Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tkkz__J5HANS3bpCbhjaj2Nn-iM.roa
File: tkkz__J5HANS3bpCbhjaj2Nn-iM.roa (raw, json)
Hash identifier: /+zGcodxfmqX2pVi83FGEy5plBpwYDOzi8W6iaE/tck=
Subject key identifier: B6:49:33:FF:F2:79:1C:03:52:DD:BA:42:6E:18:DA:8F:63:67:FA:23
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019CB784EA6FEBCE507037B0A17B70D301A6
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tkkz__J5HANS3bpCbhjaj2Nn-iM.roa
Signing time: Wed 04 Mar 2026 06:24:27 +0000
ROA not before: Wed 04 Mar 2026 06:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 147.90.5.0/24 maxlen: 24
147.90.205.0/24 maxlen: 24
158.173.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:84:ea:6f:eb:ce:50:70:37:b0:a1:7b:70:d3:01:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 4 06:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b64933fff2791c0352ddba426e18da8f6367fa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:39:fe:8b:30:8d:27:d8:e9:01:0d:78:94:
95:af:3a:f9:c1:7a:2a:34:51:6f:46:51:26:36:18:
77:dd:ab:3f:41:6d:a7:03:6c:7e:08:69:4e:3d:41:
95:b7:63:45:46:c2:0d:88:c3:8a:5f:d0:9e:e1:df:
83:51:71:08:53:ae:8e:c8:46:7d:80:99:2b:76:9f:
40:3b:74:fa:e9:dd:22:4d:8b:68:ca:f2:dc:c9:7b:
fc:9b:c1:66:6f:70:95:cf:c9:3a:27:48:3d:17:0f:
b3:f6:fb:32:de:bf:57:5a:0f:14:98:10:58:e2:04:
46:76:20:22:1b:2c:ad:74:22:89:a8:8a:eb:c7:a7:
c2:7e:78:a7:bd:5f:57:8a:d7:ef:e2:40:ff:53:72:
df:ed:4b:05:60:ea:28:3c:d7:7a:f1:11:d9:5b:d5:
2b:42:00:20:4f:d4:73:61:99:44:6c:70:f1:2e:82:
e8:06:86:c6:67:fe:a4:86:28:48:ca:a2:23:57:38:
8c:90:8f:87:9a:a5:ca:4f:c5:8e:6c:f0:a2:be:a7:
d4:bf:51:cb:6f:e1:8b:81:63:4b:31:9b:0a:a8:c3:
2c:2f:d7:9d:da:d6:d6:81:40:38:b2:58:9f:f5:4f:
28:74:b6:94:fb:34:cf:ae:bb:8b:27:99:fe:e0:09:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:49:33:FF:F2:79:1C:03:52:DD:BA:42:6E:18:DA:8F:63:67:FA:23
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tkkz__J5HANS3bpCbhjaj2Nn-iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.5.0/24
147.90.205.0/24
158.173.227.0/24
Signature Algorithm: sha256WithRSAEncryption
68:be:52:54:be:4f:e5:b5:83:c0:e5:5f:22:31:55:fc:fb:1a:
fe:2d:b3:4a:e5:de:59:88:52:26:4e:3c:a8:cb:31:d3:2c:66:
e1:66:a2:62:b3:0e:5c:dd:19:c2:58:2d:3d:3e:8b:5c:df:80:
85:48:08:54:0f:d7:68:7e:a8:c9:f4:7c:d6:63:53:b9:6c:0d:
a6:e3:4c:e3:75:ba:78:38:9e:29:b6:3b:e0:1e:f5:08:e1:6a:
f1:7b:0e:ba:7a:4d:cd:1f:71:71:9a:0b:b3:82:36:95:8a:65:
5d:79:27:29:e3:f5:87:73:84:35:59:0d:b8:37:0b:19:05:6a:
57:fb:02:41:aa:9d:39:d8:83:d0:b2:9d:67:cd:a8:86:62:24:
d9:26:55:ec:5c:38:17:63:27:07:ea:79:54:31:fb:f9:ef:db:
5e:c4:66:61:20:e1:91:31:d9:7a:7d:43:7e:c8:a1:38:8f:0c:
54:77:1f:e9:27:0f:0a:4d:0c:5e:77:bb:f1:e6:42:d5:b8:d8:
73:79:4c:e4:ea:e0:60:43:9c:d3:72:e1:ff:ba:6e:3e:eb:27:
2a:8c:f9:70:62:a7:db:c3:de:1e:d4:29:e5:5c:5d:61:75:a9:
c3:a0:49:05:35:48:e5:1e:18:7a:70:ff:27:a9:0d:e8:28:6c:
04:96:ad:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:42:44 2026 by rpki-client