Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-7OOdD7x8NRkX8DK7YLWBr4dJPM.roa
File: 1-7OOdD7x8NRkX8DK7YLWBr4dJPM.roa (raw, json)
Hash identifier: dSBserSaQ2f/jlJd0Pf47eFwSsiyL1ktZWi3m0pySX4=
Subject key identifier: FB:B3:8E:74:3E:F1:F0:D4:64:5F:C0:CA:ED:82:D6:06:BE:1D:24:F3
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0D8A2FA9803DAEEB2BF693A748B9D66E3
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-7OOdD7x8NRkX8DK7YLWBr4dJPM.roa
Signing time: Fri 25 Sep 2026 12:55:54 +0000
ROA not before: Fri 25 Sep 2026 12:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218574
IP address blocks: 147.90.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a2:fa:98:03:da:ee:b2:bf:69:3a:74:8b:9d:66:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 25 12:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbb38e743ef1f0d4645fc0caed82d606be1d24f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:f2:90:cc:5a:e2:0b:b9:6d:be:75:47:7a:
87:e0:c5:a1:13:51:2c:ee:6e:15:64:94:0c:31:ef:
16:32:a0:87:42:d0:ee:b8:34:f0:38:31:28:b0:41:
c1:fd:e0:98:c6:ad:f4:64:a0:2b:f8:39:74:41:46:
40:79:13:97:02:14:f1:68:eb:53:cf:de:63:63:9f:
3b:27:6b:22:a9:87:42:b8:36:49:c2:96:f1:64:13:
ed:de:20:35:40:22:6f:a2:ba:e5:05:7d:08:f3:b0:
b0:79:c5:07:76:92:29:02:30:15:da:40:6b:40:a6:
d2:a3:fa:35:36:2a:31:67:6e:55:2d:f2:fc:6d:cc:
17:af:ed:13:27:7d:fe:71:71:ee:fc:11:8e:f0:3f:
a2:fa:c7:97:e8:4a:0a:03:86:f9:7b:20:2e:d4:e4:
3f:e7:ef:ca:40:47:a2:1d:e2:42:7e:d5:70:72:5a:
7d:a5:89:e4:01:cd:97:8b:68:ff:3d:12:8d:50:b8:
86:4f:90:2b:a5:38:bb:90:4d:68:46:b2:d2:7a:d6:
b6:e1:ff:5c:67:ac:e9:5b:a3:4a:dc:e4:ae:34:73:
1b:58:18:06:b5:2c:4d:b0:f9:bb:72:e9:c8:c1:c8:
d0:6b:30:e3:f1:b6:44:ee:13:26:11:ab:84:93:d7:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B3:8E:74:3E:F1:F0:D4:64:5F:C0:CA:ED:82:D6:06:BE:1D:24:F3
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-7OOdD7x8NRkX8DK7YLWBr4dJPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b2:f0:d3:ff:c8:b7:3a:06:72:28:84:ac:7d:16:d7:22:46:
a6:b9:01:98:2c:3a:23:88:4e:dd:ff:67:55:f7:6e:ef:7a:a0:
f9:7e:89:90:72:7f:55:cf:47:21:7b:70:aa:fd:7c:c4:f2:2a:
7c:bc:5d:dc:87:bf:30:90:c3:71:00:12:6b:f0:81:39:8c:ff:
9a:5c:24:a5:64:cf:87:2c:cd:65:92:f4:f8:f9:6f:13:c4:51:
11:64:25:54:22:e9:26:4b:b8:72:52:9c:24:80:1a:c5:90:1c:
c9:c3:8f:89:84:fc:99:41:b1:89:0d:34:2c:64:09:18:0c:3c:
da:ec:4f:1e:61:d2:a5:85:8b:8b:68:a1:ce:d4:a1:11:02:db:
3d:fd:1f:05:cf:51:0e:18:75:29:c7:7e:b0:72:56:6f:79:03:
b5:80:b0:6c:7a:f4:9a:8d:fc:5a:30:14:98:8e:ce:10:09:ae:
39:78:47:d3:34:55:9a:14:f4:bd:45:c1:65:6d:ae:6f:9d:46:
6e:76:5f:b5:af:b4:2d:79:b9:ba:ed:3b:53:ae:24:25:1b:48:
be:26:e5:e0:2c:f2:1a:63:1d:04:39:26:2b:cb:6b:52:12:70:
db:97:fe:36:f7:51:90:c1:79:30:c0:70:1e:84:f6:22:5c:cd:
8d:a9:82:e2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDYovqYA9rusr9pOnSLnWbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwOTI1MTI1NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmIzOGU3NDNlZjFmMGQ0NjQ1ZmMwY2FlZDgyZDYwNmJlMWQyNGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9fykMxa4gu5bb51R3qH4MWhE1Es
7m4VZJQMMe8WMqCHQtDuuDTwODEosEHB/eCYxq30ZKAr+Dl0QUZAeROXAhTxaOtT
z95jY587J2siqYdCuDZJwpbxZBPt3iA1QCJvorrlBX0I87CwecUHdpIpAjAV2kBr
QKbSo/o1NioxZ25VLfL8bcwXr+0TJ33+cXHu/BGO8D+i+seX6EoKA4b5eyAu1OQ/
5+/KQEeiHeJCftVwclp9pYnkAc2Xi2j/PRKNULiGT5ArpTi7kE1oRrLSeta24f9c
Z6zpW6NK3OSuNHMbWBgGtSxNsPm7cunIwcjQazDj8bZE7hMmEauEk9fGAQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPuzjnQ+8fDUZF/Ayu2C1ga+HSTzMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvMS03T09kRDd4OE5Sa1g4REs3WUxXQnI0ZEpQTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjYvMmJhOTdlLTU5OGItNDhkZC04ZDU2LWY1ZmI3MWI5YTUx
Zi8xLzhFcFlCSDgzdThCWGxFdV9qSzJIUW9lVmt0by5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJNatzAN
BgkqhkiG9w0BAQsFAAOCAQEAjLLw0//ItzoGciiErH0W1yJGprkBmCw6I4hO3f9n
Vfdu73qg+X6JkHJ/Vc9HIXtwqv18xPIqfLxd3Ie/MJDDcQASa/CBOYz/mlwkpWTP
hyzNZZL0+PlvE8RREWQlVCLpJku4clKcJIAaxZAcycOPiYT8mUGxiQ00LGQJGAw8
2uxPHmHSpYWLi2ihztShEQLbPf0fBc9RDhh1Kcd+sHJWb3kDtYCwbHr0mo38WjAU
mI7OEAmuOXhH0zRVmhT0vUXBZW2ub51GbnZfta+0LXm5uu07U64kJRtIvibl4Czy
GmMdBDkmK8trUhJw25f+NvdRkMF5MMBwHoT2IlzNjamC4g==
-----END CERTIFICATE-----
Generated at Tue Sep 29 01:12:44 2026 by rpki-client