3:
ab:1f:b9:15:a8:40:15:d8:91:bc:71:56:10:2b:81:
50:e5:54:0d:77:18:de:b6:17:b1:d2:48:f6:3f:4e:
09:ab:7d:3e:65:1e:87:cf:e5:2c:00:75:0d:f3:f2:
ce:32:fb:73:88:ec:9d:0d:fd:d6:2a:2c:7a:af:2c:
35:b4:b3:b2:ed:b1:7d:fe:83:1b:b9:62:91:fb:ad:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3D:7E:7B:39:65:FA:91:5E:5B:0E:69:EA:E2:F5:45:65:4E:9C:8A
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Uj1-ezll-pFeWw5p6uL1RWVOnIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.24.0/23
147.90.34.0/24
147.90.42.0/23
147.90.46.0/23
147.90.53.0/24
147.90.64.0/23
147.90.126.0/24
147.90.201.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:c3:c3:05:91:ba:a4:c8:f5:58:80:d9:e7:f5:cc:91:b3:fa:
92:c9:b5:ab:ae:7c:70:2f:2d:17:8b:e9:cf:b2:3f:30:32:7d:
2b:be:e9:48:ba:57:96:1c:dc:83:8a:47:24:a8:ef:75:03:6f:
c7:7b:c0:2d:e2:1d:9f:26:f8:a3:cf:01:10:f2:1c:4c:44:2f:
09:69:8d:b9:0c:9a:1d:26:78:42:2c:07:52:19:75:34:33:de:
96:92:de:23:bb:89:05:60:20:0a:4a:43:86:6c:a1:cf:77:04:
36:56:fd:09:2b:ca:5d:b2:5c:2f:80:66:76:42:33:09:d5:c1:
0d:f1:b3:c0:e5:e3:7c:99:6e:8a:a4:f8:a7:cc:ad:bd:90:90:
89:97:36:aa:12:ae:f1:d0:7e:2d:71:ff:e6:4e:2d:3f:1a:31:
98:e0:b8:eb:51:5a:e6:fa:91:e7:2d:99:bc:d0:bc:5c:7d:17:
b7:af:7d:14:5b:2e:06:87:81:28:15:31:b1:4f:a5:85:d4:79:
7c:13:3d:f8:3f:0a:e7:12:e1:63:cf:2f:59:95:61:7f:5c:d2:
d1:cc:48:00:44:a8:9c:7d:6c:34:34:3a:22:2d:53:9f:63:ca:
ab:6a:7d:d8:cc:39:d2:d1:88:d0:94:b3:ec:92:7e:15:cd:b5:
9d:7b:c7:24
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ7/6KMRS60B0I2U3CDyc9Y5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwNjI1MTc1MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjNkN2U3YjM5NjVmYTkxNWU1YjBlNjllYWUyZjU0NTY1NGU5YzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFbG6JkzhrTZ45n9+kOEpCAD3e4k
Tlq25ZHkNNdTeonD0h0D7Tuo5GgY5DGF/RtmPbJcvlTDlBMvneD18SY+50K7Fwym
14Vol/1eWxoXa1LGBkAzhG+XKUcWTE6SPNPJF4T9v8H5NWCCYDmTlccjGRZSPi0s
nl1Ga4YpnNgzwByEzi9oZL35MHWyFf9whzH1rpd65ML4H3y7l+giQQskx7LPLrUh
qZLJWKomuesVR67r++OrH7kVqEAV2JG8cVYQK4FQ5VQNdxjethex0kj2P04Jq30+
ZR6Hz+UsAHUN8/LOMvtziOydDf3WKix6ryw1tLOy7bF9/oMbuWKR+606CQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFFI9fns5ZfqRXlsOaeri9UVlTpyKMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvVWoxLWV6bGwtcEZlV3c1cDZ1TDFSV1ZPbklvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBk1oYAwQA
k1oiAwQBk1oqAwQBk1ouAwQAk1o1AwQBk1pAAwQAk1p+AwQAk1rJMA0GCSqGSIb3
DQEBCwUAA4IBAQDdw8MFkbqkyPVYgNnn9cyRs/qSybWrrnxwLy0Xi+nPsj8wMn0r
vulIuleWHNyDikckqO91A2/He8At4h2fJvijzwEQ8hxMRC8JaY25DJodJnhCLAdS
GXU0M96Wkt4ju4kFYCAKSkOGbKHPdwQ2Vv0JK8pdslwvgGZ2QjMJ1cEN8bPA5eN8
mW6KpPinzK29kJCJlzaqEq7x0H4tcf/mTi0/GjGY4LjrUVrm+pHnLZm80LxcfRe3
r30UWy4Gh4EoFTGxT6WF1Hl8Ez34PwrnEuFjzy9ZlWF/XNLRzEgARKicfWw0NDoi
LVOfY8qran3YzDnS0YjQlLPskn4VzbWde8ck
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:01:53 2026 by rpki-client