Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Vjz730epXRn0s51Tv5oRbl7yCeI.roa
File: Vjz730epXRn0s51Tv5oRbl7yCeI.roa (raw, json)
Hash identifier: H+Vx4zEte8XM02ZZ0Msu+vHcAoFA8GX0c0yjb4PTHLI=
Subject key identifier: 56:3C:FB:DF:47:A9:5D:19:F4:B3:9D:53:BF:9A:11:6E:5E:F2:09:E2
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019EFFE4FA7E84943C94EB86B5AD7B089CA6
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Vjz730epXRn0s51Tv5oRbl7yCeI.roa
Signing time: Thu 25 Jun 2026 17:47:36 +0000
ROA not before: Thu 25 Jun 2026 17:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140149
IP address blocks: 147.90.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:e4:fa:7e:84:94:3c:94:eb:86:b5:ad:7b:08:9c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 25 17:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=563cfbdf47a95d19f4b39d53bf9a116e5ef209e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:0a:e5:b7:52:8b:69:a2:43:47:07:d9:11:
a3:e5:a1:7b:3c:1d:44:cb:11:88:c9:0e:1f:5c:ea:
21:60:6b:01:7a:63:6b:b2:d7:45:1c:aa:4e:62:63:
25:f1:c2:37:bc:a2:ab:89:c6:0f:59:ed:e3:08:28:
1f:9a:ec:68:09:27:4a:57:09:65:3a:57:ce:14:62:
b0:d3:0d:33:55:09:93:b4:5f:12:22:59:54:f8:18:
a5:07:8c:bf:ec:51:06:67:0c:45:e2:18:f5:d2:fd:
32:2f:37:21:b7:c8:7d:68:68:75:6b:0c:9f:53:41:
ae:0b:83:10:0f:16:d6:2b:f8:11:03:da:9a:f3:60:
02:71:20:40:19:1f:ce:b7:12:66:b8:27:3e:38:79:
e5:5b:d2:35:f2:ab:6e:61:7a:00:99:d5:7a:71:f7:
5d:f5:9a:7c:da:49:6b:c5:3e:19:f8:ab:05:d3:2a:
0b:9a:96:2c:37:ce:16:ae:d0:d0:b4:d8:16:f2:d8:
41:f0:6a:4d:fd:80:3d:20:a8:20:49:c4:f0:62:89:
04:dd:c7:0e:16:01:35:2e:6a:85:06:ff:28:75:05:
1f:f1:1f:d7:e1:6e:f9:b1:83:51:2a:bb:38:bf:2c:
99:47:df:16:47:ad:e5:97:65:93:e9:f5:aa:c5:22:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3C:FB:DF:47:A9:5D:19:F4:B3:9D:53:BF:9A:11:6E:5E:F2:09:E2
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Vjz730epXRn0s51Tv5oRbl7yCeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.18.0/24
Signature Algorithm: sha256WithRSAEncryption
86:60:d8:cc:b7:84:36:44:f4:e4:83:3a:aa:af:41:71:6a:02:
bd:ec:a2:c4:4e:c0:e5:cf:bb:b0:01:43:ea:d5:7f:8c:50:1d:
73:12:95:b4:d6:8d:29:47:78:60:cb:7b:ce:47:bd:c1:e4:c0:
b5:e9:40:59:03:af:ba:5e:51:a4:09:9c:94:6e:3c:78:14:d8:
5e:7e:f2:f1:55:26:31:2d:10:7b:d8:da:d4:aa:a8:84:f1:34:
9c:4c:31:84:b4:71:8c:1d:e4:23:70:53:c1:cc:3a:29:6c:d0:
b9:57:f7:bc:17:3c:22:e2:df:ed:d9:d9:2a:3c:6a:9a:38:a3:
bc:9a:32:06:6b:05:fd:74:7a:8b:53:e9:e3:c2:e2:02:ad:4f:
00:1b:9b:56:c8:ce:c2:1d:f2:3c:e1:2a:84:2c:79:2f:b8:11:
ed:a2:95:fe:c7:3e:21:89:ca:6c:3a:b6:be:74:77:b4:7d:51:
3a:3b:94:00:00:40:8b:46:40:a1:a8:ea:6d:5a:b1:d7:5d:63:
57:25:1f:b8:c7:68:0b:82:d3:87:25:d2:59:e7:4e:47:a1:98:
39:e1:d8:6e:60:d8:d7:48:c2:a1:f8:b7:44:39:1d:eb:ca:a0:
55:76:1f:0b:05:01:21:35:e6:ee:9d:33:ff:4d:f4:30:2c:68:
64:8f:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:05:20 2026 by rpki-client