Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8mL_pitsaMNYL0vQbnQdNZEFuZ0.roa
File: 8mL_pitsaMNYL0vQbnQdNZEFuZ0.roa (raw, json)
Hash identifier: k98z0ZMEh7kXCpDr21IBudZdZvichUfmcFLlgbPKGew=
Subject key identifier: F2:62:FF:A6:2B:6C:68:C3:58:2F:4B:D0:6E:74:1D:35:91:05:B9:9D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DDE67FAA5B7785E37434547CB369A5B0C
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8mL_pitsaMNYL0vQbnQdNZEFuZ0.roa
Signing time: Thu 30 Apr 2026 12:40:49 +0000
ROA not before: Thu 30 Apr 2026 12:40:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 147.90.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:67:fa:a5:b7:78:5e:37:43:45:47:cb:36:9a:5b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 30 12:40:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f262ffa62b6c68c3582f4bd06e741d359105b99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a4:a1:86:3c:1e:1c:fe:aa:f4:7c:64:8b:64:
f7:fc:ed:a0:49:c2:60:b8:f4:66:31:61:0e:96:9d:
73:1d:72:a1:4e:48:40:b0:a0:10:e0:9e:26:1b:65:
6d:e7:3f:91:84:cf:47:71:52:9d:f3:fa:c7:70:22:
45:e8:a1:a4:dd:f8:c9:46:23:2d:61:4a:ba:5b:57:
1c:e0:46:9c:a8:70:9f:f0:e4:86:bd:00:30:ea:85:
9e:89:8b:b3:dc:ae:ac:ce:0d:87:e4:d2:a4:c6:25:
16:9a:a3:f8:a5:e1:10:7b:f7:ef:f6:81:10:18:83:
a0:20:f1:b9:7a:d5:31:98:ab:2c:7c:6f:da:91:c3:
c3:c3:1e:b7:95:25:22:39:52:5c:6f:ff:7c:44:87:
80:44:32:3b:90:a4:d0:6d:16:21:a8:de:eb:eb:ad:
4b:38:e4:55:3f:d2:8b:02:4a:1f:5e:75:84:93:df:
98:26:24:73:17:f8:1c:09:c0:7a:ef:be:15:ac:fe:
60:fd:1d:b8:f4:05:27:33:76:19:66:62:a6:8b:33:
f9:c5:36:39:47:5a:76:a0:91:f7:a6:12:f7:94:a1:
20:dc:c2:d8:c1:f6:2a:30:93:9b:95:90:87:65:da:
b2:ff:c6:eb:d9:5f:bc:b2:f2:f2:59:93:dc:df:27:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:FF:A6:2B:6C:68:C3:58:2F:4B:D0:6E:74:1D:35:91:05:B9:9D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8mL_pitsaMNYL0vQbnQdNZEFuZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.1.0/24
Signature Algorithm: sha256WithRSAEncryption
25:83:01:3a:d2:20:52:99:30:f6:c1:3a:4a:cd:41:28:46:04:
a6:3c:17:27:bf:27:06:39:d3:d8:f9:2a:e7:cf:ed:19:5e:62:
03:60:7c:2a:ce:b9:d5:ea:0b:9c:12:80:fd:c1:25:55:dc:de:
23:f1:5a:ee:77:3b:06:3a:70:32:93:e5:c8:b9:7e:88:9d:75:
f1:f4:61:aa:58:5d:78:43:95:96:96:8f:bb:05:4b:fa:c5:54:
26:c6:bc:77:b7:e6:bf:5a:08:81:4a:c9:ca:13:9c:46:33:02:
4b:0b:24:76:4f:39:21:4c:e7:92:ca:3a:c4:3e:d7:e5:45:cd:
bc:4c:94:a4:30:2b:34:a1:e7:ea:09:8b:f6:4d:0f:d7:ba:35:
18:5f:cf:63:a9:88:19:9d:e4:f0:06:ed:6a:12:6e:7e:92:43:
bd:f1:f3:bd:45:81:f4:43:45:e4:a2:35:df:0b:2f:ae:48:81:
b6:fc:04:0a:84:19:f0:b2:b1:22:14:02:07:94:97:e7:1a:3c:
e4:96:0e:e5:47:25:10:db:58:63:50:c0:12:8f:58:fb:37:49:
80:fe:eb:ab:a1:70:25:72:0c:f8:c6:39:db:b6:4c:a6:6b:b3:
9b:c3:69:f8:6e:7c:89:6a:01:b7:d0:81:50:70:9a:77:ee:31:
59:7e:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:56 2026 by rpki-client