Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/s-qya_5X31fd753Q-arR-WoJ6t8.roa
File: s-qya_5X31fd753Q-arR-WoJ6t8.roa (raw, json)
Hash identifier: BOh/kl+cK+m5QcjHWYyz7OyoELetlPWa4TpphllyUKc=
Subject key identifier: B3:EA:B2:6B:FE:57:DF:57:DD:EF:9D:D0:F9:AA:D1:F9:6A:09:EA:DF
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A1640CDE6122E863836F370B1B9E1C1FFB
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/s-qya_5X31fd753Q-arR-WoJ6t8.roa
Signing time: Thu 22 Oct 2026 14:38:47 +0000
ROA not before: Thu 22 Oct 2026 14:38:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218797
IP address blocks: 147.90.47.0/24 maxlen: 24
147.90.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:0c:de:61:22:e8:63:83:6f:37:0b:1b:9e:1c:1f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 22 14:38:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3eab26bfe57df57ddef9dd0f9aad1f96a09eadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:3b:be:ce:38:24:f4:1e:f4:d3:4a:22:e3:
3f:4c:ad:a8:0f:95:d7:8b:93:86:6e:85:51:13:bf:
c1:8b:8e:aa:43:f0:b2:fa:f9:2a:45:6e:3a:ef:77:
2e:86:59:06:40:d6:18:7b:eb:fb:cf:3f:56:96:17:
a1:85:8b:d0:76:47:0f:6e:72:c0:c0:fd:56:66:9a:
7d:16:82:24:17:9c:00:03:82:b8:6c:f1:82:62:08:
86:21:ac:61:6b:47:21:33:87:59:1c:40:5b:32:6a:
fc:7c:15:3b:a7:ec:d2:ac:a1:68:52:a2:59:07:4f:
b4:14:58:0d:10:83:47:5a:6a:c3:72:c4:48:01:c0:
b8:a6:76:66:d9:ac:bc:19:2c:0b:ed:14:ed:61:bc:
60:15:87:61:a4:12:cc:5c:db:20:9f:2e:e1:c0:18:
d8:e1:63:41:ad:2a:ad:df:1a:b3:9f:0d:c0:f3:bd:
1f:1b:5f:9a:65:6d:4f:29:d3:51:c2:61:9c:8d:6e:
21:bb:33:53:52:96:d8:d1:60:f3:cd:f4:e6:74:2e:
aa:f0:df:9c:4c:e9:37:c4:36:a4:03:d7:ce:36:ae:
04:df:59:96:ab:98:c8:37:21:c8:00:b8:51:fa:6d:
fa:5d:fc:63:f9:af:76:a8:76:c8:a9:af:68:d9:6a:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EA:B2:6B:FE:57:DF:57:DD:EF:9D:D0:F9:AA:D1:F9:6A:09:EA:DF
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/s-qya_5X31fd753Q-arR-WoJ6t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.47.0/24
147.90.65.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:83:43:3d:72:dd:56:56:57:65:5b:4d:c5:33:cb:12:42:3a:
24:a0:15:94:02:26:9f:20:f6:36:0c:b0:8f:2c:d1:69:b6:e0:
31:81:cf:36:a3:42:89:e7:e9:ac:70:4f:43:87:5e:0b:75:67:
d2:84:6a:be:9f:1f:db:f2:98:4f:f4:d6:32:a0:0f:8d:7d:82:
0c:8e:e4:a9:e0:ae:24:41:85:e5:2b:d2:2f:af:c6:d0:6f:ed:
76:da:23:47:41:5a:91:3f:f5:6c:d6:59:e3:db:07:dc:56:d7:
02:0e:d0:10:30:ed:57:c7:fd:bd:cb:e2:fd:c4:0a:c3:7b:3c:
e4:c3:e0:57:9b:15:8a:85:2c:b3:1f:6e:a1:8b:59:e5:84:95:
fb:f9:af:ea:15:02:3b:8c:03:6b:cf:2b:9c:c3:54:e1:f9:20:
40:49:bb:7c:97:3d:81:98:15:c6:67:5d:d7:dd:44:49:db:ed:
92:20:4e:08:15:f4:ce:90:5b:14:27:1f:f3:f7:25:e2:9f:1a:
0d:21:dc:8a:4e:5f:c5:11:d0:af:c4:47:1a:43:79:a1:ec:52:
6a:c8:34:83:8d:91:c1:65:c0:22:19:2a:55:1b:de:a9:45:f1:
dc:61:54:3c:28:ad:dc:18:96:d9:71:ed:95:83:8c:5b:e0:3f:
c8:aa:67:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFkDN5hIuhjg283CxueHB/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYxMDIyMTQzODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2VhYjI2YmZlNTdkZjU3ZGRlZjlkZDBmOWFhZDFmOTZhMDllYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD07vs44JPQe9NNKIuM/TK2oD5XX
i5OGboVRE7/Bi46qQ/Cy+vkqRW4673cuhlkGQNYYe+v7zz9WlhehhYvQdkcPbnLA
wP1WZpp9FoIkF5wAA4K4bPGCYgiGIaxha0chM4dZHEBbMmr8fBU7p+zSrKFoUqJZ
B0+0FFgNEINHWmrDcsRIAcC4pnZm2ay8GSwL7RTtYbxgFYdhpBLMXNsgny7hwBjY
4WNBrSqt3xqznw3A870fG1+aZW1PKdNRwmGcjW4huzNTUpbY0WDzzfTmdC6q8N+c
TOk3xDakA9fONq4E31mWq5jINyHIALhR+m36Xfxj+a92qHbIqa9o2WrocwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLPqsmv+V99X3e+d0Pmq0flqCerfMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvcy1xeWFfNVgzMWZkNzUzUS1hclItV29KNnQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk1ovAwQA
k1pBMA0GCSqGSIb3DQEBCwUAA4IBAQDWg0M9ct1WVldlW03FM8sSQjokoBWUAiaf
IPY2DLCPLNFptuAxgc82o0KJ5+mscE9Dh14LdWfShGq+nx/b8phP9NYyoA+NfYIM
juSp4K4kQYXlK9Ivr8bQb+122iNHQVqRP/Vs1lnj2wfcVtcCDtAQMO1Xx/29y+L9
xArDezzkw+BXmxWKhSyzH26hi1nlhJX7+a/qFQI7jANrzyucw1Th+SBASbt8lz2B
mBXGZ13X3URJ2+2SIE4IFfTOkFsUJx/z9yXinxoNIdyKTl/FEdCvxEcaQ3mh7FJq
yDSDjZHBZcAiGSpVG96pRfHcYVQ8KK3cGJbZce2Vg4xb4D/IqmdF
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:34 2026 by rpki-client