Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pz2I1P4M04WlV9DZ1a-ij-q7rVo.roa
File: pz2I1P4M04WlV9DZ1a-ij-q7rVo.roa (raw, json)
Hash identifier: l2SgTDYbhR3wgksJS4psBnId5vJaogyRfv4ILSKuIBk=
Subject key identifier: A7:3D:88:D4:FE:0C:D3:85:A5:57:D0:D9:D5:AF:A2:8F:EA:BB:AD:5A
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019EDF2DE9D6FC9EDB7C792DBB6E4882D5CD
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pz2I1P4M04WlV9DZ1a-ij-q7rVo.roa
Signing time: Fri 19 Jun 2026 09:19:48 +0000
ROA not before: Fri 19 Jun 2026 09:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 147.90.182.0/24 maxlen: 24
147.90.183.0/24 maxlen: 24
147.90.185.0/24 maxlen: 24
147.90.186.0/24 maxlen: 24
147.90.187.0/24 maxlen: 24
147.90.188.0/24 maxlen: 24
147.90.189.0/24 maxlen: 24
158.173.240.0/24 maxlen: 24
170.62.239.0/24 maxlen: 24
170.62.244.0/24 maxlen: 24
170.62.245.0/24 maxlen: 24
193.142.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:2d:e9:d6:fc:9e:db:7c:79:2d:bb:6e:48:82:d5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 19 09:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a73d88d4fe0cd385a557d0d9d5afa28feabbad5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:28:f5:ae:dc:a4:7a:8b:f9:19:2c:08:0e:
ef:65:3c:78:50:0c:0f:9b:1d:f0:97:c2:45:c6:02:
d8:ef:19:7a:b8:e9:9e:83:92:5c:fe:a1:4c:97:c6:
71:6f:bd:f2:6e:a4:4f:90:f2:57:6c:04:9e:2d:0e:
73:85:91:06:07:11:55:ea:09:79:96:9c:d7:e9:c8:
02:7b:50:b9:b5:de:30:e7:48:a3:2a:55:7c:9d:9b:
09:c4:b6:53:20:3c:b3:03:28:68:7e:a9:40:94:5e:
28:36:89:2c:69:24:f0:db:61:bb:43:0b:af:2c:2e:
ea:f8:3a:05:25:72:3b:fb:55:5c:7f:9a:6f:4d:84:
17:06:a7:d7:6e:77:67:c9:ab:0f:77:cd:55:1b:90:
58:f0:3f:c2:29:ad:ac:15:13:3a:75:a3:dc:d8:21:
f4:93:f7:e4:70:65:35:03:56:5e:b0:5b:5d:c9:95:
2e:34:83:af:ad:ec:d0:e5:9c:b8:e4:f7:5b:a8:b2:
1e:cf:b9:79:43:57:a1:8d:1b:b1:7c:c1:2b:1f:16:
8d:d9:05:c2:c0:df:7c:5e:04:a4:df:52:f4:1b:57:
8d:a0:99:87:a0:a7:1e:bf:6c:24:b6:21:bb:48:cc:
48:f5:28:08:32:46:0b:e9:4b:18:7b:10:29:da:f4:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:88:D4:FE:0C:D3:85:A5:57:D0:D9:D5:AF:A2:8F:EA:BB:AD:5A
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pz2I1P4M04WlV9DZ1a-ij-q7rVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.182.0/23
147.90.185.0-147.90.189.255
158.173.240.0/24
170.62.239.0/24
170.62.244.0/23
193.142.58.0/24
Signature Algorithm: sha256WithRSAEncryption
74:56:54:6c:ed:fd:e8:cb:d2:da:37:e6:21:3c:3e:d5:97:85:
0f:a5:ef:bb:c0:f7:27:61:9b:8a:01:8c:3a:e2:ba:ff:38:fe:
87:cc:be:96:4a:9d:94:f5:d0:a9:72:f8:ae:a9:38:23:cd:33:
8f:a6:a0:e6:01:7f:22:c2:81:48:20:87:dd:20:cf:26:04:77:
19:a1:77:df:37:a1:b6:fd:c3:6d:09:c6:ac:14:62:16:b7:99:
03:7c:86:12:fc:00:29:1a:b2:3b:8f:e0:43:64:22:ea:4a:58:
69:07:da:b3:44:b3:57:99:00:92:2c:8e:69:3b:99:6d:09:9c:
ad:38:56:7b:6a:9e:16:73:c9:25:7a:2d:f6:1b:6d:f8:9f:52:
a2:ba:a3:b0:ea:59:a6:cf:10:9d:fd:c4:01:50:ed:a2:97:04:
60:53:1a:f1:54:50:da:59:43:dc:a0:71:e5:d5:20:41:b9:df:
b9:ed:4c:69:cf:90:d7:45:a4:13:4c:50:b8:1b:90:17:7c:22:
97:d4:9d:b1:b9:37:aa:f7:1e:9d:5d:38:b6:30:32:3f:dc:47:
29:93:d9:e0:bb:1c:e5:b2:a1:ca:d5:c4:1a:9d:8b:8a:e1:26:
35:e1:52:40:5e:78:fa:e7:19:71:96:bd:f9:77:10:1b:4d:29:
4d:8a:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:21 2026 by rpki-client