Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lwbUJqgDD-JekdMrWh9nuhZqfZg.roa
File: lwbUJqgDD-JekdMrWh9nuhZqfZg.roa (raw, json)
Hash identifier: 0F7tjz2X1XTAIj69yuLKSdnMXlSYlSS2kM52O4qCS9s=
Subject key identifier: 97:06:D4:26:A8:03:0F:E2:5E:91:D3:2B:5A:1F:67:BA:16:6A:7D:98
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E82358AE3828A175899800CDB46E6C494
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lwbUJqgDD-JekdMrWh9nuhZqfZg.roa
Signing time: Mon 01 Jun 2026 08:03:27 +0000
ROA not before: Mon 01 Jun 2026 08:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40352
IP address blocks: 147.90.21.0/24 maxlen: 24
158.173.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:35:8a:e3:82:8a:17:58:99:80:0c:db:46:e6:c4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 1 08:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9706d426a8030fe25e91d32b5a1f67ba166a7d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:0b:cb:50:74:fa:6d:00:3c:a5:42:99:7a:
fe:e1:4a:51:cc:6a:41:e6:a2:eb:92:7d:95:7d:1c:
4c:c0:c2:34:b9:d1:9d:82:17:16:b8:9a:cb:06:d1:
76:68:2a:0a:a3:af:7d:2d:50:20:41:84:ba:1d:7d:
e0:ed:5e:f5:0c:30:87:ab:54:58:bf:dd:11:12:6e:
a0:72:8d:69:5c:e9:60:ba:15:a0:49:b4:29:4c:52:
84:ff:f8:1c:09:76:b7:c9:24:64:ef:bf:17:3f:e9:
c2:a5:8f:05:2f:82:82:c8:70:37:bd:42:f8:81:45:
87:f0:a3:81:7f:66:fd:28:54:ca:b6:ad:bf:be:dc:
03:e6:27:ad:03:07:39:51:31:7d:17:50:78:03:e8:
90:62:63:3c:f5:05:cc:24:1b:72:c5:14:24:e9:09:
f1:c5:fb:43:0c:d1:b8:f9:b4:4f:84:3d:5f:07:a4:
25:ca:c3:b1:b5:61:35:18:fb:4b:c2:c2:44:ff:7d:
b6:43:2e:d5:79:18:00:f7:48:e0:5a:5e:69:cc:0f:
08:b2:97:13:66:7b:a9:15:23:8b:eb:05:e4:b2:5a:
a3:93:43:9d:de:9e:12:5c:46:d9:da:d6:8d:29:12:
cf:83:79:d1:f6:04:fa:47:92:7a:98:46:97:72:65:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:06:D4:26:A8:03:0F:E2:5E:91:D3:2B:5A:1F:67:BA:16:6A:7D:98
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lwbUJqgDD-JekdMrWh9nuhZqfZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.21.0/24
158.173.213.0/24
Signature Algorithm: sha256WithRSAEncryption
33:55:77:47:3f:40:3c:f5:41:47:82:c5:71:ac:a4:f8:39:ff:
8b:8e:5e:b2:57:e7:fa:e0:8f:ea:31:0f:d6:95:b6:9e:66:36:
72:00:8b:bc:49:28:bb:ee:2f:c7:82:61:fb:a8:26:e2:35:f0:
fd:68:05:b6:e3:e8:52:20:c1:93:95:2a:03:dc:94:4a:4f:09:
f9:3b:d7:68:aa:01:eb:99:cf:07:c9:20:60:7b:54:68:6a:3f:
5d:b2:1b:96:be:71:32:3c:59:e8:c5:7c:81:a1:64:03:30:3a:
9d:3d:b0:c6:2d:a0:65:ed:2f:a3:1c:97:ac:36:71:57:b3:cb:
9a:a2:90:57:7c:b8:40:da:3a:e5:e9:7e:8d:cb:f4:d0:83:ff:
34:22:1e:5f:a2:91:95:e8:08:22:2b:75:b7:77:e3:2b:ca:90:
17:a8:d1:d0:6a:bc:98:0a:10:b4:09:c4:c5:46:8c:3a:5c:29:
a3:6b:57:f5:47:62:09:d6:43:28:ee:3e:5e:69:2c:2c:3e:0d:
9e:08:6e:2c:11:d5:d2:3c:1a:9b:1c:f7:47:88:a6:80:43:35:
d9:b3:c0:f4:a9:19:5b:fa:d1:66:ce:44:ec:fd:8a:e2:f2:86:
a4:c0:17:52:84:7b:02:a7:dd:4f:a0:10:e3:19:cc:ee:fc:1a:
53:ec:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 00:46:39 2026 by rpki-client