Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3ku49UAH4kKUz6pMtjru3TsVG-E.roa
File: 3ku49UAH4kKUz6pMtjru3TsVG-E.roa (raw, json)
Hash identifier: UBKS29vnFb1wVg1+95dMiP3s9E14rF412pNGHK1JG1c=
Subject key identifier: DE:4B:B8:F5:40:07:E2:42:94:CF:AA:4C:B6:3A:EE:DD:3B:15:1B:E1
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D1FC10EEA2A4085B00EB40CE869B1B6B2
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3ku49UAH4kKUz6pMtjru3TsVG-E.roa
Signing time: Tue 24 Mar 2026 12:10:39 +0000
ROA not before: Tue 24 Mar 2026 12:10:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402187
IP address blocks: 147.90.79.0/24 maxlen: 24
147.90.225.0/24 maxlen: 24
147.90.241.0/24 maxlen: 24
158.173.207.0/24 maxlen: 24
158.173.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:c1:0e:ea:2a:40:85:b0:0e:b4:0c:e8:69:b1:b6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 24 12:10:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de4bb8f54007e24294cfaa4cb63aeedd3b151be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:7c:48:c6:bf:30:71:8d:37:da:59:bc:36:
88:2d:5a:df:b0:57:94:f6:01:68:b6:c0:f9:5c:d1:
73:4e:a6:df:08:23:91:9a:90:f6:fa:50:61:19:4c:
41:b3:3d:8f:0f:04:11:ea:38:f9:5d:25:82:0d:c5:
a6:b2:97:ad:23:4f:79:b6:05:59:f8:0e:ff:25:65:
54:8c:da:03:01:a5:ab:1f:97:f3:44:5b:31:58:8e:
f8:6a:3c:8c:17:2c:a1:37:24:db:72:95:f6:ac:9c:
72:ce:9b:f0:52:3d:a8:a3:eb:1f:e6:f5:e8:42:23:
e9:ad:93:28:ea:e7:ca:d3:72:28:4f:52:e0:66:50:
e2:ea:4d:ee:fa:c0:05:bf:0b:dc:30:35:e4:23:79:
e7:0d:29:37:c5:ad:05:66:13:dc:88:13:14:b0:f3:
2d:7a:31:2e:83:a5:51:db:0c:12:d1:84:67:32:c8:
2b:a1:89:1a:06:ea:75:12:6b:6d:48:2a:ce:3e:2a:
a2:bd:a4:06:46:d1:e8:47:b0:72:c3:9b:e4:12:f8:
1d:6b:cb:5a:ce:08:27:c4:ec:53:cb:77:04:ed:a8:
0b:4b:a2:8c:c8:99:ce:42:3a:4c:cb:68:c8:a4:34:
ea:ea:eb:32:a2:99:b2:c4:1a:af:61:e8:53:c2:01:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4B:B8:F5:40:07:E2:42:94:CF:AA:4C:B6:3A:EE:DD:3B:15:1B:E1
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3ku49UAH4kKUz6pMtjru3TsVG-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.79.0/24
147.90.225.0/24
147.90.241.0/24
158.173.207.0/24
158.173.221.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:57:54:db:20:ab:c9:5b:fa:28:79:d7:c1:80:2f:81:b2:29:
b8:e6:88:7e:4e:60:0c:59:8d:8a:24:fa:24:ca:2d:8a:51:e2:
08:f1:62:9b:c7:2f:86:30:12:75:fb:24:60:26:2b:6d:fb:75:
59:fe:63:2d:ae:11:45:e5:2d:b8:1a:6f:dd:e9:ad:15:bd:d5:
85:72:b4:b0:0c:ed:50:ac:4b:d8:e5:58:43:7a:37:f5:07:a5:
0e:66:0d:54:37:47:8a:66:e0:bd:6b:6e:ca:f3:45:6e:e2:22:
be:92:70:39:c8:75:66:a1:4b:c7:72:12:8e:dc:18:89:9c:c1:
e6:ab:6e:9c:84:57:92:39:f3:fe:43:aa:94:64:13:e3:b1:f5:
26:86:6a:19:b7:c8:a8:5d:45:67:30:6a:18:4a:a4:26:ed:a9:
eb:7e:81:ed:26:e1:03:03:41:6f:8b:81:e3:b8:01:51:ef:7a:
c4:a0:00:c3:df:8d:99:7d:22:bc:75:fb:5c:bd:0b:28:27:43:
bd:f0:5b:98:97:b8:61:ee:11:42:e8:2f:ad:24:80:cf:bb:25:
1e:dc:cb:81:2e:1c:16:51:9e:4a:52:5a:37:be:41:df:9d:17:
68:05:ef:ce:2e:d0:b0:eb:e1:4c:7a:89:74:22:ff:f1:fc:88:
e8:96:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:31:52 2026 by rpki-client