Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ciwJPRqR3ToPOFMTmZMDDAoy1UM.roa
File: ciwJPRqR3ToPOFMTmZMDDAoy1UM.roa (raw, json)
Hash identifier: vgt/5b3r4b+uzBZx4X5Lra7eaGSqfXyeesCU1yBWCKs=
Subject key identifier: 72:2C:09:3D:1A:91:DD:3A:0F:38:53:13:99:93:03:0C:0A:32:D5:43
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019CCC737EB21EE230A5BB24EF698517AC2D
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ciwJPRqR3ToPOFMTmZMDDAoy1UM.roa
Signing time: Sun 08 Mar 2026 07:57:27 +0000
ROA not before: Sun 08 Mar 2026 07:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 147.90.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 06:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cc:73:7e:b2:1e:e2:30:a5:bb:24:ef:69:85:17:ac:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 8 07:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=722c093d1a91dd3a0f3853139993030c0a32d543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:ef:dd:e7:ac:a6:c7:ff:3c:70:12:d2:71:
4f:fe:c4:5c:97:b3:ff:4d:99:71:23:21:97:fd:83:
1d:06:2d:75:c4:b5:67:a7:bb:f7:e4:d9:4b:8d:d2:
d2:08:19:7b:98:dd:e8:72:de:44:6e:7c:e9:14:b1:
73:67:bb:47:dc:0d:4e:48:34:84:8f:33:d1:c9:71:
c6:22:f6:1c:aa:d0:17:93:1b:fd:f6:f0:92:65:ee:
1d:38:8e:44:5c:0d:46:91:12:97:6c:47:92:38:2c:
3b:f9:5d:5b:38:bd:01:8e:7f:6b:67:5d:6d:9d:08:
23:03:93:ce:1d:96:38:ce:ab:f1:fd:80:3e:41:3f:
a9:55:6d:b9:a9:d1:01:3d:67:9b:02:0b:3f:5d:08:
c7:0c:14:ee:3d:33:f0:5d:b1:8e:51:24:22:ab:54:
40:c0:36:59:70:3c:d9:e7:67:3f:e1:88:0a:af:ae:
b4:16:a0:57:ec:ad:d7:77:a8:c0:74:6a:75:09:3d:
ed:a1:1c:6e:be:be:e4:0e:cf:f4:ea:5a:65:dd:dc:
b0:f6:fd:eb:0c:97:28:e0:ac:2b:94:ea:29:99:08:
cf:da:d7:7d:c4:10:97:57:2f:d5:c8:ed:54:26:43:
48:fa:a1:48:6a:09:41:51:3d:f9:79:fe:8c:c2:32:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2C:09:3D:1A:91:DD:3A:0F:38:53:13:99:93:03:0C:0A:32:D5:43
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ciwJPRqR3ToPOFMTmZMDDAoy1UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.216.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a8:c2:13:1f:5d:6d:c6:41:3a:b6:dd:10:ad:31:df:23:e6:
89:c5:8b:0a:e5:d7:af:fc:bb:73:2f:a3:2d:ca:c4:ed:f1:0d:
cf:bb:ae:db:a9:b8:d8:7c:75:7e:c5:9a:dd:f6:4d:09:99:c0:
fd:b3:bc:2b:bb:a6:21:19:e8:be:85:d0:9d:a7:df:1f:ac:f8:
02:9d:2e:21:a2:fe:e5:57:51:d7:5d:55:55:29:79:8d:76:92:
c8:86:30:b5:23:c5:45:2c:b3:26:bf:10:11:53:28:76:5d:0a:
b2:f1:51:03:bf:42:08:92:a4:15:5e:34:98:82:42:0e:62:9e:
57:b6:6f:72:e8:64:1c:70:fa:07:a3:30:e3:e6:7f:61:ae:7c:
f4:fd:ab:39:02:d6:ef:8f:ff:8b:6f:33:67:e3:0f:ee:96:19:
27:d4:1f:69:d6:37:34:02:3c:86:49:0a:96:6c:bc:ce:64:06:
13:b5:4a:78:8f:29:87:94:49:b7:32:35:e5:a8:78:89:b3:0f:
39:d4:aa:b7:2a:16:00:ef:49:10:c9:5e:ee:71:21:8d:75:de:
65:80:67:4d:2e:92:07:bb:42:e3:5d:0c:f1:67:ab:d7:c5:1e:
1e:62:e4:2e:38:75:5c:ca:24:59:96:e3:a4:43:1a:5e:db:9b:
72:72:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 09:17:13 2026 by rpki-client