Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/cxNai4ZHdcmas-jqTbdyE_Fcqp4.roa
File: cxNai4ZHdcmas-jqTbdyE_Fcqp4.roa (raw, json)
Hash identifier: 2t/ZnYQqKepi+58eI/bY+xvNrxeo4Ps785dRJDqZ0kA=
Subject key identifier: 73:13:5A:8B:86:47:75:C9:9A:B3:E8:EA:4D:B7:72:13:F1:5C:AA:9E
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A1640E0B4BB9062AECFFEBA8991255907D
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/cxNai4ZHdcmas-jqTbdyE_Fcqp4.roa
Signing time: Thu 22 Oct 2026 14:40:04 +0000
ROA not before: Thu 22 Oct 2026 14:40:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152324
IP address blocks: 147.90.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:0e:0b:4b:b9:06:2a:ec:ff:eb:a8:99:12:55:90:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 22 14:40:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73135a8b864775c99ab3e8ea4db77213f15caa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:18:db:64:6c:10:a5:fe:ca:3b:40:19:6b:
33:76:49:1c:de:1f:a9:bc:92:b7:1d:67:46:99:11:
09:72:8c:e5:27:c8:c1:05:a6:cc:7a:34:fd:b0:28:
c8:90:49:58:2b:72:9a:4c:a4:17:18:27:35:16:64:
85:e1:1c:8b:13:96:8d:87:8c:0e:71:19:d4:66:93:
a9:b8:e6:24:f6:0d:8d:48:75:20:b0:4d:c1:d8:4c:
26:05:d0:29:be:4d:5e:54:8a:3d:f0:90:31:59:32:
25:81:b5:af:69:81:38:31:80:de:b8:80:8b:8f:72:
7d:1b:a2:ef:27:7c:7c:70:11:98:7c:12:8c:e9:de:
c4:3c:a5:26:4a:61:bb:10:18:d2:8b:e1:08:b9:a2:
90:32:bc:27:4d:32:cf:7a:0e:fd:1c:ac:ef:d7:37:
e1:1b:d1:63:7f:c6:29:11:63:33:49:dc:cd:60:e4:
47:83:15:c4:56:22:60:0a:de:40:af:1f:0a:f4:a9:
93:bd:72:99:8f:8e:e2:a4:62:8e:b1:cd:19:43:13:
7a:80:f3:52:65:a0:b3:69:75:a5:fb:29:66:10:35:
5f:83:51:cf:fe:7b:64:14:68:89:93:bf:b1:f5:4e:
f5:2b:7b:35:17:b1:0a:bd:ac:4b:8e:9e:dd:fc:fe:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:13:5A:8B:86:47:75:C9:9A:B3:E8:EA:4D:B7:72:13:F1:5C:AA:9E
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/cxNai4ZHdcmas-jqTbdyE_Fcqp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:67:21:09:12:5c:a4:61:23:eb:8f:fa:2f:24:b2:00:39:cb:
f7:3b:b7:04:70:da:09:b0:76:59:1a:c3:b8:e4:37:e4:cb:e1:
21:35:d5:fe:c1:d0:37:ac:35:20:83:e8:bd:4f:55:36:5b:62:
fc:ea:3a:1c:89:16:ff:44:2c:16:8c:89:0a:0f:48:88:37:90:
20:30:fd:51:16:70:76:e5:3a:0f:14:d9:1b:33:6e:da:91:aa:
02:26:e6:62:66:6d:04:c4:a9:1b:dc:21:98:8d:14:db:16:f8:
f7:6e:29:85:bd:ba:b8:75:28:19:c8:11:bd:4f:ca:72:2c:4c:
2f:06:19:72:3d:3c:3e:97:72:19:e8:0a:2c:ec:ce:9b:1d:b2:
f0:e2:51:ef:c7:05:97:43:cd:7a:d5:26:94:60:74:ea:66:53:
f4:11:7b:c8:98:fb:39:89:a2:9d:83:64:f4:e7:2d:68:ae:6c:
2d:37:66:ff:9b:ef:e9:6d:aa:01:cf:48:77:86:66:2e:b8:9e:
2b:00:03:f0:b5:bb:04:31:4c:a6:ae:df:86:16:5f:3f:6b:a9:
5e:34:08:50:ae:e0:b9:74:64:d1:3f:0d:d6:9b:1d:46:9e:4a:
43:7c:cc:fe:9d:c3:06:ba:6a:f5:2c:fc:8c:b6:54:45:a9:49:
b5:e1:c4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:18 2026 by rpki-client