Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uJggeWWdWuhmVXKsijYsFmTnUes.roa
File: uJggeWWdWuhmVXKsijYsFmTnUes.roa (raw, json)
Hash identifier: H9uRFR+4cVbPnw2u7W7ihc5TeXt2YxH/t61xpLEZyqo=
Subject key identifier: B8:98:20:79:65:9D:5A:E8:66:55:72:AC:8A:36:2C:16:64:E7:51:EB
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A03791F7E71DFFF8C20523E07201683A0E
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uJggeWWdWuhmVXKsijYsFmTnUes.roa
Signing time: Tue 25 Aug 2026 06:18:28 +0000
ROA not before: Tue 25 Aug 2026 06:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 147.90.49.0/24 maxlen: 24
158.173.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:91:f7:e7:1d:ff:f8:c2:05:23:e0:72:01:68:3a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 25 06:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8982079659d5ae8665572ac8a362c1664e751eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:b2:01:91:62:e7:b7:2d:93:b0:f4:ae:cb:
b1:8a:2f:14:3b:2b:7c:67:39:76:c0:63:53:b1:30:
3b:c7:c9:9d:be:b5:08:8b:84:25:d2:e1:12:07:d5:
87:27:df:b1:87:a2:80:ac:96:81:42:ac:ae:12:88:
b0:61:35:9e:14:40:0e:c6:15:15:fc:e1:aa:e1:34:
1e:79:bc:73:9a:b1:63:86:74:b3:27:2a:53:ce:6f:
34:41:f6:e1:42:c9:3a:70:2d:c3:5b:04:ea:94:44:
68:75:8b:2a:5e:d9:76:f5:2e:10:c6:ed:34:1b:73:
15:6a:3f:ff:ec:fe:3a:7e:07:2d:59:f9:14:8b:0f:
58:aa:f8:0e:71:88:41:87:4b:1d:22:4c:7e:e0:58:
63:fc:e4:1f:1d:3a:5b:97:88:b6:3b:f4:fc:95:85:
b0:89:c5:9b:f3:57:3c:96:7b:7e:5d:fc:9a:9b:d4:
01:8e:96:52:02:9e:01:1f:9e:53:ac:86:c4:ae:e8:
67:7e:5e:11:d1:3d:e0:3e:33:66:2a:70:2b:5c:62:
3c:46:4b:b4:d4:eb:90:6a:6f:e4:0a:c4:32:82:b6:
ed:cc:84:41:12:59:13:4b:4c:00:63:dd:89:4b:8e:
eb:ef:67:b4:f9:c9:8a:fd:6e:79:ca:44:47:f7:94:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:98:20:79:65:9D:5A:E8:66:55:72:AC:8A:36:2C:16:64:E7:51:EB
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uJggeWWdWuhmVXKsijYsFmTnUes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.49.0/24
158.173.209.0/24
Signature Algorithm: sha256WithRSAEncryption
35:72:c5:07:d6:9d:97:48:c4:b7:65:05:a5:a3:ac:06:70:52:
4d:f5:de:ce:4a:da:33:b7:ec:87:b8:55:98:ff:1a:26:7d:c6:
a2:01:7a:db:b3:42:e6:93:2b:f2:7e:7a:36:c8:10:ee:f9:ce:
71:ee:f8:91:0b:5a:04:b3:b6:8c:83:fa:f1:f7:a4:1b:a3:e6:
e3:80:bd:d0:37:a9:94:cd:eb:cf:e9:66:75:1d:d1:69:21:86:
e4:77:f2:60:a3:c1:16:57:5f:28:4d:f5:47:63:b7:5c:aa:45:
92:e9:db:3f:d0:20:5c:d0:24:f7:68:6d:c9:a9:99:8e:17:83:
ee:a1:e4:3c:7d:38:c3:8c:7b:bf:52:51:8e:94:1b:32:19:d1:
b2:8a:2d:c1:74:c6:11:f9:a7:c1:7c:98:e1:f9:ef:5b:5f:c3:
e6:f3:b2:a8:24:e5:e1:eb:8b:5b:f1:fd:64:37:c1:9a:c4:00:
03:55:6a:a6:0b:47:bf:8a:5c:ed:ef:f1:ca:e9:96:cc:e0:08:
ea:46:06:c1:d1:a7:f2:84:4b:69:21:a0:fa:cc:7b:7c:b6:7b:
20:c5:0c:93:cf:ed:90:99:ef:19:39:12:d2:34:de:83:a4:ef:
c2:a1:de:b0:d2:ca:a1:e1:5d:c8:89:cf:1a:4c:20:76:14:3c:
e4:ae:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:52 2026 by rpki-client