Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/znKN8zf9cRVeny8jorOI4tscrLw.roa
File: znKN8zf9cRVeny8jorOI4tscrLw.roa (raw, json)
Hash identifier: V4GYyHMhDbrkQMhVYpU09bq82NYr0wOUgzGpToeWiVs=
Subject key identifier: CE:72:8D:F3:37:FD:71:15:5E:9F:2F:23:A2:B3:88:E2:DB:1C:AC:BC
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0190847EBD60B4F3E5B30775151BC4937
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/znKN8zf9cRVeny8jorOI4tscrLw.roa
Signing time: Wed 19 Aug 2026 07:59:28 +0000
ROA not before: Wed 19 Aug 2026 07:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219182
IP address blocks: 147.90.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:08:47:eb:d6:0b:4f:3e:5b:30:77:51:51:bc:49:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 19 07:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce728df337fd71155e9f2f23a2b388e2db1cacbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9d:2e:82:5d:34:cd:9e:9e:8a:98:7a:c8:47:
f9:af:e0:3f:da:82:5c:2e:be:67:7e:6d:98:68:af:
2b:e5:e3:57:4a:e7:fa:3e:1b:bd:0e:19:db:fa:df:
a4:a2:61:19:b0:db:27:8d:2e:7e:05:a7:d0:49:51:
27:c2:8d:77:91:49:ff:f2:48:6e:1e:42:a7:85:56:
a2:e6:2c:9e:d8:7f:77:72:52:3f:66:6b:25:e0:b2:
ca:60:78:aa:62:f7:2a:35:9b:f3:41:62:e7:af:ff:
3b:89:ef:2f:c9:7f:95:ce:1e:49:bb:e8:46:4a:c1:
28:42:73:d8:bb:cc:99:27:de:ae:4a:f7:12:78:c7:
36:55:19:aa:d7:3d:fc:e3:4f:70:23:2a:12:6f:d2:
2d:a5:da:db:6e:d4:ef:5d:65:68:ae:5e:8b:13:59:
48:18:1c:bb:cb:dc:41:8e:3b:e0:a1:ae:f3:87:ff:
6f:9e:26:a2:ad:c6:81:25:03:8b:bf:d6:e4:66:f1:
47:13:83:77:10:55:26:fe:ab:5c:d6:58:1d:91:00:
95:d2:47:51:37:ac:6d:a1:0c:30:dd:06:1e:64:a0:
14:e8:f6:53:d4:5e:bf:c6:9e:e2:d3:61:33:34:e1:
e9:b3:93:38:25:2d:ec:e3:bf:d9:c8:41:09:49:1d:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:72:8D:F3:37:FD:71:15:5E:9F:2F:23:A2:B3:88:E2:DB:1C:AC:BC
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/znKN8zf9cRVeny8jorOI4tscrLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.30.0/24
Signature Algorithm: sha256WithRSAEncryption
75:8b:e1:1b:eb:2e:66:d6:d6:b8:24:01:de:f2:d5:9f:9b:a6:
0d:43:b4:22:d6:10:12:ba:f8:8e:32:94:8b:12:bf:bc:e5:45:
77:6d:31:f0:75:6a:b4:ab:c1:2e:bc:a4:00:3b:2c:46:9e:75:
f5:bc:c7:35:ae:61:64:1a:e4:5f:81:37:f8:b5:8e:82:03:66:
54:35:8a:2f:95:21:49:bd:b3:53:f0:24:29:c5:b3:d2:40:64:
b2:95:32:a7:cb:0e:22:f3:e6:a0:fb:56:9c:4c:4d:39:35:b0:
e3:3e:b3:76:0c:08:e1:c9:47:f7:5d:a1:56:6f:05:84:0d:70:
8c:d3:3c:be:fc:07:49:a8:29:85:1d:10:ad:54:aa:d4:58:21:
a4:bb:e3:ba:1b:85:35:b7:8e:0f:b6:72:49:05:ed:96:e0:35:
f0:9c:de:7a:9e:51:20:9c:1b:22:eb:77:3f:ac:45:62:5a:31:
ed:34:7f:84:ae:f8:42:26:42:af:dc:20:9f:4b:60:fc:59:62:
db:29:64:c1:1c:48:1b:e9:f5:83:ef:a4:94:10:07:e2:ec:d9:
d3:ac:8c:7e:c3:19:ac:c1:0b:dd:de:b6:fa:d3:05:3b:23:67:
ff:82:65:84:32:f6:85:1d:8c:a7:26:4f:66:67:d3:80:62:3c:
b4:21:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:04:23 2026 by rpki-client