Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/sfj47QqQxuKfmSp57-zD_LULlUE.roa
File: sfj47QqQxuKfmSp57-zD_LULlUE.roa (raw, json)
Hash identifier: xKCoMGIELu2ENccZOkx/ZyhDKhE2n4g1+Xp7Xo0cM0g=
Subject key identifier: B1:F8:F8:ED:0A:90:C6:E2:9F:99:2A:79:EF:EC:C3:FC:B5:0B:95:41
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019C253C3C83F4ED42C80EABABAA46D53241
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/sfj47QqQxuKfmSp57-zD_LULlUE.roa
Signing time: Tue 03 Feb 2026 20:40:30 +0000
ROA not before: Tue 03 Feb 2026 20:40:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 147.90.192.0/21 maxlen: 24
147.90.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Feb 2026 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:25:3c:3c:83:f4:ed:42:c8:0e:ab:ab:aa:46:d5:32:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 3 20:40:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1f8f8ed0a90c6e29f992a79efecc3fcb50b9541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:3e:1b:7b:83:f2:0d:19:b1:86:23:98:6d:
28:44:7b:1a:a3:d1:86:19:36:b9:ab:70:bf:c2:df:
15:c3:7f:28:4d:ca:d0:2a:2f:fc:d8:07:39:85:6d:
a5:6a:23:e7:80:6c:97:ed:2a:b0:f7:8d:91:98:bd:
d8:be:25:17:c3:09:c0:b0:eb:f7:44:5f:d9:02:c3:
58:3e:9a:13:09:8e:d4:b6:0f:c6:c3:97:5a:52:d3:
5c:5c:93:da:dc:41:c8:d9:b3:26:28:72:ff:4a:5b:
91:e7:a9:53:88:5d:ec:f4:e7:0b:06:40:8d:16:89:
69:87:dc:f5:ec:ef:57:9b:a7:11:a3:33:42:57:d2:
95:fa:96:83:c9:f5:ae:41:35:cf:6e:8a:c8:5e:c7:
8a:28:cd:07:fb:14:bf:d6:56:65:89:bb:5a:1b:97:
e5:bb:af:73:ef:04:b3:5b:f6:10:61:8e:b1:3a:f4:
2b:85:86:0e:42:6c:2d:f7:22:14:a8:05:51:83:c7:
9b:1d:dd:92:75:6e:f7:8a:3c:21:25:0c:77:cc:b6:
b3:62:f6:e0:f6:79:d0:49:5f:6c:9f:0f:cc:ea:ab:
21:4e:49:5f:ba:58:ac:28:67:67:d8:ae:52:4d:f3:
b2:25:08:6f:0c:f8:ec:81:6e:70:b9:fa:a4:fc:8e:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F8:F8:ED:0A:90:C6:E2:9F:99:2A:79:EF:EC:C3:FC:B5:0B:95:41
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/sfj47QqQxuKfmSp57-zD_LULlUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.192.0/21
147.90.208.0/21
Signature Algorithm: sha256WithRSAEncryption
d4:2a:4e:79:77:c9:c0:20:a0:02:a2:4f:67:40:6e:c3:bc:7f:
ce:5a:65:26:5b:5f:78:e9:4b:50:7c:1a:84:8b:f1:3e:03:46:
c0:02:42:d7:81:4e:43:26:87:f8:70:f6:cb:45:76:9b:b6:d7:
84:30:1e:ca:6a:f2:32:bd:cc:08:5e:06:a8:a3:04:fa:18:9b:
99:d3:9c:b2:86:9d:0b:29:b0:30:9c:46:3d:12:7f:b6:63:8b:
a3:9f:cc:fa:dc:0d:32:f6:6a:84:b0:c4:57:ff:42:c0:c8:a9:
76:02:0d:17:0f:43:de:b7:2b:da:3a:ca:08:0c:49:52:a8:e1:
75:5c:e3:a9:d8:1f:21:ba:e4:cc:6a:18:f4:df:27:fd:11:0f:
db:ef:62:b3:e8:ed:08:99:fe:d0:0b:df:21:fe:c1:9c:1b:85:
f6:df:8a:60:15:96:b7:26:fb:ea:49:95:9a:f4:8d:62:e7:f0:
ae:78:1e:f4:fb:19:8f:a0:87:8c:0e:0a:65:88:ac:83:f3:50:
25:eb:8d:72:8e:ca:b2:67:37:d2:bb:d5:48:db:b1:94:5a:9e:
d4:d9:48:83:ff:08:db:0c:91:b0:61:3a:c7:57:c3:d5:3f:e1:
b8:b7:7f:2c:20:e5:5b:cf:f8:b9:44:83:ab:2e:63:0d:3b:23:
32:ba:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:58:23 2026 by rpki-client