Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rpYON2_x2Zd2aUzosTMwI1oP9eM.roa
File: rpYON2_x2Zd2aUzosTMwI1oP9eM.roa (raw, json)
Hash identifier: 2/DdAPXDyayqI54ZE0oFX7Zac6dyzwNBRiAgURsKxBA=
Subject key identifier: AE:96:0E:37:6F:F1:D9:97:76:69:4C:E8:B1:33:30:23:5A:0F:F5:E3
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A07586C18F5874AF9568D383BF3C0FD947
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rpYON2_x2Zd2aUzosTMwI1oP9eM.roa
Signing time: Sun 06 Sep 2026 07:02:40 +0000
ROA not before: Sun 06 Sep 2026 07:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 147.90.46.0/24 maxlen: 24
147.90.51.0/24 maxlen: 24
147.90.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:86:c1:8f:58:74:af:95:68:d3:83:bf:3c:0f:d9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 6 07:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae960e376ff1d99776694ce8b13330235a0ff5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:12:6a:80:e6:a9:ce:76:48:e3:cf:09:05:48:
f0:ff:ed:83:dc:88:c8:d0:7c:f3:74:05:fa:1d:6c:
7c:eb:4e:f1:8f:37:b9:83:80:55:53:4d:a3:5c:83:
4a:f1:d6:82:5f:7c:68:b5:f1:0a:12:ca:18:c4:28:
c6:f4:f2:34:af:7a:5a:19:63:2d:68:2f:62:d0:f2:
95:5f:29:5b:c5:ff:e8:d3:11:16:5a:31:bc:83:62:
70:90:c7:6f:4b:96:37:0f:ae:a5:00:f5:e3:67:f9:
fc:7e:10:f0:f5:20:9e:9c:a3:be:bd:00:38:ea:f1:
3a:38:4b:aa:75:7e:b9:e7:0c:01:c6:ae:c4:eb:93:
3c:69:86:0a:2f:02:00:1a:22:1c:b7:82:eb:9b:34:
3b:b8:a5:6a:10:70:91:71:60:7e:e9:13:7c:38:30:
99:e2:87:55:d3:6c:bb:43:8e:4c:15:b9:0e:d0:f5:
07:0e:37:fc:96:32:91:ce:c6:ad:a6:b8:33:f6:ed:
ad:a4:8a:66:d1:8e:f1:90:8d:44:52:75:60:7e:45:
08:da:f7:a4:57:d3:93:54:c8:a8:be:78:cb:eb:9a:
d8:5d:1d:0f:d3:0b:10:12:44:8e:b8:89:a0:bf:fe:
ae:7e:4e:17:0a:57:ff:a2:08:41:bc:6c:61:f2:78:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:96:0E:37:6F:F1:D9:97:76:69:4C:E8:B1:33:30:23:5A:0F:F5:E3
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rpYON2_x2Zd2aUzosTMwI1oP9eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.46.0/24
147.90.51.0/24
147.90.53.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1f:4d:a7:f5:2d:c6:b1:3c:78:57:62:5f:26:32:61:02:fa:
ab:56:b2:2b:c5:45:c8:a6:30:ce:36:8c:ec:fc:9e:a6:97:1c:
ff:5c:c1:4f:25:c9:ee:57:46:a1:40:cd:95:ea:c1:73:3e:74:
07:b6:35:96:60:b5:4b:6a:70:3d:d5:db:b0:4b:d2:6a:87:ed:
19:18:28:20:b2:cc:4d:cf:4b:7e:61:9d:7f:a1:b9:cc:77:01:
0a:eb:d3:fb:e9:f9:3b:b8:64:dc:27:7c:bd:cd:d0:0d:35:3c:
ef:2a:bc:fe:1d:23:9b:dc:80:33:fe:5c:8a:d6:bb:92:20:09:
92:cd:9c:7d:56:bf:46:ad:80:83:b6:e4:50:09:07:8d:88:a1:
a6:ea:43:46:1e:1c:32:e2:9b:c4:62:0b:e2:26:18:74:0a:c0:
c5:7d:31:73:3a:1d:84:fe:29:dd:0e:30:b8:b8:0c:0f:61:e3:
8a:b6:dc:51:23:05:47:f2:68:64:32:9c:30:4b:08:b4:12:86:
34:99:0a:44:32:a6:ad:56:7c:34:2f:fb:0d:38:05:c0:5c:8e:
5f:ec:64:9d:0d:e2:85:9c:e5:c7:e9:5a:1b:c0:18:a3:fd:ff:
68:47:2b:7a:fc:3c:9e:8b:56:dd:58:c3:53:78:38:ed:85:e8:
80:dc:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:13:52 2026 by rpki-client