Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lGwRPnw59wYAntfSAfr7GZh-m70.roa
File: lGwRPnw59wYAntfSAfr7GZh-m70.roa (raw, json)
Hash identifier: vJ0P0DMHkgqj33zFBIqdmNtOd/H4OYmIVH6zITM9us8=
Subject key identifier: 94:6C:11:3E:7C:39:F7:06:00:9E:D7:D2:01:FA:FB:19:98:7E:9B:BD
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0187EF2FE86617766B2D92D973D6661A2
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lGwRPnw59wYAntfSAfr7GZh-m70.roa
Signing time: Wed 19 Aug 2026 05:29:27 +0000
ROA not before: Wed 19 Aug 2026 05:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 147.90.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:7e:f2:fe:86:61:77:66:b2:d9:2d:97:3d:66:61:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 19 05:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=946c113e7c39f706009ed7d201fafb19987e9bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:f3:ac:80:6b:2a:ac:8b:b0:9c:2d:c2:37:
a0:5f:22:ba:c5:02:9c:77:b8:1f:9b:fd:ea:09:8a:
e9:c6:d4:28:78:c4:ea:08:0a:5e:39:75:58:a9:c0:
ad:92:a7:26:d9:f9:df:8a:f6:21:eb:90:16:48:89:
7d:43:23:e8:49:82:7e:50:1f:5c:a0:2c:52:65:00:
fc:fe:f5:4f:57:76:57:b6:62:42:23:1d:50:ff:95:
0e:59:af:8f:ee:f5:a9:77:d6:b9:25:de:2e:71:b2:
21:c7:d1:06:66:11:b0:46:31:91:b9:e5:28:e6:c9:
9c:1f:2d:0f:23:04:a5:a7:14:87:2f:b7:83:16:6c:
60:ee:6b:97:6e:c8:21:fb:0c:3d:77:cf:7b:ef:cc:
3f:60:a5:59:14:1a:75:96:0c:12:f2:26:8d:ff:d0:
8c:85:23:80:ea:10:84:58:29:d4:67:ba:45:cb:a4:
d7:0a:c9:a2:c1:3c:79:ce:af:4f:d4:4d:42:18:13:
d7:f5:f1:b4:e5:49:b5:e7:f5:5b:52:63:8f:81:5a:
6a:09:0e:76:65:60:f1:e1:57:a2:34:2e:4b:ba:e6:
bf:37:3c:b3:14:c4:19:64:92:21:65:c2:9e:f7:58:
ee:68:86:d4:b4:c1:5e:77:e3:57:2e:b5:11:bb:60:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:11:3E:7C:39:F7:06:00:9E:D7:D2:01:FA:FB:19:98:7E:9B:BD
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lGwRPnw59wYAntfSAfr7GZh-m70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.31.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:bd:a0:08:73:ae:ff:ab:57:4a:c1:c9:39:2e:3b:55:13:23:
06:ca:5b:83:9b:a2:56:fa:b7:84:8e:d4:58:9a:2b:ac:94:73:
c8:21:a8:ca:e3:56:19:9e:82:b6:28:73:7c:e0:e1:da:9b:72:
03:60:ce:7e:e3:94:06:7a:42:64:dd:ca:12:94:7a:18:35:01:
ca:b9:1d:f5:5f:02:00:f9:72:93:28:3b:20:31:4b:2a:37:88:
f3:7e:37:a1:7b:5f:49:ae:b5:cc:7c:83:89:92:8d:69:b2:bc:
e7:fe:8f:ac:cb:54:da:09:92:43:2a:41:58:4b:fa:12:2e:60:
b6:8e:d4:d3:01:0d:8b:66:16:31:5a:18:d7:e5:3f:ed:0b:7b:
6a:3e:46:67:a9:c2:b9:0b:d0:9b:a8:29:0f:94:30:42:8c:e7:
60:47:73:13:8e:58:e7:2c:9d:ba:90:17:11:de:b7:83:39:75:
f6:7a:0c:a0:e1:5a:27:c4:89:d4:39:8f:82:85:da:56:9b:a0:
df:b2:97:4c:34:33:b1:b4:76:d8:db:50:ea:0e:43:9f:40:bc:
99:bd:0e:86:2f:7b:00:21:c6:56:49:d9:16:22:ed:e3:83:65:
b6:43:81:31:77:ac:fd:df:1f:48:a1:6c:5f:5c:91:92:3c:fb:
ee:f8:49:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:14:13 2026 by rpki-client