Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1aAzI_xpSFc67PdJ9ILbEgIpiGY.roa
File: 1aAzI_xpSFc67PdJ9ILbEgIpiGY.roa (raw, json)
Hash identifier: ccLVerOwfwcaZCdCjfExka+/CCFVv8Kr44XoFYptK0c=
Subject key identifier: D5:A0:33:23:FC:69:48:57:3A:EC:F7:49:F4:82:DB:12:02:29:88:66
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DE20AD6772C039F9A3FA118214FC30E13
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1aAzI_xpSFc67PdJ9ILbEgIpiGY.roa
Signing time: Fri 01 May 2026 05:37:34 +0000
ROA not before: Fri 01 May 2026 05:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147003
IP address blocks: 147.90.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:0a:d6:77:2c:03:9f:9a:3f:a1:18:21:4f:c3:0e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 1 05:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5a03323fc6948573aecf749f482db1202298866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:1a:1d:97:e2:47:e4:01:1f:5e:da:82:3e:
68:f9:ce:dc:99:82:d5:4d:a9:38:a5:ee:06:21:53:
ae:e5:de:7f:98:b3:6d:07:e3:80:68:a3:70:ae:44:
cd:ca:73:a8:0e:d4:5a:af:4f:8e:1d:49:37:68:85:
e4:99:f5:76:e3:da:99:19:e7:79:9d:1e:31:8d:53:
8e:01:48:2c:1b:7e:e9:dc:2f:48:cf:6c:9d:41:c6:
b7:c6:0e:30:9e:77:5d:40:c1:c6:40:5e:71:0a:0c:
fa:55:b7:33:ad:74:b9:a0:da:69:3c:a6:e8:8c:90:
f1:67:31:e3:65:4c:e4:bd:e0:57:5a:26:a5:4e:7b:
06:57:bd:6e:39:ea:22:1c:e9:2e:b5:07:b4:b1:f6:
4c:0f:f2:43:5b:b2:9b:98:09:97:82:af:37:29:4e:
99:64:ad:8b:34:b7:3c:00:d4:6e:cf:89:5c:28:03:
72:87:b5:fa:ac:ed:d3:68:81:1a:f1:35:5c:ff:3f:
2f:9d:3a:00:8b:c1:5d:f7:7b:7d:ca:29:03:2c:c0:
31:cb:6b:6f:ff:44:f0:28:40:eb:57:9b:f2:8b:38:
0e:13:a0:a8:a1:fd:64:aa:f3:ca:19:47:af:3e:d0:
b9:fa:66:fa:5b:1c:d1:89:a1:37:70:51:37:5c:2b:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A0:33:23:FC:69:48:57:3A:EC:F7:49:F4:82:DB:12:02:29:88:66
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1aAzI_xpSFc67PdJ9ILbEgIpiGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.66.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:46:f4:2d:1e:2e:cd:c9:dd:e5:f1:7c:ab:ee:05:90:9c:80:
3b:20:39:96:11:ab:ec:95:9a:2f:d9:72:a1:4e:9a:b7:46:3f:
a6:d0:c7:2e:4f:59:38:7b:ca:ba:02:bb:fa:f7:ab:58:17:d4:
5e:50:9f:0c:3e:80:5c:bb:cb:e8:5d:bb:89:64:bd:5a:e7:45:
01:82:44:f3:a9:e7:bc:dd:1e:6f:fd:b2:f9:90:5a:db:1b:a7:
be:fa:f4:81:d0:1c:09:dd:18:95:b3:3f:e5:77:b1:da:43:c0:
3e:c0:ab:06:96:09:0a:84:ac:a0:a5:2b:e9:9b:ff:22:d2:45:
ca:14:54:a9:dc:89:02:cf:ca:0f:5e:42:c3:fd:5d:46:4e:5a:
1e:14:bf:9a:a4:ab:0a:a7:ea:18:79:58:a1:ce:be:d3:8b:16:
74:19:5f:ca:8c:99:8a:25:03:07:76:ee:bf:1a:e4:ef:65:a7:
bd:9d:0e:77:ad:0e:fd:01:2c:4c:d5:59:a8:39:33:c7:4c:f9:
2e:ea:41:2e:2f:aa:0e:bd:27:55:04:ad:88:94:bb:d8:2e:61:
57:70:b7:45:81:47:58:8d:2f:ac:f7:2b:56:ec:a6:be:29:4f:
40:c7:27:70:44:5f:69:7d:ad:04:c5:73:16:5f:02:32:92:b3:
b8:ba:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:53 2026 by rpki-client