Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/atMxp3ZnRcnWH3I56zONvXIjfs0.roa
File: atMxp3ZnRcnWH3I56zONvXIjfs0.roa (raw, json)
Hash identifier: 4nQCRfpf67lY0RP4yfhB2CjedSn/4pe9sx96+jDzuiw=
Subject key identifier: 6A:D3:31:A7:76:67:45:C9:D6:1F:72:39:EB:33:8D:BD:72:23:7E:CD
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0804C548F650DBB22F24EB7D25DB64169
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/atMxp3ZnRcnWH3I56zONvXIjfs0.roa
Signing time: Tue 08 Sep 2026 09:14:41 +0000
ROA not before: Tue 08 Sep 2026 09:14:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60262
IP address blocks: 147.90.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:4c:54:8f:65:0d:bb:22:f2:4e:b7:d2:5d:b6:41:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 8 09:14:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ad331a7766745c9d61f7239eb338dbd72237ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:74:af:b0:96:32:19:71:ae:15:01:e4:be:
f1:05:b8:bb:55:dd:d8:54:80:4c:a2:c2:18:e9:94:
99:14:b6:46:e8:ce:5f:8a:63:89:98:8e:c4:0c:7a:
9e:ba:8d:f4:9c:09:dc:03:f9:1b:d5:b8:c5:31:ba:
37:24:96:65:35:58:68:b9:41:09:4f:5c:9c:81:09:
fd:93:5f:13:7a:94:76:5a:b4:7f:3b:52:d0:b3:a5:
a0:f4:73:7c:a6:27:3f:1c:64:77:a5:30:7d:64:a5:
f7:76:17:f2:26:da:db:23:39:1f:c9:6d:cd:f7:43:
2d:8d:28:e6:80:7d:51:b7:8d:f2:f5:8e:25:91:bf:
a0:ed:f4:89:73:b8:1f:cd:d3:e9:82:84:16:06:65:
68:d6:e6:50:31:d6:e8:80:ca:3b:4c:18:48:0a:03:
50:a8:03:cc:b5:d9:0c:9a:1a:51:32:bb:3a:e7:7f:
ba:aa:e3:e6:0e:c3:44:06:98:f9:43:44:8b:34:52:
09:d6:41:ea:d6:c9:e5:6e:d9:00:c8:1a:18:16:09:
33:41:8b:c0:da:49:07:30:89:27:35:67:08:01:97:
f2:6d:b0:53:09:6a:94:e7:2a:f1:93:8a:2e:4b:49:
3d:e9:fa:21:95:4c:b2:41:e5:59:c3:9a:e6:5f:9d:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D3:31:A7:76:67:45:C9:D6:1F:72:39:EB:33:8D:BD:72:23:7E:CD
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/atMxp3ZnRcnWH3I56zONvXIjfs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.184.0/24
Signature Algorithm: sha256WithRSAEncryption
47:42:b7:81:d1:89:f4:84:73:46:d2:ac:2b:56:c8:18:6d:0f:
38:09:94:eb:2e:ce:41:16:45:f5:95:5d:85:56:f1:b6:3a:ea:
20:cd:34:b3:88:c4:7b:cd:28:61:9f:93:17:3b:e0:19:85:4e:
0e:59:03:d9:fc:9b:d3:8c:0e:62:de:db:12:4d:6d:5e:aa:57:
59:9f:2e:3a:35:ea:42:ad:42:ca:0e:68:7b:1e:03:03:5c:b0:
62:af:9c:07:e9:19:44:12:c3:f3:55:1f:fd:c6:9b:cd:84:46:
ed:a8:03:1c:29:e9:74:ea:14:30:b7:e0:d4:30:86:b8:9f:dc:
b4:57:97:2a:58:1f:ab:8e:be:ae:2c:8a:fd:69:d6:bf:70:11:
7b:10:d5:3b:79:dd:0c:53:eb:84:2b:be:2b:e7:46:b6:79:60:
ec:da:67:39:24:e7:3e:e2:f4:8c:15:f0:b5:65:89:3f:56:25:
fa:ca:d3:ee:34:d5:73:aa:5c:5d:6f:dd:52:46:72:f4:74:ae:
20:3c:3f:34:1a:f6:ed:61:74:49:62:e2:5e:88:80:0d:bf:29:
e9:20:bf:24:a2:dc:ae:10:04:3d:77:55:1b:77:b8:77:b4:f5:
23:f4:c8:6c:bc:a9:13:6f:4e:aa:c2:bd:1f:4f:fa:54:7e:68:
ca:36:08:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:14:10 2026 by rpki-client