Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Utz_XmM8Cn7s8z0OZ7AmEDk-V48.roa
File: Utz_XmM8Cn7s8z0OZ7AmEDk-V48.roa (raw, json)
Hash identifier: VMejpK2LufA9ELwzEL9NC15PbyhIvo/i3qnB3qXbafw=
Subject key identifier: 52:DC:FF:5E:63:3C:0A:7E:EC:F3:3D:0E:67:B0:26:10:39:3E:57:8F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D07B8936895415708E428BCAA48D016C0
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Utz_XmM8Cn7s8z0OZ7AmEDk-V48.roa
Signing time: Thu 19 Mar 2026 20:10:29 +0000
ROA not before: Thu 19 Mar 2026 20:10:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150671
IP address blocks: 147.90.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:b8:93:68:95:41:57:08:e4:28:bc:aa:48:d0:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 19 20:10:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52dcff5e633c0a7eecf33d0e67b02610393e578f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:d2:fb:38:77:0b:a0:69:4b:2a:9c:76:10:
83:50:13:65:7a:29:aa:0c:45:fa:0a:ce:c5:44:c5:
14:45:fc:d8:b0:4b:28:0a:9f:8d:13:75:0a:1c:a3:
01:0f:8a:cf:8d:aa:50:29:a6:c6:a4:47:5e:8e:c7:
ea:19:03:3b:ea:8d:60:47:d7:49:01:9c:6c:0e:a8:
b1:dd:4f:2c:cb:02:eb:d8:67:68:f2:01:94:fa:89:
4f:4a:5e:bc:74:ab:bc:4e:2c:b8:e6:37:81:80:2a:
31:01:ee:c5:93:0d:90:5e:00:67:52:cf:dc:dd:49:
57:c3:8a:fc:ba:f0:c2:8b:6d:e4:7e:e0:41:d1:94:
77:df:91:5f:e6:16:b6:25:5e:cc:a9:a7:86:82:0a:
e2:90:6f:b2:cf:00:9f:76:4d:43:88:20:15:1b:f6:
c2:12:45:bc:38:39:19:45:62:a5:fe:e5:97:d3:58:
a3:42:9c:39:da:60:76:b1:b2:ed:1c:1a:1a:a9:e7:
4a:52:03:33:07:7f:26:9c:8e:bf:61:00:dc:8c:7a:
e4:84:10:e5:7e:2e:53:76:c2:b8:36:af:46:59:72:
b9:41:dc:bf:d9:6f:4d:ce:40:da:e2:ff:f1:52:fa:
60:8c:b9:86:6a:1c:2b:fd:6f:4a:aa:45:b1:45:e4:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DC:FF:5E:63:3C:0A:7E:EC:F3:3D:0E:67:B0:26:10:39:3E:57:8F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Utz_XmM8Cn7s8z0OZ7AmEDk-V48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.96.0/21
Signature Algorithm: sha256WithRSAEncryption
45:59:5f:cb:7a:eb:dc:8c:f8:f3:08:52:5e:68:45:df:77:a4:
7c:f3:90:8b:7b:3a:ff:fe:49:36:28:1d:ad:e7:b6:1c:0b:f8:
9e:fe:2a:6d:dc:00:54:01:b7:d3:bc:a9:3b:9e:09:c8:cc:a8:
b2:97:a7:b1:a5:b8:51:15:82:7c:f5:e4:25:14:36:a9:2a:62:
bc:73:d5:68:a9:1c:40:bb:48:0d:9f:37:be:5b:cc:4a:b6:28:
bb:0c:17:9e:75:e0:0b:ca:f3:b8:99:14:5a:49:f1:be:76:a6:
ba:65:0c:ff:19:57:75:28:1f:d0:b3:5d:ab:b0:e5:18:e8:f3:
f1:fc:4b:be:af:b0:ac:f0:e9:c8:33:90:c0:d2:b2:fc:ed:7c:
c4:1f:97:eb:80:16:c2:3a:e7:3a:8a:e9:76:b0:b5:93:0b:55:
e3:45:2c:4b:82:51:0d:db:b0:cc:5b:7b:66:15:bc:6d:36:6a:
6a:1c:6b:ea:0a:26:55:17:f9:cd:1d:36:b7:9e:3a:81:ef:df:
da:d7:71:fc:33:77:eb:f3:e0:50:b8:d4:9d:a5:48:9e:3a:b5:
e2:a6:34:07:f6:06:5d:e3:81:a2:a1:88:f0:79:a5:d0:a7:49:
f5:f1:4e:7d:bb:af:cb:bb:70:0b:5e:b7:43:f3:4c:46:49:8d:
42:c3:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:29 2026 by rpki-client