Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/m5qLQzmXJocu2iK911uiEDllbmg.roa
File: m5qLQzmXJocu2iK911uiEDllbmg.roa (raw, json)
Hash identifier: 8AW7aTlP1bctkY4eBB5GEmutek5VSmwtWBDhucAHRbA=
Subject key identifier: 9B:9A:8B:43:39:97:26:87:2E:DA:22:BD:D7:5B:A2:10:39:65:6E:68
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A1640CDDAAE1355A2317886F2E715EAFC9
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/m5qLQzmXJocu2iK911uiEDllbmg.roa
Signing time: Thu 22 Oct 2026 14:38:47 +0000
ROA not before: Thu 22 Oct 2026 14:38:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218780
IP address blocks: 147.90.47.0/24 maxlen: 24
147.90.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:0c:dd:aa:e1:35:5a:23:17:88:6f:2e:71:5e:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 22 14:38:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b9a8b43399726872eda22bdd75ba21039656e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:03:ba:df:85:6c:05:39:f1:c5:10:5e:44:
d6:cb:e4:25:67:37:23:ff:fd:bb:d8:75:06:8d:e9:
d3:92:42:3e:d3:1a:0d:86:36:b8:0f:b0:61:86:ba:
4c:25:5d:c5:68:dc:20:3b:9c:2f:13:55:2a:fc:c8:
17:e5:46:0e:35:7e:d5:1c:9f:c1:9d:81:63:06:23:
00:c7:c2:d2:4b:19:05:e4:74:f5:8b:96:9c:4f:02:
8f:44:73:fd:28:68:ae:4e:33:c8:b4:a6:c0:f8:a7:
2a:6c:c3:03:b6:2e:0b:ac:4d:3d:94:e7:df:d4:5c:
ea:eb:f9:40:15:9d:4b:ee:f4:d9:73:9c:0e:a0:0a:
1a:9a:8f:de:54:2a:ca:3a:3f:b6:97:35:14:bd:0f:
fa:a6:db:09:b4:ed:cb:a0:21:ef:e0:ef:35:0a:d1:
34:8d:8e:5c:93:c7:99:16:d4:9e:99:1c:2d:60:6b:
56:c8:84:4f:9a:f9:05:89:9b:16:6e:1b:87:f1:03:
98:3e:4e:b8:76:03:08:9e:55:3d:a4:7f:4b:e1:2a:
80:08:6a:e8:e8:06:2a:0d:04:0d:1f:36:5a:d7:33:
e4:91:16:4b:2b:08:f3:71:a5:0c:07:d5:6f:b3:b4:
ab:0f:23:2a:1c:2b:b5:ed:5c:94:c7:97:d1:bb:da:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9A:8B:43:39:97:26:87:2E:DA:22:BD:D7:5B:A2:10:39:65:6E:68
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/m5qLQzmXJocu2iK911uiEDllbmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.47.0/24
147.90.65.0/24
Signature Algorithm: sha256WithRSAEncryption
82:cb:0c:61:28:09:2b:6b:0f:15:25:ce:5f:ea:cf:21:38:76:
62:49:9c:43:70:da:78:f2:72:cf:28:dc:ef:47:29:4b:fa:73:
b8:21:04:be:af:09:14:be:0a:00:be:8e:e7:7a:cb:57:20:7c:
b7:fe:05:11:31:78:32:9e:98:b8:72:64:f3:28:6c:36:39:9d:
cb:d0:79:e7:2f:fc:e1:f1:68:ae:58:d8:ca:ae:69:1a:1a:15:
13:b2:df:ac:66:39:48:18:ed:3e:c2:6b:b1:10:85:33:1b:ab:
8e:76:c0:c4:f0:da:18:f7:28:56:3c:83:59:9c:81:40:e6:9c:
41:cc:1a:21:d8:44:4e:6a:b0:6f:15:32:97:ed:c2:74:3d:4f:
a0:91:b1:d9:8e:c6:ca:5f:87:15:ed:46:e9:bd:28:49:b1:60:
94:cf:fe:35:23:d3:c2:8d:33:7a:55:64:4f:90:10:da:00:15:
cb:14:de:46:6a:4f:a3:2a:c5:9f:00:83:ac:b4:8b:b2:fb:41:
ac:0b:f5:35:87:51:41:84:3d:77:c2:92:7d:8a:ae:a7:0c:89:
2c:2a:1f:87:c2:1e:a3:1a:23:2f:30:62:f4:cf:88:db:bf:3c:
9c:24:88:d1:f4:ff:bb:c9:96:55:24:a2:47:33:05:84:85:97:
34:0d:ac:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:05:53 2026 by rpki-client