Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/2jl8rZ7Jw84Y6VC9fSLb40M8Iyc.roa
File: 2jl8rZ7Jw84Y6VC9fSLb40M8Iyc.roa (raw, json)
Hash identifier: 4/Fpy7wdmFSUAxaIk6yodI9gtwrfavmU96jmCy45ygQ=
Subject key identifier: DA:39:7C:AD:9E:C9:C3:CE:18:E9:50:BD:7D:22:DB:E3:43:3C:23:27
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019CEB802679360E08DCF6ED640D20E3D7AD
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/2jl8rZ7Jw84Y6VC9fSLb40M8Iyc.roa
Signing time: Sat 14 Mar 2026 08:39:30 +0000
ROA not before: Sat 14 Mar 2026 08:39:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214563
IP address blocks: 147.90.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:80:26:79:36:0e:08:dc:f6:ed:64:0d:20:e3:d7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 14 08:39:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da397cad9ec9c3ce18e950bd7d22dbe3433c2327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:76:be:bf:89:5f:07:1c:30:0a:52:00:01:
7f:54:fe:97:c7:95:c2:eb:6d:e5:5b:bb:59:4a:65:
6c:9f:ea:90:c6:8c:c3:cf:69:63:42:37:82:3d:46:
e9:b3:d2:55:35:63:6e:2f:05:9a:0d:b0:36:a3:70:
24:2c:6c:4d:a9:1b:2b:0b:51:8f:31:ba:f3:e8:49:
f0:df:fb:c1:c8:2e:97:6c:58:af:ca:86:bd:b4:27:
eb:41:0a:54:90:cf:1e:db:3f:75:b1:09:92:c3:bb:
03:a6:9e:20:34:36:3d:ac:49:9b:17:16:8b:25:04:
aa:4a:92:79:e4:f2:86:5d:9f:18:d6:b6:5f:b7:4c:
c0:c2:14:cf:82:3e:c3:84:eb:bf:f3:f6:33:d2:23:
3f:9f:e6:26:d6:11:8a:d4:ba:be:cb:40:fa:91:8d:
85:84:ab:e9:4a:b4:dd:88:af:65:c1:53:dc:d3:66:
58:0e:60:82:fe:96:c1:da:dc:0c:75:9a:87:62:03:
e4:5e:44:93:80:7a:45:38:97:38:66:d7:e0:8d:57:
64:43:5c:0e:54:f5:90:02:7c:b4:c2:42:99:76:75:
d6:cc:63:78:ed:1e:7f:a8:fb:71:4b:6b:f0:47:b9:
53:91:e0:25:6f:e2:88:55:04:2e:01:6a:9f:c5:48:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:7C:AD:9E:C9:C3:CE:18:E9:50:BD:7D:22:DB:E3:43:3C:23:27
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/2jl8rZ7Jw84Y6VC9fSLb40M8Iyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d8:db:94:8f:e3:87:a1:c7:a9:65:96:8c:60:c2:9a:a3:41:
d7:83:0c:d7:e3:1a:32:63:fa:39:02:a9:f9:d3:8b:03:fa:b9:
89:47:ad:29:e8:71:61:f1:1a:80:a3:08:02:ba:e2:db:44:43:
3b:2b:79:c5:f8:ff:5b:6f:30:b7:20:1f:2c:c0:10:26:87:74:
7c:61:2d:f2:e5:b3:c4:bd:ac:b0:7c:53:48:26:0d:22:9b:d6:
af:30:cc:47:27:15:15:7c:97:a7:ba:d4:e1:16:03:f4:05:88:
69:dc:b7:06:81:64:07:66:b3:40:88:1b:1a:33:b8:d8:88:8d:
b4:3a:2e:ee:c4:d2:e3:f7:17:be:1f:2f:e5:ab:ee:40:39:35:
7f:4a:bf:80:ad:4f:be:a9:ce:c6:f3:52:ba:6e:9f:e5:4d:b5:
72:41:77:35:67:88:07:35:20:a8:88:f9:f1:1e:d0:23:0f:44:
d9:6c:17:52:42:d9:00:72:32:60:d9:4b:4e:68:5a:0d:17:f4:
44:65:dd:26:f3:7a:12:21:60:70:7a:97:cb:9c:0c:b5:f5:8b:
ed:6f:0c:b1:d2:25:26:e0:ce:81:8e:1e:ed:f7:07:52:84:98:
8a:be:8c:07:6d:4a:ba:8e:81:e4:74:ee:15:1f:59:d6:f5:5b:
be:8f:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:09 2026 by rpki-client