Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uWHCJR8V5fHsESLNiryj9WGAvVs.roa
File: uWHCJR8V5fHsESLNiryj9WGAvVs.roa (raw, json)
Hash identifier: HNIF1JQLdI4jB4XtJSVoFuSxNACLmBdfvPOk8qeqfsM=
Subject key identifier: B9:61:C2:25:1F:15:E5:F1:EC:11:22:CD:8A:BC:A3:F5:61:80:BD:5B
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A15CCDCF50CD3CFBD417F0310CCD5191A3
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uWHCJR8V5fHsESLNiryj9WGAvVs.roa
Signing time: Wed 21 Oct 2026 04:52:34 +0000
ROA not before: Wed 21 Oct 2026 04:52:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61350
IP address blocks: 147.90.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:cd:cf:50:cd:3c:fb:d4:17:f0:31:0c:cd:51:91:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 21 04:52:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b961c2251f15e5f1ec1122cd8abca3f56180bd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:9c:04:28:83:f2:3e:f4:ca:10:f1:33:2c:
bf:91:35:c6:78:76:8b:ba:47:be:ec:1c:b6:b4:ba:
17:ca:fb:fc:3e:25:28:00:2a:8c:45:d7:71:ba:00:
ee:0a:b7:55:1c:03:ea:ad:32:3b:71:dd:e0:95:19:
19:d0:f1:b0:35:2b:43:81:3b:96:16:67:17:9a:2b:
d1:60:66:93:a5:0b:b6:91:a6:26:82:9d:b4:17:13:
51:95:92:c5:b4:fd:90:d5:40:d3:38:e1:b3:32:3f:
48:c2:4f:96:17:15:8d:5c:40:ee:7d:94:b5:f8:5a:
a5:7d:e1:4d:cf:1d:ac:d3:b7:a2:be:a0:b8:d9:39:
32:d7:f7:7c:ff:af:f4:b1:5a:f8:77:6f:b3:c7:f8:
88:94:51:72:98:75:38:a7:8a:3e:de:1b:fd:9f:0b:
45:3d:58:ef:b0:9b:d2:aa:63:96:0e:96:5c:09:96:
c9:0c:44:cd:a6:85:a4:93:25:68:c7:b3:e7:44:0e:
b3:6c:69:5b:b4:77:07:27:48:9f:cd:69:ed:18:8f:
8f:af:0a:47:d7:e2:eb:84:9f:70:c9:3f:88:e3:09:
e2:3a:21:c4:68:83:2b:83:96:56:65:5e:8f:eb:fb:
1c:da:40:df:e8:7c:ed:3f:e2:96:38:ee:2a:4c:bf:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:61:C2:25:1F:15:E5:F1:EC:11:22:CD:8A:BC:A3:F5:61:80:BD:5B
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uWHCJR8V5fHsESLNiryj9WGAvVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:05:97:6c:22:01:0a:cf:ca:af:8d:5f:a6:d2:ae:f7:f2:7f:
76:2e:85:2b:10:cb:b0:71:08:83:99:3b:ce:a0:3c:c4:63:05:
13:5b:e0:77:fc:5e:d7:0c:f8:34:29:aa:c9:a9:b1:69:a4:1f:
8e:97:b5:35:06:2a:68:97:0b:bd:b4:28:65:dc:3a:66:cc:ec:
79:54:0f:8f:4c:f2:df:74:98:9d:7f:1b:49:2e:d9:15:b8:e1:
b1:20:29:16:2c:75:90:e9:56:7e:e0:ce:05:4e:ea:da:dd:8b:
5d:37:2b:2e:60:ff:4c:d3:44:c7:85:28:44:50:9b:cc:8a:ba:
63:a9:b2:e4:d1:e4:80:f3:f8:fa:ba:9c:ed:5a:7b:9f:ab:01:
bb:ca:ac:77:d8:fc:a6:68:c3:a4:c8:72:0b:be:61:47:9e:db:
df:7e:a0:0f:82:94:fc:a0:ad:89:f6:13:ea:6c:4d:d6:fe:16:
e8:b7:ac:cd:95:67:a1:c7:1b:8e:1f:8f:75:f2:e2:c7:10:1f:
f2:39:0b:da:42:29:80:63:ff:10:49:32:b1:9a:45:2b:d8:ee:
46:2b:5f:34:b8:2f:99:ab:c9:02:0e:af:8a:6a:7a:0e:03:15:
54:28:b7:d2:47:e5:c8:40:9e:fe:ff:f7:6c:7d:03:5f:12:51:
45:e0:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:19 2026 by rpki-client