Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/eEtcOkKzUSvHn8E6NVZL7N9aY1E.roa
File: eEtcOkKzUSvHn8E6NVZL7N9aY1E.roa (raw, json)
Hash identifier: npTYrAoymlNA8ak6JR/ODEmqfH8O+8bBLCEqSs+ohLs=
Subject key identifier: 78:4B:5C:3A:42:B3:51:2B:C7:9F:C1:3A:35:56:4B:EC:DF:5A:63:51
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E7A27C63097C103DB26CB93B5931981B3
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/eEtcOkKzUSvHn8E6NVZL7N9aY1E.roa
Signing time: Sat 30 May 2026 18:31:27 +0000
ROA not before: Sat 30 May 2026 18:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200105
IP address blocks: 147.90.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7a:27:c6:30:97:c1:03:db:26:cb:93:b5:93:19:81:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 30 18:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=784b5c3a42b3512bc79fc13a35564becdf5a6351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:52:d8:1b:eb:4b:d0:10:40:9e:f8:57:7e:
7b:c6:dd:15:c7:78:0e:6c:b9:10:c7:fd:41:74:41:
86:10:e8:41:f5:fc:6b:e0:7d:e6:22:71:b3:fe:74:
cd:2f:65:6a:38:e8:d9:2d:aa:10:74:0c:0b:ea:19:
6a:2e:f5:55:d8:32:be:08:28:09:b3:db:39:2b:ad:
9c:65:78:af:cc:37:30:e6:3a:bd:72:3c:85:a6:73:
f4:12:56:71:bd:af:dd:b9:d1:74:92:63:50:2b:5f:
cf:2e:c4:21:c6:b4:c6:7b:52:bd:c4:30:0b:37:5a:
6a:35:53:cd:b2:46:30:fc:eb:92:62:0e:ed:1c:e6:
a5:c5:70:4d:9c:06:bb:07:2c:e9:af:dc:9f:26:2c:
ed:38:0f:de:53:92:c5:6f:57:d3:36:f6:d9:01:56:
61:7a:a0:e2:90:65:ad:a7:82:51:d3:05:82:e4:cf:
48:6d:3a:bd:8f:69:a8:4f:dc:6f:69:84:22:53:7c:
93:d2:e5:3b:7f:5b:3a:97:15:0e:b9:45:51:e4:33:
c1:4d:59:a3:88:97:e0:d0:24:05:a7:ea:fb:85:2d:
1c:33:2e:f5:8c:ac:ab:a1:36:09:11:52:1a:68:0d:
1d:8e:73:7b:a4:dd:a1:fc:40:9d:33:ca:06:20:64:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:5C:3A:42:B3:51:2B:C7:9F:C1:3A:35:56:4B:EC:DF:5A:63:51
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/eEtcOkKzUSvHn8E6NVZL7N9aY1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.54.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:2e:6d:88:a7:ed:5f:5c:bd:b0:5d:6f:21:b3:88:72:d0:25:
ff:22:47:ed:1a:0c:c4:d3:4d:9d:33:28:64:b7:32:f1:ba:f0:
ad:b8:ce:dc:22:01:3a:0c:1e:8f:95:0b:ea:f0:e7:dc:cc:f6:
3f:ce:35:4c:6d:8f:0f:e8:b4:3a:f3:a4:94:6a:8f:cd:2d:5e:
30:9e:65:1d:62:61:e8:95:6a:89:2f:44:59:d1:8c:ba:4c:16:
1b:02:f7:14:74:94:b9:f2:25:d6:79:b3:70:ce:2a:d8:df:08:
26:fc:11:49:47:09:94:4f:ec:e8:b1:aa:4b:a3:d8:e4:81:df:
95:2f:9e:32:64:5c:9f:27:0c:c0:31:b0:52:01:e1:c2:be:ac:
0f:af:05:70:72:0d:53:9b:56:1e:e7:a6:dd:91:f5:1a:36:ed:
d5:78:de:2e:58:d1:db:cd:ca:f1:ce:e7:c2:5f:83:d8:27:ca:
cb:ef:15:9b:e4:36:d2:af:7b:98:f4:dc:a6:e7:20:bd:d5:36:
08:0d:77:3c:4f:85:ed:c8:1f:f7:12:15:ca:5f:ae:b1:0a:61:
7a:c5:d5:00:69:28:1b:fc:96:a2:d5:16:d8:2e:2d:c7:e1:39:
37:7d:90:fd:18:3c:41:66:a5:20:21:02:8b:57:2b:87:f2:f9:
cf:cc:b0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 00:46:27 2026 by rpki-client