Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XfOtQ6G0vaUkQ1yPZYACkpN6Kk0.roa
File: XfOtQ6G0vaUkQ1yPZYACkpN6Kk0.roa (raw, json)
Hash identifier: 7I05rLGFLx0WRQYRpE4wuRhZ52KTtVYmPEorilc+xSM=
Subject key identifier: 5D:F3:AD:43:A1:B4:BD:A5:24:43:5C:8F:65:80:02:92:93:7A:2A:4D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E831403239CBF78F16EA5B604DC364A0C
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XfOtQ6G0vaUkQ1yPZYACkpN6Kk0.roa
Signing time: Mon 01 Jun 2026 12:06:27 +0000
ROA not before: Mon 01 Jun 2026 12:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 147.90.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:14:03:23:9c:bf:78:f1:6e:a5:b6:04:dc:36:4a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 1 12:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5df3ad43a1b4bda524435c8f65800292937a2a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:e9:53:ec:ed:ff:36:91:dd:38:77:ea:f4:
37:65:c3:d4:5b:09:6d:eb:d0:3e:e7:72:e1:0f:c8:
2c:8e:a9:44:21:dc:ab:dc:d3:45:48:92:f9:48:0e:
c1:41:b2:df:db:bc:8c:6d:af:62:57:4f:bf:32:de:
7c:fe:89:ac:c4:20:b7:c1:70:b4:f2:ef:8a:62:2b:
6d:49:bb:0d:5a:fc:c0:31:ba:52:ed:f2:48:0c:f5:
b9:91:f2:ac:af:7a:c4:9e:f3:20:e2:21:56:4b:d8:
6b:65:0d:7b:b0:4f:90:5d:f9:ee:c5:d5:c8:83:c9:
21:f4:31:e7:93:1a:d5:ac:74:d5:ef:c2:da:3d:9e:
a2:b5:57:99:d6:12:3f:ec:9d:76:75:ac:3f:df:64:
14:7d:5f:dd:14:c6:27:5d:2e:8e:a4:6c:ff:f5:1e:
9d:98:e5:32:ba:47:a3:89:44:92:f0:cf:70:be:f9:
3f:7e:a1:22:23:8a:2a:d4:da:64:3d:ab:37:2c:90:
f3:da:76:a7:2d:d9:6d:3c:ba:e6:60:dc:7f:83:b4:
67:fc:49:94:a3:74:70:69:4c:25:6d:4b:bc:4d:60:
50:cf:5a:bf:0d:b6:bc:52:ab:a9:0e:76:14:be:5e:
a1:f7:24:e1:c3:17:e5:4a:69:25:cd:50:3b:db:60:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F3:AD:43:A1:B4:BD:A5:24:43:5C:8F:65:80:02:92:93:7A:2A:4D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XfOtQ6G0vaUkQ1yPZYACkpN6Kk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.207.0/24
Signature Algorithm: sha256WithRSAEncryption
59:42:df:75:6b:a1:1b:d7:81:aa:3f:2b:58:10:df:25:5a:51:
b7:24:6c:ad:86:69:37:ba:fc:bc:b5:41:ea:15:20:4a:6f:7d:
6d:a6:b6:95:ec:90:87:bc:86:b8:9d:16:9d:08:b5:3d:b3:6e:
de:a8:1f:5e:b7:96:24:1f:62:d6:cb:65:57:45:9a:79:d7:12:
7d:6d:11:28:95:f6:39:fd:5b:42:76:37:3e:a4:20:f1:10:72:
dc:75:de:17:1f:f6:3f:6e:fb:cd:7b:08:de:d7:06:f4:b5:3d:
b6:06:4f:bd:89:ca:7e:96:12:e9:7d:ca:b3:17:80:a9:45:2c:
85:21:04:b0:91:4b:44:7b:bd:46:5d:5a:15:cb:94:d7:71:60:
ef:85:60:d1:e9:dc:45:13:c0:a0:2b:1b:14:e2:9f:12:9c:67:
bc:2b:97:51:ef:4d:6d:11:fc:8e:ca:f7:95:d0:c0:c2:c0:6a:
18:5a:aa:a0:d9:4f:77:56:0d:ef:04:67:f1:aa:63:6a:3c:5d:
b0:10:97:9c:ed:28:b4:3a:21:af:a7:00:a9:2d:cd:00:89:31:
6e:79:fb:7d:19:d2:97:4b:80:f9:28:7d:29:34:f1:e2:8c:46:
e5:07:40:ad:d6:54:5c:e0:1c:41:3d:e4:8a:8e:a9:10:d3:3c:
3d:5d:05:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 00:46:39 2026 by rpki-client