Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/J6Befha0ohBTwknOLItx7_oP00U.roa
File: J6Befha0ohBTwknOLItx7_oP00U.roa (raw, json)
Hash identifier: XrHZHao3HIz3X0mCAqM75Kx6gxQ18kr8Uwc042bL6uk=
Subject key identifier: 27:A0:5E:7E:16:B4:A2:10:53:C2:49:CE:2C:8B:71:EF:FA:0F:D3:45
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D079887DF8CFE2A6B99AA09A804B91D09
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/J6Befha0ohBTwknOLItx7_oP00U.roa
Signing time: Thu 19 Mar 2026 19:35:29 +0000
ROA not before: Thu 19 Mar 2026 19:35:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47690
IP address blocks: 147.90.60.0/22 maxlen: 24
147.90.68.0/22 maxlen: 24
147.90.80.0/22 maxlen: 24
147.90.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:98:87:df:8c:fe:2a:6b:99:aa:09:a8:04:b9:1d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 19 19:35:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27a05e7e16b4a21053c249ce2c8b71effa0fd345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:74:b4:f9:47:1a:ab:ad:de:0a:18:ae:7b:
35:a1:24:9b:80:fb:b7:e0:7e:24:39:7f:74:1c:a9:
a5:49:2e:9e:72:7c:2e:84:28:09:47:8f:96:bf:c4:
3d:dc:db:86:6a:f0:c8:84:b3:df:f1:69:1b:d2:68:
b7:81:8d:51:e6:74:8f:a8:92:a1:4c:ac:9a:85:9f:
d7:b0:f9:09:36:2a:39:40:51:9b:6a:ab:e8:e9:bc:
34:6e:4e:68:4f:86:8b:9c:ea:fc:a8:79:02:40:25:
79:23:53:ba:68:d1:19:5c:46:c3:dc:ca:b5:80:8e:
a7:0b:6b:9c:14:a9:2c:e6:7f:93:63:e2:3c:79:f9:
33:0b:15:8d:3e:6b:db:3f:a0:a5:dd:14:fc:62:fc:
80:2c:44:a5:8d:42:97:38:67:37:6a:63:8a:84:b7:
ba:1c:0d:07:a7:21:de:52:d0:67:c7:3c:f5:e9:0c:
20:c8:68:44:0a:e7:20:b0:d8:2f:ce:db:7f:60:f1:
aa:8f:b7:8a:0d:cd:da:02:a0:cd:82:0f:8d:c4:cf:
ac:07:cd:cd:72:ae:b0:3c:33:38:bf:80:9a:1d:e9:
a5:70:c7:4c:6f:71:74:e5:e8:7e:7c:a2:42:c0:a9:
ea:11:a6:e0:96:34:ef:41:07:71:fb:34:a7:77:13:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A0:5E:7E:16:B4:A2:10:53:C2:49:CE:2C:8B:71:EF:FA:0F:D3:45
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/J6Befha0ohBTwknOLItx7_oP00U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.60.0/22
147.90.68.0/22
147.90.80.0/22
147.90.92.0/22
Signature Algorithm: sha256WithRSAEncryption
20:dc:3f:c1:8e:4e:30:36:5b:35:c1:a7:44:61:4f:b5:80:76:
2c:4c:aa:d8:e8:73:c3:54:29:40:aa:a5:dd:18:b8:3c:0d:04:
2c:01:b8:dd:2c:65:a6:78:8b:9b:5f:60:60:c3:00:e2:a7:75:
ea:36:86:2c:74:d3:4d:2b:b0:59:67:ea:1a:5d:d5:ae:68:91:
84:29:30:a0:55:16:72:ad:7c:82:00:e5:8f:93:81:c6:00:0e:
e7:c3:c1:a4:b5:32:5d:2b:ba:df:fe:da:f0:42:be:96:90:e8:
ac:47:93:0c:e8:f1:64:c5:07:48:32:d8:82:6a:fc:62:28:10:
b8:78:4d:6f:9b:5a:47:07:fc:92:bf:97:4c:f7:03:6a:3e:b1:
4d:2b:0e:cf:63:5f:29:53:53:52:39:e6:43:de:be:89:f1:7b:
96:c3:1d:40:7b:c6:13:ba:da:1c:bd:77:42:7f:ba:80:8f:b2:
3e:2e:de:2f:f4:75:24:12:c0:28:bd:97:23:12:27:38:69:aa:
eb:b8:4a:0b:ef:a5:52:9b:08:80:4b:a0:ba:de:5a:d7:38:4d:
6f:a0:db:25:11:5b:73:13:db:a7:7a:f7:88:36:e4:c0:5c:c2:
61:5e:4d:71:fc:33:ef:df:4f:ec:60:bc:57:64:9e:36:54:35:
5f:83:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:40 2026 by rpki-client