Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dVcpIFgl_jQGAqnqJp3QefRc_Fo.roa
File: dVcpIFgl_jQGAqnqJp3QefRc_Fo.roa (raw, json)
Hash identifier: LQ9EzpC1q/eyTDFoZv6Z28DVwDY5HXqTiwYAKDQh9D8=
Subject key identifier: 75:57:29:20:58:25:FE:34:06:02:A9:EA:26:9D:D0:79:F4:5C:FC:5A
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E229AE65F982FB42B731F44A6EE15837C
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dVcpIFgl_jQGAqnqJp3QefRc_Fo.roa
Signing time: Wed 13 May 2026 18:30:37 +0000
ROA not before: Wed 13 May 2026 18:30:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207550
IP address blocks: 147.90.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:9a:e6:5f:98:2f:b4:2b:73:1f:44:a6:ee:15:83:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 13 18:30:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=755729205825fe340602a9ea269dd079f45cfc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:f2:5d:0f:25:80:90:78:43:8b:df:c3:34:
dd:a0:94:c7:45:07:68:53:b3:e9:c3:5a:e2:1e:0e:
64:5e:f2:19:7e:36:54:15:90:c6:39:1a:15:9b:76:
e2:d2:c4:54:5b:a1:f7:82:14:5f:bf:f9:c0:c4:69:
0c:ff:ad:ac:20:16:3d:3b:36:44:26:6f:09:af:a7:
8e:0c:11:80:bf:1d:23:29:54:70:d8:61:78:79:90:
08:a7:4d:27:44:f4:51:5c:37:1f:55:aa:c5:6a:54:
bc:0d:73:07:70:70:1f:a0:f0:0e:b4:bf:5f:05:4b:
94:69:3b:21:53:ae:d5:b0:ee:d9:d6:32:70:34:62:
b4:77:51:28:f4:36:a9:96:c7:6a:12:2d:37:c6:7c:
60:71:bd:20:2a:33:d3:45:11:bd:f9:f0:d2:6a:3a:
26:6d:35:50:c4:3d:09:6e:8f:4d:36:ef:a8:06:ad:
62:13:5e:2e:7c:d7:86:44:60:ff:87:da:ba:4d:8d:
89:78:35:b8:74:4f:25:e1:08:b7:66:92:0b:5e:74:
44:59:cb:e8:d5:8c:18:d0:40:1b:d3:26:c2:ac:3f:
6d:89:1e:7e:81:4d:ca:75:90:a0:ec:84:1d:b1:7e:
47:ce:1a:b4:e6:54:31:d5:00:c9:3d:d8:8e:62:c9:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:57:29:20:58:25:FE:34:06:02:A9:EA:26:9D:D0:79:F4:5C:FC:5A
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dVcpIFgl_jQGAqnqJp3QefRc_Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.233.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:b0:89:e8:d3:ea:6b:27:72:46:0f:fe:36:0d:f5:e1:59:89:
76:c7:c6:55:25:b3:4e:08:a4:b0:6e:b3:3b:63:3c:88:c5:d4:
a6:e4:e0:3b:a3:2e:e9:94:1d:fc:86:6b:09:1e:e8:f0:a0:a6:
5c:c5:2a:69:f3:49:14:5e:85:2c:e4:85:a3:75:89:6c:fb:9f:
8e:05:e9:62:e0:2f:b0:cb:5d:b0:27:02:93:c1:21:d5:9c:8f:
25:f9:fe:f7:53:08:60:5d:89:47:31:22:05:79:25:32:9a:60:
5c:4c:b7:65:fe:8b:03:17:9f:34:70:97:b0:90:53:a9:43:b4:
a2:0e:82:7b:2d:50:93:db:d9:6b:60:8d:62:2c:da:be:2f:62:
2f:ef:22:33:e8:58:ce:03:69:7b:e3:bc:cc:07:1a:8f:79:06:
ef:c9:ba:d9:59:a6:d3:e4:ab:49:59:8a:96:3a:b7:43:a8:5f:
81:8f:17:6a:73:c0:ee:d2:c1:fc:5d:3a:82:35:cb:fa:5e:2d:
dc:52:70:a3:43:3c:c6:bf:4b:f2:fb:40:b9:f6:67:9a:9f:c4:
78:b7:e0:9b:59:ed:1a:ac:ac:81:05:8a:ae:0e:8a:22:5a:d8:
b1:fa:a1:e3:27:80:f3:5d:3d:4c:16:3a:40:1a:0c:e7:b2:f3:
9e:ce:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:22 2026 by rpki-client