Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/xtBF9w_Ge4-IUHWQRYkTA5X1aAE.roa
File: xtBF9w_Ge4-IUHWQRYkTA5X1aAE.roa (raw, json)
Hash identifier: /TCe/GKmfxIoNOwWBFea6UIf4bp2AUTdlyuZ5r8B65M=
Subject key identifier: C6:D0:45:F7:0F:C6:7B:8F:88:50:75:90:45:89:13:03:95:F5:68:01
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F031DDD8194A7FBAA60AA2F6499269E13
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/xtBF9w_Ge4-IUHWQRYkTA5X1aAE.roa
Signing time: Fri 26 Jun 2026 08:48:36 +0000
ROA not before: Fri 26 Jun 2026 08:48:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149540
IP address blocks: 147.90.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:1d:dd:81:94:a7:fb:aa:60:aa:2f:64:99:26:9e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 26 08:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6d045f70fc67b8f885075904589130395f56801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:82:6a:23:4a:61:5c:eb:b8:29:21:7e:42:
2e:3a:f8:57:f4:d6:d1:1f:f5:bf:a5:b9:ac:aa:ad:
45:cd:01:f1:1f:c4:8d:c1:3f:d8:0f:05:a8:52:b8:
8d:11:94:e4:9d:eb:32:28:cc:a1:69:2b:18:4c:c1:
74:d3:1b:9f:8e:b1:50:d4:21:ad:b5:cf:20:47:e3:
20:02:3f:6c:f4:d5:b1:0d:27:ae:56:ae:32:d3:e2:
1f:4e:e2:26:22:75:a0:17:f2:4d:e6:b0:6b:4e:97:
73:c2:c9:1b:c2:89:86:69:ab:b5:e8:6f:ef:7b:a9:
a6:04:86:89:37:fd:bd:7b:82:46:17:c7:82:c5:1a:
aa:1e:69:88:0b:9e:41:e8:20:17:81:7c:72:e4:d0:
0f:6b:0e:a9:33:7d:2e:f1:68:68:47:68:79:2a:5a:
39:f4:8f:9b:3b:f5:7a:6f:b9:7d:3a:9d:14:72:ed:
bd:53:eb:b5:82:31:94:1f:23:55:92:6b:01:42:7e:
31:76:f1:7b:d3:ef:46:df:80:65:c4:bc:d7:5b:af:
2b:b5:48:a8:75:15:e3:c8:a4:e5:0b:c1:7b:7a:54:
fb:1d:d2:61:b4:7d:ef:d1:44:24:75:fb:cf:a3:61:
1b:3e:46:4a:28:41:66:8e:6e:a4:c5:70:ef:aa:bb:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:45:F7:0F:C6:7B:8F:88:50:75:90:45:89:13:03:95:F5:68:01
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/xtBF9w_Ge4-IUHWQRYkTA5X1aAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:61:e0:d7:64:54:e5:38:a2:68:ef:38:bc:d0:7c:57:e0:12:
01:a6:4a:27:5b:7d:65:1d:10:27:bb:72:5d:6e:d0:0b:15:5a:
d1:55:0e:8f:11:30:ee:c2:11:aa:71:2c:ce:b1:d5:49:18:39:
4a:07:6f:3d:0f:0f:d3:91:5d:0a:5e:57:44:89:f9:00:14:0d:
81:2d:96:5e:64:2c:b9:ce:e5:5f:2b:00:8c:50:68:1c:52:1e:
ea:e0:8b:31:51:99:60:04:81:4a:18:85:b1:2d:d7:7d:29:c7:
93:7d:3e:4b:a4:6b:2d:c5:de:9d:aa:b4:d7:e7:e3:61:fb:ee:
0a:91:81:b1:dc:a8:da:0a:66:63:85:6c:24:bf:73:50:26:1d:
c3:50:5b:88:59:f4:0c:68:a1:ba:02:6f:e7:07:4c:68:fb:a5:
95:b0:f7:53:3a:30:64:93:be:7d:12:34:df:6d:22:65:bf:8a:
15:a4:1f:e3:f9:7a:53:de:95:01:2c:2e:03:fa:6b:f7:88:74:
c5:a2:f4:60:03:92:61:5e:94:97:86:bd:bf:40:6f:55:65:ab:
ad:64:4d:29:c2:47:6b:e8:bd:75:c3:d2:ef:2b:87:33:a3:87:
b7:39:b2:c7:bb:ac:33:12:32:83:cf:cd:3b:ad:54:ac:ff:63:
20:f5:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:18 2026 by rpki-client