Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/90fbs6INI7k6L2dcFgAyFPdas3Q.roa
File: 90fbs6INI7k6L2dcFgAyFPdas3Q.roa (raw, json)
Hash identifier: aMrXwblbKo0nbHJFMktLKEieI5pQLYv3eyj9v/R4Das=
Subject key identifier: F7:47:DB:B3:A2:0D:23:B9:3A:2F:67:5C:16:00:32:14:F7:5A:B3:74
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A05D051B25798ED43CEA3B004F718FE94B
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/90fbs6INI7k6L2dcFgAyFPdas3Q.roa
Signing time: Tue 01 Sep 2026 12:50:10 +0000
ROA not before: Tue 01 Sep 2026 12:50:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0f:63c0::/29 maxlen: 29
2a0f:89c0::/29 maxlen: 29
2a13:d1c0::/29 maxlen: 29
2a13:dd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:05:1b:25:79:8e:d4:3c:ea:3b:00:4f:71:8f:e9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Sep 1 12:50:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f747dbb3a20d23b93a2f675c16003214f75ab374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:df:75:a2:14:e4:a7:a8:5e:75:1e:af:d4:
a6:01:03:b6:1f:22:2b:02:c4:59:b2:21:fd:07:1c:
a4:0e:8c:96:6b:48:90:fc:bf:d4:a3:43:ba:a3:ea:
8a:1a:dc:da:58:82:bd:63:7a:95:4a:06:41:53:94:
02:f1:57:7b:63:73:2e:3f:50:7b:4b:2c:50:5f:70:
cc:0e:40:2c:4e:0b:81:5a:18:46:7e:5d:70:0a:e9:
09:50:e6:8a:59:ff:d8:0b:44:12:40:2a:d8:86:23:
7b:1c:d9:05:9c:da:2a:54:a9:db:21:1b:4c:0d:79:
fe:28:f1:71:9f:d4:02:eb:4d:d0:80:72:21:21:8d:
dd:6c:64:8e:b3:90:9a:6e:b7:10:a6:5b:9d:fd:db:
0a:32:2b:1a:56:b5:74:e5:5c:5e:e3:ba:55:71:d2:
2f:b8:c1:89:74:a8:70:37:9f:fd:1e:78:cd:17:be:
6a:61:9c:46:17:3e:1a:07:c8:4d:1c:1a:f3:24:32:
93:cc:cb:57:b7:85:c4:66:54:f0:01:7e:86:79:d7:
9b:e1:be:29:03:e7:14:c3:e5:cb:9e:a7:f2:2d:bc:
e3:2e:f1:25:31:8c:11:cd:07:7f:f1:47:dc:36:f5:
28:4f:bd:96:79:e1:29:37:e6:75:50:15:43:88:87:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:47:DB:B3:A2:0D:23:B9:3A:2F:67:5C:16:00:32:14:F7:5A:B3:74
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/90fbs6INI7k6L2dcFgAyFPdas3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:63c0::/29
2a0f:89c0::/29
2a13:d1c0::/29
2a13:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
32:ec:86:04:d5:12:17:61:c7:1f:0d:b5:69:72:ac:b0:db:b7:
d4:f9:b4:a7:03:b4:9c:57:80:6e:57:16:40:3f:34:92:78:6e:
76:8f:09:77:26:0c:7d:1b:f9:38:d2:24:ae:09:38:2b:53:f6:
ec:3c:46:8b:aa:e3:2b:80:86:4d:92:08:2f:01:42:08:d6:ad:
b1:84:56:71:b5:c4:32:7f:ff:76:85:66:d6:3d:4e:56:11:7a:
e0:4d:a6:7a:5a:72:e6:0a:af:01:08:6c:ff:31:6a:2b:77:da:
45:72:b0:83:15:e9:70:c6:bf:c1:f0:11:4b:90:ea:71:33:1d:
80:ab:dd:27:2b:d4:c3:27:14:a2:25:82:96:40:47:1b:12:11:
d3:16:bf:fb:3f:78:71:65:7e:f1:3d:f6:c9:0a:6b:92:f8:43:
fe:d1:49:f0:b3:29:3c:c8:cb:91:78:4a:09:f6:75:61:1c:11:
ef:e8:1e:d9:90:86:26:07:81:d4:d5:fe:a0:60:5f:13:41:64:
af:e7:c1:f3:48:c6:66:8a:e5:a3:ba:b4:35:2b:4b:83:2b:3d:
57:4d:c2:f3:be:e5:a2:20:2f:ff:88:60:b3:90:5b:7e:d5:09:
c8:e2:f7:be:cf:6d:a4:06:ee:8f:64:d2:27:ab:1d:6e:65:b2:
b7:ef:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:40 2026 by rpki-client