Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/c3CqCD7-f6QKYGaqOHIlTjK7cZM.roa
File: c3CqCD7-f6QKYGaqOHIlTjK7cZM.roa (raw, json)
Hash identifier: B88CeUeqfJYwiDyOY4TAcojkcFLVU6r5fUqK2nAhTqE=
Subject key identifier: 73:70:AA:08:3E:FE:7F:A4:0A:60:66:AA:38:72:25:4E:32:BB:71:93
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019CB287C0EE84492E2E8C61C77864B09FEE
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/c3CqCD7-f6QKYGaqOHIlTjK7cZM.roa
Signing time: Tue 03 Mar 2026 07:09:27 +0000
ROA not before: Tue 03 Mar 2026 07:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 147.90.60.0/22 maxlen: 22
158.173.192.0/24 maxlen: 24
158.173.229.0/24 maxlen: 24
158.173.237.0/24 maxlen: 24
158.173.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:87:c0:ee:84:49:2e:2e:8c:61:c7:78:64:b0:9f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 3 07:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7370aa083efe7fa40a6066aa3872254e32bb7193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:86:f4:5d:22:8e:a0:5c:46:8d:5f:d4:87:
e1:8f:3d:1b:a6:67:ea:50:70:4a:54:07:b4:c7:75:
af:3e:97:c5:3e:6b:ea:2f:f5:cb:43:04:2e:94:78:
8d:e2:03:aa:a9:0b:a0:a2:6f:ad:bc:41:71:a3:82:
08:5c:f0:f6:01:06:9e:f0:ae:70:0a:d1:16:3f:9c:
34:2a:e6:82:da:f3:b9:5e:dc:60:b4:c8:90:4a:ca:
f3:c5:a1:69:18:3a:dc:b4:58:25:3c:a8:44:4d:c7:
4e:2a:dc:5d:b8:2a:5e:66:49:1d:f8:fd:2b:f1:23:
f4:fe:06:73:36:30:7c:7c:a7:72:2b:49:65:17:3e:
d3:15:75:23:c8:a7:52:b6:7d:00:24:b4:20:3a:e3:
ea:33:b3:ea:e1:7b:3a:4b:7c:0b:ac:88:b9:3e:03:
80:4d:af:fc:92:e8:9a:57:7d:9a:e2:f0:48:9f:27:
a6:1c:be:01:76:4a:b2:66:6f:5b:b3:e9:b9:ac:c8:
8e:a0:09:2a:05:41:15:43:f1:9a:81:19:14:06:45:
3e:db:79:9b:15:b1:51:ca:59:22:7f:64:1d:85:bb:
fb:30:43:39:de:53:8e:57:45:cf:84:39:92:51:05:
35:c2:72:9f:e0:ab:6f:22:48:d2:c1:72:0a:42:51:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:70:AA:08:3E:FE:7F:A4:0A:60:66:AA:38:72:25:4E:32:BB:71:93
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/c3CqCD7-f6QKYGaqOHIlTjK7cZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.60.0/22
158.173.192.0/24
158.173.229.0/24
158.173.237.0-158.173.238.255
Signature Algorithm: sha256WithRSAEncryption
e0:28:0e:9b:7f:d7:0f:be:b0:76:ee:87:49:25:bc:d5:c1:0b:
97:93:4a:ee:00:1c:29:fc:2a:38:b5:3f:7f:6b:d4:74:bd:8c:
94:72:3f:82:d3:0f:9b:70:a4:b2:ca:70:bd:83:a7:de:a1:48:
f3:82:00:42:01:b9:4f:5b:89:1d:bb:d2:13:79:ae:b4:2e:c8:
33:7c:ae:ec:09:4b:cb:c9:64:fb:d8:eb:53:a6:5d:b0:79:c8:
b1:cf:cf:45:dd:48:b4:2d:a3:77:98:a8:29:8d:b7:dc:e9:29:
7b:7c:5c:74:5a:f6:dc:26:34:a3:2a:5e:7c:05:c9:e7:c5:03:
2a:84:0c:ca:b8:76:7f:fe:81:48:20:35:b2:93:eb:32:f0:90:
35:07:cd:93:25:60:33:a8:12:87:3d:92:75:c7:d1:f3:f6:d8:
5a:a9:f1:66:fd:35:d1:c7:3d:6b:9d:23:b1:d3:14:7d:e9:2f:
a0:34:80:a5:c4:c3:b8:a4:0e:b8:6a:17:59:fa:0b:a0:4a:7f:
b5:e1:98:a6:50:6e:b7:a4:e0:d9:6a:7e:9c:d6:86:7d:f6:fd:
88:8c:d7:96:c0:e4:bb:f1:ba:99:6f:7b:13:8a:9a:5f:a1:98:
7d:37:68:85:80:40:a5:e0:18:eb:4c:03:1f:1a:39:3b:bf:47:
0b:4c:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:21:30 2026 by rpki-client