Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/jn6bbCA8soLBZkggLpugg-bOaPs.roa
File: jn6bbCA8soLBZkggLpugg-bOaPs.roa (raw, json)
Hash identifier: oer3wFju7a7MKTfKTEGAdOgW9bMPtia2evPKVeJCai0=
Subject key identifier: 8E:7E:9B:6C:20:3C:B2:82:C1:66:48:20:2E:9B:A0:83:E6:CE:68:FB
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A00FED58FEBAC9E21A3826F0653F604423
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/jn6bbCA8soLBZkggLpugg-bOaPs.roa
Signing time: Mon 17 Aug 2026 13:33:28 +0000
ROA not before: Mon 17 Aug 2026 13:33:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204790
IP address blocks: 147.90.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:ed:58:fe:ba:c9:e2:1a:38:26:f0:65:3f:60:44:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 17 13:33:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e7e9b6c203cb282c16648202e9ba083e6ce68fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:b8:ce:ee:f8:6e:3c:dc:fe:a7:c9:42:df:
2a:82:e7:69:46:74:a7:3c:38:e9:35:bc:71:c1:1c:
99:11:66:40:cc:69:94:98:97:0a:36:65:20:68:0a:
94:10:87:4e:15:f8:79:6d:f0:e7:97:3a:b6:43:37:
7b:dc:d8:a2:b7:4c:e6:ad:4b:a6:1a:6a:9e:be:f5:
5e:b8:ac:cc:e6:16:6f:89:b1:3b:1b:c0:a1:81:af:
66:97:ab:12:4c:e3:40:f6:af:d4:8b:e1:b4:ba:bf:
46:38:12:ef:25:73:0f:10:ba:f2:21:cb:fc:ce:ea:
de:39:c4:e9:00:1b:54:e7:4c:5f:3f:89:5b:3d:ca:
32:e3:e9:e6:27:b2:70:cc:f8:f8:fc:03:09:bd:56:
44:c4:c2:14:20:8c:2d:6e:60:0e:c2:4c:da:9f:1f:
32:91:b3:2d:e3:29:e4:fc:28:98:ce:6b:1f:e4:14:
a9:9f:4d:41:db:84:4c:c6:b9:02:53:96:2a:fe:33:
e4:52:9f:63:55:ed:26:25:7d:61:3f:59:4e:e7:f2:
71:cb:d3:7e:cf:99:53:c2:75:bf:86:a3:d3:8a:28:
5e:86:79:62:88:30:6d:1f:c1:18:40:30:1f:8d:bb:
db:56:ca:ed:93:34:6c:3c:7a:86:af:1a:62:5e:80:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7E:9B:6C:20:3C:B2:82:C1:66:48:20:2E:9B:A0:83:E6:CE:68:FB
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/jn6bbCA8soLBZkggLpugg-bOaPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.186.0/24
Signature Algorithm: sha256WithRSAEncryption
18:72:1d:1e:db:b0:64:64:ce:1b:0d:b3:28:d8:a1:6b:07:59:
ee:3f:0f:32:00:4c:71:fa:f0:cb:ee:d6:29:81:cf:74:85:59:
01:5e:af:53:cb:b1:09:3c:4e:0f:70:07:e3:1b:63:bd:d7:a9:
29:38:30:d9:86:f1:cc:be:4a:2a:b0:d0:0b:7d:82:57:34:9c:
c9:ea:8c:a8:f8:ac:f0:84:4c:0b:81:17:e4:d3:60:7c:6e:fc:
e0:88:97:f2:af:3f:0d:f4:98:ec:0a:05:ff:ea:da:bd:c7:97:
c0:93:06:84:0c:2e:13:b5:ab:d4:ae:40:de:1c:c1:0c:9f:5a:
17:09:3f:08:80:d4:5d:ba:cf:e3:a1:ba:2c:93:e6:05:36:0a:
33:5d:80:c3:15:fa:41:57:28:25:01:37:6e:f9:c9:ae:00:1a:
b7:37:fa:46:24:5b:e5:74:80:75:c1:1f:3a:99:53:7f:e1:f1:
65:62:ed:bd:27:7d:93:f1:0d:25:a8:33:ec:73:5a:ef:bb:35:
de:71:4d:f0:eb:1a:e2:7b:85:03:70:2f:d6:9f:21:b6:06:9f:
9d:3d:3e:18:16:35:0d:fe:aa:15:98:a1:d3:7b:71:e9:72:82:
0e:0d:9e:e4:f2:24:16:15:7d:85:51:07:b1:1f:28:4f:6a:9e:
22:0c:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:13:54 2026 by rpki-client