Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ztBEvItRZfjgYNOLDuglRuMkkJk.roa
File: ztBEvItRZfjgYNOLDuglRuMkkJk.roa (raw, json)
Hash identifier: gXOd07wV1wLdJqj0CmoiAOTVDIDeih+Gv8v7+pXIqLQ=
Subject key identifier: CE:D0:44:BC:8B:51:65:F8:E0:60:D3:8B:0E:E8:25:46:E3:24:90:99
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DAFD4B9296D011D8DFF0BE05A83E467C1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ztBEvItRZfjgYNOLDuglRuMkkJk.roa
Signing time: Tue 21 Apr 2026 11:37:27 +0000
ROA not before: Tue 21 Apr 2026 11:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213734
IP address blocks: 147.90.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 12:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:d4:b9:29:6d:01:1d:8d:ff:0b:e0:5a:83:e4:67:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 21 11:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ced044bc8b5165f8e060d38b0ee82546e3249099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:09:a6:6b:6a:1e:62:b8:b6:f1:9b:22:1e:
ee:7d:9b:4a:a8:41:49:ff:20:6e:57:ac:6e:e8:c0:
b3:3b:72:83:ef:81:1a:c8:b7:2f:62:9e:4e:04:36:
35:66:8a:f1:81:3a:44:24:bd:b8:c2:b9:08:67:5f:
95:46:ef:bc:73:7c:9a:d1:6c:b2:0c:d0:da:c2:c0:
9d:4f:1c:04:97:46:ab:ee:58:1a:f1:b2:3a:39:4e:
95:27:0b:ea:de:85:25:80:75:5b:da:1f:2e:a1:64:
d3:7f:f3:ad:f8:b6:2b:f9:7f:21:99:8e:5a:e9:76:
a6:ac:41:91:ea:05:3b:8d:c9:18:2c:64:bb:a7:df:
75:c1:f5:11:24:fd:af:bf:b5:de:53:d0:eb:93:78:
d0:1a:3d:00:23:f6:d9:46:d0:df:d1:e4:bd:d0:77:
73:21:4b:ff:ef:92:8e:a5:9e:2d:e4:67:a7:7d:86:
4e:dd:8a:55:7b:36:7a:ed:1f:52:b6:90:60:98:9f:
f0:5f:ca:68:c2:11:69:15:72:99:3a:7a:86:56:af:
d4:4a:7b:63:3b:bf:6a:d2:97:57:1c:5f:15:f0:d8:
9e:84:45:a7:94:f5:53:95:4a:cd:c6:4a:31:8d:ec:
75:d3:a7:44:29:f0:33:fe:7a:9e:e9:1e:31:b2:fb:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D0:44:BC:8B:51:65:F8:E0:60:D3:8B:0E:E8:25:46:E3:24:90:99
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ztBEvItRZfjgYNOLDuglRuMkkJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.20.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1a:13:60:aa:ba:9f:fc:cd:51:82:4f:85:f6:2a:fc:42:bb:
71:c1:b8:a8:1c:29:42:8d:2b:13:1c:f7:99:9b:e5:5c:79:e9:
16:20:26:f8:0e:52:60:15:75:87:13:44:fb:b4:e3:ad:e2:7c:
8f:94:57:68:ee:09:6f:04:25:68:54:fb:49:9f:0c:d8:6d:4d:
1f:f0:57:0c:34:56:1d:60:ef:68:6d:45:4d:4d:51:e5:f4:b3:
74:ab:ed:25:28:70:44:02:8c:9c:b6:d1:a2:0f:50:e6:4a:06:
62:6d:86:5a:20:73:7a:b0:84:e2:29:92:b1:e5:5e:2d:c9:e5:
80:64:57:3f:1c:d2:e5:66:87:81:06:e6:73:56:e1:78:57:f7:
38:83:93:55:60:9c:d3:e3:24:40:a2:ff:be:0c:9a:8c:a7:ae:
b5:11:d3:27:c3:79:af:1c:b1:9d:de:fa:53:13:30:13:ea:e0:
b8:8a:d8:58:34:4f:53:31:51:e6:cb:df:fb:d4:5b:60:11:35:
6a:4c:00:68:7a:61:10:95:64:0f:6f:57:e0:0b:18:ea:55:18:
dc:c2:f2:95:ba:ce:b1:31:ab:be:e9:e5:f0:2a:95:2d:f6:c6:
c5:1c:0c:2a:f4:81:d9:b2:fa:b9:02:5b:4d:53:8d:da:1e:d1:
00:d7:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 20:29:56 2026 by rpki-client