Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kDrbmEWNp39vXA4mltwrIf0ZFYQ.roa
File: kDrbmEWNp39vXA4mltwrIf0ZFYQ.roa (raw, json)
Hash identifier: 8c9shvjm86ReEZ3GDdLMDBxO+yOGeSC68NVM4UytXLQ=
Subject key identifier: 90:3A:DB:98:45:8D:A7:7F:6F:5C:0E:26:96:DC:2B:21:FD:19:15:84
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F94432085831AC0BF85011E7159AD267F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kDrbmEWNp39vXA4mltwrIf0ZFYQ.roa
Signing time: Fri 24 Jul 2026 13:14:14 +0000
ROA not before: Fri 24 Jul 2026 13:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 147.90.182.0/24 maxlen: 24
147.90.183.0/24 maxlen: 24
147.90.185.0/24 maxlen: 24
147.90.187.0/24 maxlen: 24
147.90.188.0/24 maxlen: 24
147.90.189.0/24 maxlen: 24
158.173.240.0/24 maxlen: 24
170.62.239.0/24 maxlen: 24
170.62.244.0/24 maxlen: 24
170.62.245.0/24 maxlen: 24
193.142.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:43:20:85:83:1a:c0:bf:85:01:1e:71:59:ad:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 24 13:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=903adb98458da77f6f5c0e2696dc2b21fd191584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:5a:0c:f6:86:8d:52:ba:53:ea:e9:2c:7f:
90:f2:55:01:14:5d:40:61:9c:c8:b6:5a:72:c5:53:
d3:d2:e8:ff:cf:d4:94:84:ec:3a:dc:33:6b:35:e3:
d3:35:15:2c:06:9b:d3:67:71:4a:ac:8c:df:d3:6f:
12:1e:eb:0a:39:fe:e6:32:01:74:a3:aa:f9:5d:e2:
98:db:4b:3f:54:3e:45:ea:d9:dd:3f:00:15:f4:ee:
5e:02:8b:87:1b:be:06:c8:36:c7:74:72:ba:32:5c:
3a:52:7f:f3:47:93:c4:b9:0e:39:c5:27:36:78:4a:
88:cf:86:b9:bf:92:68:0c:a6:13:7c:9a:c8:3a:ea:
76:89:bb:fe:28:b4:39:69:bd:f3:09:13:39:2b:e9:
91:97:53:26:6c:e2:98:e3:9c:e7:8d:68:6f:17:5c:
eb:a9:18:b2:a6:e9:03:b6:ac:33:62:9f:4f:4e:05:
10:e4:f4:e7:99:eb:1f:48:de:63:b1:5d:51:31:46:
a9:4c:2b:c0:ff:51:d6:c6:e3:b1:84:d9:b4:6f:9c:
80:62:ce:ef:81:26:d9:6b:cd:72:46:03:11:c4:b6:
d0:72:35:71:c1:24:a3:a4:b1:5f:de:d9:f1:82:d9:
14:f5:79:6d:51:40:99:f9:5a:1b:d5:43:07:37:ba:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3A:DB:98:45:8D:A7:7F:6F:5C:0E:26:96:DC:2B:21:FD:19:15:84
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kDrbmEWNp39vXA4mltwrIf0ZFYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.182.0/23
147.90.185.0/24
147.90.187.0-147.90.189.255
158.173.240.0/24
170.62.239.0/24
170.62.244.0/23
193.142.58.0/24
Signature Algorithm: sha256WithRSAEncryption
24:7d:0d:76:c2:a0:b9:6c:e7:9a:01:e3:cf:c9:0b:97:a2:a4:
4a:ef:3f:94:c4:52:a6:3c:cc:48:0a:4a:22:cf:b3:56:e8:32:
87:ba:a8:ce:25:87:87:97:ee:0d:7c:88:b1:df:85:82:ef:34:
ad:3f:8b:c4:cb:5e:e0:a8:40:5f:55:66:cb:68:67:2a:2c:c9:
7f:85:c3:a4:83:f7:4b:62:8c:fd:f6:35:0f:0c:c0:f1:b3:d8:
b1:ec:49:15:9d:35:aa:02:d1:1c:e1:46:b3:a9:c1:9b:e3:ca:
27:d1:c3:14:bb:ab:6e:2c:9f:70:b1:33:77:79:93:d5:86:9a:
0b:1a:88:b6:b7:ad:2c:f4:a8:7a:b4:23:72:96:e0:5c:b8:d1:
a4:62:dd:90:27:16:c5:2a:1c:de:01:d8:d6:26:4d:70:81:8f:
55:49:8f:86:77:6b:79:9b:4b:e8:19:80:43:29:84:60:9d:bf:
c1:42:66:c1:54:a6:1a:cb:57:d8:15:08:f8:a2:b9:c2:66:de:
92:1a:85:49:bb:a5:54:e7:65:e6:bc:80:df:6b:36:61:24:94:
ed:f9:8c:57:eb:33:a7:39:a3:60:d9:9d:bd:23:a1:ce:e0:b9:
21:ae:24:fb:8b:1d:d9:b2:55:a3:88:76:23:27:bd:61:93:a3:
64:c1:06:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:46 2026 by rpki-client