Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/x0XHHb0QexQT6PvFLcb_-sFfbHY.roa
File: x0XHHb0QexQT6PvFLcb_-sFfbHY.roa (raw, json)
Hash identifier: 6xZzxrT3o+iYK9X3Z6vge4jQhaDtb9nnIi0NeWbG2wk=
Subject key identifier: C7:45:C7:1D:BD:10:7B:14:13:E8:FB:C5:2D:C6:FF:FA:C1:5F:6C:76
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A01B7FFE9E5BFE0550C14AE52527D39568
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/x0XHHb0QexQT6PvFLcb_-sFfbHY.roa
Signing time: Wed 19 Aug 2026 19:29:28 +0000
ROA not before: Wed 19 Aug 2026 19:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 147.90.187.0/24 maxlen: 24
147.90.192.0/20 maxlen: 20
147.90.200.0/21 maxlen: 21
2a04:30c0::/32 maxlen: 32
2a06:25c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:7f:fe:9e:5b:fe:05:50:c1:4a:e5:25:27:d3:95:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 19 19:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c745c71dbd107b1413e8fbc52dc6fffac15f6c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:05:5b:d3:16:7e:c7:fd:b8:b9:aa:cf:e1:
3a:67:88:6a:35:a6:53:c9:d3:52:c5:c8:3b:31:48:
3c:f8:95:73:2a:3c:40:73:c6:6d:61:f9:3e:da:55:
fe:ee:38:da:79:9d:f2:f0:83:2e:07:44:bd:38:61:
aa:27:74:c2:0e:eb:9c:29:3a:6e:13:dd:a4:2e:7c:
f6:84:a0:cd:4d:03:99:f8:71:3d:84:2c:6e:78:2e:
e3:8b:67:cb:a7:5f:0f:61:00:52:9a:d8:c7:13:fd:
79:a2:8c:bc:39:e8:38:f0:85:6e:8c:83:f7:83:31:
e9:fc:ee:2a:80:d4:7d:12:55:a6:96:cf:e6:67:6b:
4c:6f:b5:e7:0d:e7:f3:ed:0f:f2:cc:33:fc:22:1e:
88:c2:02:0f:b9:b3:c3:fc:2a:35:10:83:e7:c5:6f:
3f:3f:e0:0e:d9:93:fa:a0:81:bc:ad:64:db:a7:fb:
b4:93:0d:ad:a8:29:bf:9a:57:cc:2b:56:5d:76:0a:
f1:bc:ac:96:3c:7f:68:74:b0:9b:73:84:6a:43:0b:
80:94:fa:87:9c:a6:50:87:97:29:a6:ee:34:a7:4b:
58:ac:82:c2:66:a5:67:81:33:6e:05:e7:57:06:2a:
1d:9e:33:d0:9d:37:fc:23:8b:4d:a4:c4:55:e5:78:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:45:C7:1D:BD:10:7B:14:13:E8:FB:C5:2D:C6:FF:FA:C1:5F:6C:76
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/x0XHHb0QexQT6PvFLcb_-sFfbHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.187.0/24
147.90.192.0/20
IPv6:
2a04:30c0::/32
2a06:25c0::/32
Signature Algorithm: sha256WithRSAEncryption
b9:f1:c2:fd:ad:39:b5:6e:49:93:01:e4:96:6f:f9:d1:c4:52:
45:51:28:f5:77:6f:4e:06:fe:6a:6b:4a:8e:76:0e:19:13:18:
f5:d5:6f:9a:3b:30:d5:82:f2:ba:e5:f9:db:02:d7:a4:cf:97:
4f:9f:ef:87:11:b1:3e:c0:27:d6:34:36:e8:84:1b:9d:bd:e7:
fe:5c:aa:ae:9a:b4:27:ad:5c:13:d2:fe:a0:36:40:40:98:58:
76:67:0d:2d:d8:6f:93:e6:dd:7c:43:ba:cf:7f:56:21:0a:7a:
fe:b7:7f:cb:95:5a:4b:d4:24:6f:d6:c7:a3:5a:6e:e5:0e:cb:
49:ea:67:38:26:e3:b3:07:72:a6:ee:a2:b6:40:be:22:4f:da:
f2:89:9e:96:ff:fc:44:39:c6:90:96:68:5f:9d:b3:56:f2:ce:
c6:68:b2:cc:3e:9f:1c:57:aa:1e:85:5f:5b:b5:e8:c8:73:c6:
23:21:2d:9c:68:d6:95:ea:e5:1b:b1:f7:e2:ff:93:22:c1:45:
a6:7b:7c:bc:db:4e:7e:d8:a9:e9:33:cd:f0:ee:eb:23:98:5c:
dc:2a:e9:c4:b1:d6:c5:f8:06:07:11:c7:12:7d:12:ed:cc:c7:
04:b0:1a:6c:13:66:c5:85:6d:74:1f:a6:bf:af:39:40:9d:01:
12:d9:41:5a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaAbf/6eW/4FUMFK5SUn05VoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwODE5MTkyOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzQ1YzcxZGJkMTA3YjE0MTNlOGZiYzUyZGM2ZmZmYWMxNWY2Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobEFW9MWfsf9uLmqz+E6Z4hqNaZT
ydNSxcg7MUg8+JVzKjxAc8ZtYfk+2lX+7jjaeZ3y8IMuB0S9OGGqJ3TCDuucKTpu
E92kLnz2hKDNTQOZ+HE9hCxueC7ji2fLp18PYQBSmtjHE/15ooy8Oeg48IVujIP3
gzHp/O4qgNR9ElWmls/mZ2tMb7XnDefz7Q/yzDP8Ih6IwgIPubPD/Co1EIPnxW8/
P+AO2ZP6oIG8rWTbp/u0kw2tqCm/mlfMK1ZddgrxvKyWPH9odLCbc4RqQwuAlPqH
nKZQh5cppu40p0tYrILCZqVngTNuBedXBiodnjPQnTf8I4tNpMRV5XhlNwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMdFxx29EHsUE+j7xS3G//rBX2x2MB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEveDBYSEhiMFFleFFUNlB2RkxjYl8tc0ZmYkhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAk1q7AwQE
k1rAMBQEAgACMA4DBQAqBDDAAwUAKgYlwDANBgkqhkiG9w0BAQsFAAOCAQEAufHC
/a05tW5JkwHklm/50cRSRVEo9XdvTgb+amtKjnYOGRMY9dVvmjsw1YLyuuX52wLX
pM+XT5/vhxGxPsAn1jQ26IQbnb3n/lyqrpq0J61cE9L+oDZAQJhYdmcNLdhvk+bd
fEO6z39WIQp6/rd/y5VaS9Qkb9bHo1pu5Q7LSepnOCbjswdypu6itkC+Ik/a8ome
lv/8RDnGkJZoX52zVvLOxmiyzD6fHFeqHoVfW7XoyHPGIyEtnGjWlerlG7H34v+T
IsFFpnt8vNtOftip6TPN8O7rI5hc3CrpxLHWxfgGBxHHEn0S7czHBLAabBNmxYVt
dB+mv685QJ0BEtlBWg==
-----END CERTIFICATE-----
Generated at Tue Sep 8 18:13:57 2026 by rpki-client