Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/gSYDnQy8OZnnrFMOB7FoA-EZu40.roa
File: gSYDnQy8OZnnrFMOB7FoA-EZu40.roa (raw, json)
Hash identifier: apLHxcuAB/FXus/sjDvUUdeMqWMx/MwesQbO+16vrmg=
Subject key identifier: 81:26:03:9D:0C:BC:39:99:E7:AC:53:0E:07:B1:68:03:E1:19:BB:8D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A07AD22BB4CDEE797CC454367A9FC39E65
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/gSYDnQy8OZnnrFMOB7FoA-EZu40.roa
Signing time: Mon 07 Sep 2026 07:43:09 +0000
ROA not before: Mon 07 Sep 2026 07:43:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 147.90.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:d2:2b:b4:cd:ee:79:7c:c4:54:36:7a:9f:c3:9e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 7 07:43:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8126039d0cbc3999e7ac530e07b16803e119bb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:f8:d1:da:eb:a0:3e:3b:30:fe:83:88:6e:
ad:9e:75:22:b3:d8:1e:bd:84:21:cd:7c:49:32:94:
64:a7:d1:95:be:f5:73:ea:9c:d4:2c:49:b7:17:19:
97:3f:c3:a3:fb:86:02:a9:00:b6:3b:c7:0f:e3:3f:
2b:2c:73:5f:94:13:90:81:eb:0d:7f:15:ac:83:6f:
61:9f:85:de:d2:8a:59:87:43:f1:02:6e:9f:85:fa:
31:80:70:9c:2c:92:e4:6b:1b:ea:95:74:8f:1a:96:
4f:f4:1f:7c:3b:ba:88:7c:f9:13:b2:b4:ce:ae:54:
bd:d3:ff:05:95:a8:2f:4d:d3:48:08:ae:e0:4c:c9:
6b:36:ea:36:56:f0:f3:16:d6:c9:f8:06:4e:a3:1e:
58:cb:91:c8:00:d1:16:7a:cb:86:26:ff:dc:65:75:
96:bf:6d:72:06:66:50:b9:4b:e1:35:d4:45:97:85:
db:d2:83:7a:41:95:fb:57:01:e6:80:61:fa:82:b8:
32:8b:c4:c2:c4:c8:b6:fa:30:61:aa:b2:93:80:bd:
13:41:24:15:14:3e:fe:58:bd:0b:62:99:b4:27:9a:
2c:3d:52:08:6b:28:c1:0b:db:ab:93:7d:29:c8:85:
55:df:24:df:5b:71:02:1c:86:c6:9b:0e:f6:a7:8a:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:26:03:9D:0C:BC:39:99:E7:AC:53:0E:07:B1:68:03:E1:19:BB:8D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/gSYDnQy8OZnnrFMOB7FoA-EZu40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.73.0/24
Signature Algorithm: sha256WithRSAEncryption
03:46:8e:17:b9:32:d2:bd:d6:0f:1a:50:4e:71:27:c5:4d:e9:
f2:d2:45:37:61:4d:44:f1:c3:c2:e9:4c:50:91:7c:e5:63:d3:
4d:68:cf:4f:ad:c0:0d:06:c9:ff:69:f7:07:68:be:76:e2:f9:
be:31:1b:96:55:e1:b3:38:da:cd:e2:85:25:af:f1:58:bf:23:
54:59:0a:b1:f6:44:e9:ef:36:df:49:95:ac:50:cc:31:7d:34:
e3:31:79:48:36:49:e9:d1:f0:ab:8f:2b:e9:ed:93:e5:79:6e:
4e:bf:5c:fc:2e:c2:4c:fd:94:c3:55:30:89:e6:1e:ce:59:f8:
b0:12:6c:53:62:ec:1c:33:49:ba:06:fa:29:8c:88:ed:74:3f:
a5:9d:84:6f:cf:0b:da:cd:99:14:c2:f2:5e:d4:d2:82:cc:a6:
93:91:b8:a0:98:ac:26:b6:64:84:83:a4:88:2b:ce:db:78:12:
56:61:6d:2b:b7:ca:e6:2f:09:9b:7b:17:b6:1c:13:aa:2a:a5:
f7:1b:b9:18:f0:c9:91:74:8b:1c:d3:74:16:97:50:e3:e7:8e:
1c:f2:90:73:d4:b0:45:81:ad:88:65:e9:a6:00:40:b5:e3:ee:
3b:35:e7:fc:af:31:4f:14:c0:2f:d4:99:b4:2b:c8:8c:0c:69:
9a:2a:e3:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB60iu0ze55fMRUNnqfw55lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwOTA3MDc0MzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTI2MDM5ZDBjYmMzOTk5ZTdhYzUzMGUwN2IxNjgwM2UxMTliYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmn40drroD47MP6DiG6tnnUis9ge
vYQhzXxJMpRkp9GVvvVz6pzULEm3FxmXP8Oj+4YCqQC2O8cP4z8rLHNflBOQgesN
fxWsg29hn4Xe0opZh0PxAm6fhfoxgHCcLJLkaxvqlXSPGpZP9B98O7qIfPkTsrTO
rlS90/8FlagvTdNICK7gTMlrNuo2VvDzFtbJ+AZOox5Yy5HIANEWesuGJv/cZXWW
v21yBmZQuUvhNdRFl4Xb0oN6QZX7VwHmgGH6grgyi8TCxMi2+jBhqrKTgL0TQSQV
FD7+WL0LYpm0J5osPVIIayjBC9urk30pyIVV3yTfW3ECHIbGmw72p4p/4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIEmA50MvDmZ56xTDgexaAPhGbuNMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvZ1NZRG5ReThPWm5uckZNT0I3Rm9BLUVadTQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk1pJMA0G
CSqGSIb3DQEBCwUAA4IBAQADRo4XuTLSvdYPGlBOcSfFTeny0kU3YU1E8cPC6UxQ
kXzlY9NNaM9PrcANBsn/afcHaL524vm+MRuWVeGzONrN4oUlr/FYvyNUWQqx9kTp
7zbfSZWsUMwxfTTjMXlINknp0fCrjyvp7ZPleW5Ov1z8LsJM/ZTDVTCJ5h7OWfiw
EmxTYuwcM0m6BvopjIjtdD+lnYRvzwvazZkUwvJe1NKCzKaTkbigmKwmtmSEg6SI
K87beBJWYW0rt8rmLwmbexe2HBOqKqX3G7kY8MmRdIsc03QWl1Dj544c8pBz1LBF
ga2IZemmAEC14+47Nef8rzFPFMAv1Jm0K8iMDGmaKuPr
-----END CERTIFICATE-----
Generated at Tue Sep 8 18:14:06 2026 by rpki-client