Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ni25ob7WnfN2Vzbj8d-QWLAYjig.roa
File: ni25ob7WnfN2Vzbj8d-QWLAYjig.roa (raw, json)
Hash identifier: EtoS+cQZwCeP0JfgkeL6mw9hqqpW/gTUMvxlScyiIyM=
Subject key identifier: 9E:2D:B9:A1:BE:D6:9D:F3:76:57:36:E3:F1:DF:90:58:B0:18:8E:28
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A08F26501223EB989343B90639339EEA0D
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ni25ob7WnfN2Vzbj8d-QWLAYjig.roa
Signing time: Fri 11 Sep 2026 06:27:27 +0000
ROA not before: Fri 11 Sep 2026 06:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198474
IP address blocks: 147.90.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:26:50:12:23:eb:98:93:43:b9:06:39:33:9e:ea:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 11 06:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e2db9a1bed69df3765736e3f1df9058b0188e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:a1:60:2d:c5:98:81:04:d3:b6:46:76:be:
a3:6f:ca:e3:31:a0:99:33:bd:03:f7:05:72:af:4f:
c7:d8:66:a6:a3:41:8e:07:83:6f:e8:0e:43:cc:59:
b0:5c:fb:28:c8:48:e2:49:2c:76:04:90:8e:9d:ff:
09:87:6c:54:62:f0:84:48:a9:00:98:0a:69:b9:0e:
6f:35:5d:88:67:3b:03:fc:b4:93:6e:05:dd:a1:53:
e1:94:5b:64:0f:d8:fc:8c:08:24:56:21:48:f0:ff:
4f:6b:b4:e1:1b:77:6c:75:74:90:1d:63:f9:9c:12:
73:9b:56:a8:39:26:cb:a9:83:06:6b:30:56:61:39:
8f:fc:bc:80:e9:4c:27:38:e6:24:40:fc:bf:18:95:
19:b9:ca:0c:2f:c0:a0:2e:e9:b2:9e:a4:0b:e4:d4:
13:63:5a:d4:3f:8e:35:20:34:48:97:7f:e1:99:17:
9d:ac:33:6c:c7:f1:a5:cc:a2:f4:1f:6f:d0:d6:59:
d5:dd:6a:f7:76:95:90:52:98:d1:ff:d1:36:0b:91:
49:b0:b0:d8:d1:9f:1e:7b:3f:11:b2:9b:28:59:1a:
6a:39:64:b6:f8:64:09:bb:f8:e9:d3:21:69:1d:01:
d1:1f:f4:76:51:c6:03:6a:8d:a5:35:7d:12:22:75:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:B9:A1:BE:D6:9D:F3:76:57:36:E3:F1:DF:90:58:B0:18:8E:28
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ni25ob7WnfN2Vzbj8d-QWLAYjig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.206.0/24
Signature Algorithm: sha256WithRSAEncryption
59:63:41:2c:cc:74:95:bf:7a:b6:bc:94:3f:1d:32:94:18:2c:
82:9c:47:a1:05:5a:da:af:f1:92:0d:84:c1:3e:a5:b7:a9:3f:
f0:1e:61:2a:99:90:70:95:0c:af:66:55:e7:27:a7:04:1f:74:
57:a2:ef:51:7f:ed:a3:db:de:5a:3f:5f:3a:cb:8d:12:e5:61:
9d:d6:c1:a4:3f:00:7c:d9:b6:1b:3b:27:78:3f:25:40:b4:36:
5b:5d:7d:ca:bf:91:37:a8:9e:5c:ba:ae:75:e4:51:7f:c2:eb:
3f:bd:af:22:04:cf:f3:cb:03:72:36:87:84:4b:8a:59:c6:48:
e7:94:09:17:62:bf:f4:5e:80:74:f5:b0:87:8f:d9:43:c8:72:
81:6f:c8:9b:c5:b0:b3:57:a9:65:fe:9c:06:88:e6:9e:00:d5:
52:11:cd:52:44:0f:ec:18:28:f0:6c:a6:fc:c1:7d:83:02:76:
19:03:96:ba:2b:65:96:db:62:53:3c:0e:b4:92:56:e1:06:ef:
a0:5f:4a:e2:d1:d4:cf:55:b4:f9:aa:a7:2d:7a:f5:3e:37:81:
b9:d0:56:6e:20:36:f2:57:4c:88:21:74:b8:34:4e:d5:99:61:
57:65:21:d2:6f:7b:35:51:34:5e:22:a2:ec:77:94:f2:f3:03:
47:b1:28:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:34:12 2026 by rpki-client