Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/odXvAtDU-hZvo1CBtzTN64SENzc.roa
File: odXvAtDU-hZvo1CBtzTN64SENzc.roa (raw, json)
Hash identifier: JZ1L4AEaduL0KfwSsEd/4dFdStnoQR4eSZUAEfD/2iQ=
Subject key identifier: A1:D5:EF:02:D0:D4:FA:16:6F:A3:50:81:B7:34:CD:EB:84:84:37:37
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0483D020D15DA207E3AC2939D0051FBCD
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/odXvAtDU-hZvo1CBtzTN64SENzc.roa
Signing time: Fri 28 Aug 2026 11:59:12 +0000
ROA not before: Fri 28 Aug 2026 11:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219005
IP address blocks: 147.90.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:3d:02:0d:15:da:20:7e:3a:c2:93:9d:00:51:fb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 28 11:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1d5ef02d0d4fa166fa35081b734cdeb84843737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:aa:fe:4f:55:c9:d4:63:67:8a:7f:67:bf:
e0:19:20:31:29:53:ef:68:f4:94:d2:97:10:aa:23:
89:4b:9f:cf:3f:1c:b7:fd:c5:2c:3c:f7:61:60:25:
5b:0c:19:cf:12:09:7c:98:ea:85:58:be:0c:52:3d:
ee:83:96:78:10:a3:4e:19:fd:65:b3:c0:d5:50:d4:
27:37:b5:df:44:64:21:62:b5:72:ca:e2:7c:23:cd:
56:68:c5:1d:64:00:4a:db:a8:57:53:be:b7:bc:20:
ca:f1:d5:3c:69:d6:66:22:65:9a:55:aa:6e:2a:38:
7b:9c:d5:0a:37:53:94:a9:01:23:e4:aa:7e:06:86:
61:ac:d3:88:a3:34:66:d3:b6:a2:5e:51:b7:56:36:
cd:9c:00:42:03:59:63:a1:8f:ff:d8:02:3c:6b:46:
1e:02:d3:23:da:59:2b:f6:96:57:33:3f:aa:13:df:
fc:66:0e:ca:08:ac:a2:ba:a9:99:a2:1c:99:20:bd:
d5:59:a5:a0:63:dc:72:44:95:66:20:db:c4:85:4e:
77:11:79:93:94:93:32:54:0f:ad:79:22:d4:ae:04:
eb:44:1f:26:33:09:16:2e:ca:11:c8:9f:d3:de:d7:
f3:70:42:3a:81:15:d2:6d:d4:e5:89:54:71:81:25:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D5:EF:02:D0:D4:FA:16:6F:A3:50:81:B7:34:CD:EB:84:84:37:37
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/odXvAtDU-hZvo1CBtzTN64SENzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:86:9b:f9:35:0c:2d:b9:da:32:1e:fe:a5:5b:e4:d7:ae:b2:
f6:b4:af:71:f5:a3:2a:65:df:dc:e2:d5:76:81:16:16:5a:a9:
fa:52:3f:d4:20:4c:83:a2:f9:91:58:e7:d6:4d:1e:ad:20:ef:
1c:fe:b5:10:0b:22:89:81:00:f9:6b:60:a1:1d:64:ae:4a:47:
6c:82:69:12:50:79:91:a9:f2:1a:0d:36:55:15:d7:d7:03:b5:
90:77:0c:bb:3b:df:47:d1:fa:65:54:28:55:0b:6c:6c:2d:9d:
af:94:b7:86:84:45:44:da:04:7b:94:73:f3:6a:54:26:fe:7a:
9e:12:7a:87:b1:c6:36:0f:2f:98:e4:6b:a8:9f:1f:7e:41:7e:
96:e0:7f:74:d5:86:9a:f8:9a:26:a6:50:11:2c:25:4c:86:6a:
1c:8d:6b:a2:c6:1d:55:de:c9:f6:bf:a5:70:5c:6f:94:2e:ce:
01:4a:f9:18:5c:e1:73:91:ab:d6:c1:fa:2c:b2:64:8a:00:a4:
c5:d8:ce:d3:98:83:a0:bb:1f:36:81:b1:6b:c1:32:81:5b:0c:
4a:f1:28:90:d8:74:9c:1c:da:e5:33:ee:dc:92:c0:11:f6:68:
fa:aa:64:b0:01:b8:cd:38:92:29:5c:f4:60:21:78:ee:8a:e4:
ec:d8:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:14:41 2026 by rpki-client