Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/aYdCxbmh5SygrjABF-ooRTiu5Hs.roa
File: aYdCxbmh5SygrjABF-ooRTiu5Hs.roa (raw, json)
Hash identifier: ErhChGTr2otrFzN9Wx7K5XazCc0myfoqBG6ZNpk6A48=
Subject key identifier: 69:87:42:C5:B9:A1:E5:2C:A0:AE:30:01:17:EA:28:45:38:AE:E4:7B
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DB8E854A4C7A7FC37A2CB863940B66241
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/aYdCxbmh5SygrjABF-ooRTiu5Hs.roa
Signing time: Thu 23 Apr 2026 05:55:26 +0000
ROA not before: Thu 23 Apr 2026 05:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208504
IP address blocks: 147.90.77.0/24 maxlen: 24
158.173.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 12:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b8:e8:54:a4:c7:a7:fc:37:a2:cb:86:39:40:b6:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 23 05:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=698742c5b9a1e52ca0ae300117ea284538aee47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:62:99:5e:80:30:c0:46:5c:4a:b7:b5:89:
13:af:21:22:86:df:52:95:92:0f:bd:03:b7:c8:8f:
dd:60:ce:7c:b8:2a:78:43:ba:78:f5:6c:b3:b9:56:
01:b4:e0:96:8a:b0:3f:1f:32:60:cb:65:0f:69:c0:
01:32:ea:42:46:51:ab:38:7f:cf:ac:f8:31:c5:0e:
33:e0:15:20:93:8d:7a:24:1b:ae:27:6e:96:cb:fe:
23:92:ae:fd:cf:dc:f6:6f:18:37:08:49:22:bf:70:
5a:05:c4:28:77:9f:23:c5:04:d0:5f:b4:d0:6e:54:
87:dc:ce:42:24:00:53:7c:43:49:ff:17:96:e9:d5:
16:3c:c7:67:96:02:ea:f8:b6:c0:ac:0f:42:67:46:
b7:de:39:79:25:19:55:1d:75:9f:8e:02:3d:92:3f:
fe:18:e0:32:4c:7b:65:31:3d:f5:5b:79:ee:64:77:
8e:89:0f:6e:cb:10:0e:dc:44:d1:99:5f:54:4f:55:
7f:68:a0:b9:4f:13:87:63:09:81:29:81:33:e8:a3:
5a:b2:f1:7e:45:e2:82:dc:7f:ba:b3:e8:c3:a9:27:
30:fa:59:7a:02:9c:ab:64:22:b7:18:c0:2d:96:30:
5f:40:4c:6e:42:ec:b7:a5:38:14:31:d6:5d:4e:f2:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:42:C5:B9:A1:E5:2C:A0:AE:30:01:17:EA:28:45:38:AE:E4:7B
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/aYdCxbmh5SygrjABF-ooRTiu5Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.77.0/24
158.173.211.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2e:16:b4:04:b3:3c:b6:a3:18:74:c6:23:c3:b3:b7:58:21:
01:3e:6e:c8:8f:b2:16:14:02:81:3c:20:01:b7:02:32:41:a0:
9f:f8:67:e4:da:d3:2b:25:c2:a1:1e:7d:21:f6:ee:6e:cc:55:
8b:2f:5d:a8:ed:1d:fe:19:b3:86:77:42:9e:19:36:fe:2b:95:
b4:3e:97:72:59:ad:bd:45:b7:9c:90:18:c0:b4:3f:02:e6:96:
14:38:ed:4d:a4:71:6e:99:a5:a1:ff:46:9d:09:1e:b0:e1:ff:
c6:9a:51:ae:1c:27:5f:57:2a:d3:de:ca:3d:5a:02:19:15:3e:
75:b3:34:a3:7f:dc:1d:78:bd:88:94:59:b8:98:2a:da:6f:3b:
73:72:5e:aa:3d:5f:fa:b5:bc:c2:09:b8:b2:98:43:0d:56:22:
37:5a:27:ff:e6:dd:c9:c4:c8:72:e2:cf:38:ff:e2:5b:99:43:
43:04:ff:be:72:b6:b7:91:65:5f:28:02:17:78:ce:43:01:45:
fd:4e:9a:ed:d5:76:62:a8:77:16:47:45:8d:10:3e:b6:4b:7c:
a3:ca:d2:9a:ca:ce:4f:e2:d4:f4:02:4f:33:fe:98:12:23:be:
07:8d:61:ad:1b:9c:c8:de:92:f4:9f:5e:9c:72:37:a7:7d:72:
a7:5a:12:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ246FSkx6f8N6LLhjlAtmJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwNDIzMDU1NTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTg3NDJjNWI5YTFlNTJjYTBhZTMwMDExN2VhMjg0NTM4YWVlNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllZimV6AMMBGXEq3tYkTryEiht9S
lZIPvQO3yI/dYM58uCp4Q7p49WyzuVYBtOCWirA/HzJgy2UPacABMupCRlGrOH/P
rPgxxQ4z4BUgk416JBuuJ26Wy/4jkq79z9z2bxg3CEkiv3BaBcQod58jxQTQX7TQ
blSH3M5CJABTfENJ/xeW6dUWPMdnlgLq+LbArA9CZ0a33jl5JRlVHXWfjgI9kj/+
GOAyTHtlMT31W3nuZHeOiQ9uyxAO3ETRmV9UT1V/aKC5TxOHYwmBKYEz6KNasvF+
ReKC3H+6s+jDqScw+ll6ApyrZCK3GMAtljBfQExuQuy3pTgUMdZdTvI5RwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGmHQsW5oeUsoK4wARfqKEU4ruR7MB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvYVlkQ3hibWg1U3lncmpBQkYtb29SVGl1NUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk1pNAwQA
nq3TMA0GCSqGSIb3DQEBCwUAA4IBAQCOLha0BLM8tqMYdMYjw7O3WCEBPm7Ij7IW
FAKBPCABtwIyQaCf+Gfk2tMrJcKhHn0h9u5uzFWLL12o7R3+GbOGd0KeGTb+K5W0
PpdyWa29RbeckBjAtD8C5pYUOO1NpHFumaWh/0adCR6w4f/GmlGuHCdfVyrT3so9
WgIZFT51szSjf9wdeL2IlFm4mCrabztzcl6qPV/6tbzCCbiymEMNViI3Wif/5t3J
xMhy4s84/+JbmUNDBP++cra3kWVfKAIXeM5DAUX9Tprt1XZiqHcWR0WNED62S3yj
ytKays5P4tT0Ak8z/pgSI74HjWGtG5zI3pL0n16ccjenfXKnWhKk
-----END CERTIFICATE-----
Generated at Fri Apr 24 20:29:57 2026 by rpki-client