Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/_91MaHKWWFaxwS1tW1QUlDugBr8.roa
File: _91MaHKWWFaxwS1tW1QUlDugBr8.roa (raw, json)
Hash identifier: L/DPFsmoGqxKDJ3+Y9lgbRxO5iu2MKFa6UpEZeCUdCM=
Subject key identifier: FF:DD:4C:68:72:96:58:56:B1:C1:2D:6D:5B:54:14:94:3B:A0:06:BF
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E015E13E06A87F68B7352BF399A223A5F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/_91MaHKWWFaxwS1tW1QUlDugBr8.roa
Signing time: Thu 07 May 2026 07:36:43 +0000
ROA not before: Thu 07 May 2026 07:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203363
IP address blocks: 147.90.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:5e:13:e0:6a:87:f6:8b:73:52:bf:39:9a:22:3a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 7 07:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffdd4c6872965856b1c12d6d5b5414943ba006bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:b8:5d:2a:55:49:14:6c:55:31:41:44:df:
1a:dc:38:c4:5b:5e:42:5f:9f:12:7c:6d:d5:7a:d8:
a1:2f:16:a0:19:93:23:fe:b5:bd:90:66:ed:73:29:
52:f4:89:c8:7a:17:46:cc:d8:af:17:29:32:45:cd:
5d:23:d9:58:10:42:88:c5:c3:f9:9f:7b:ca:c4:0d:
66:ef:e3:db:94:bf:78:88:18:1a:f9:57:0e:94:9d:
c0:57:bc:77:ab:d5:3b:e7:be:dd:27:0d:11:1d:3a:
50:3e:d7:2d:33:cd:c9:24:50:e7:40:42:72:55:02:
ac:46:73:b1:a5:ce:c1:e6:d9:24:62:d1:ca:23:5e:
30:0e:3a:2d:9e:d8:06:d0:c4:ee:b2:b5:21:cb:59:
bc:93:e3:4d:a5:2e:f8:54:c4:ff:e3:c7:43:6b:e5:
0b:43:dd:58:71:2e:0e:85:a4:32:95:71:d6:66:2a:
f3:55:ce:23:93:cd:db:c3:b4:9d:78:20:aa:17:3e:
69:7e:25:40:51:57:10:03:7a:9c:b8:6a:53:17:2c:
37:e4:cf:41:5e:57:20:12:2b:00:2d:89:81:1b:2d:
c2:3f:f2:59:e5:66:4b:f1:34:ea:c3:65:ed:94:28:
e2:68:d2:b5:e2:4a:61:37:5f:30:ab:db:f1:79:21:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DD:4C:68:72:96:58:56:B1:C1:2D:6D:5B:54:14:94:3B:A0:06:BF
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/_91MaHKWWFaxwS1tW1QUlDugBr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:36:db:99:8f:47:8d:07:98:15:53:d3:a4:a5:72:85:6e:c4:
39:a7:5e:19:ae:4f:72:96:f0:3c:ba:0b:69:ad:4f:6a:24:2c:
e3:03:ff:00:5e:92:20:6c:62:25:cf:f0:e0:14:a8:ac:46:85:
be:71:3c:2b:e7:7f:8a:5d:a5:2a:fd:8b:00:13:d7:1a:20:68:
52:2d:50:b3:37:97:21:ed:90:f2:a9:d9:6c:a8:61:d8:4c:52:
30:77:46:8b:fd:79:59:d6:e8:ba:90:91:8a:aa:7e:da:64:9d:
3a:4d:e8:c9:d7:12:d8:fe:3c:bb:88:53:ce:08:30:da:aa:82:
a6:f7:24:06:b8:0d:c5:0d:99:56:f5:ee:1e:ec:8b:9a:44:15:
de:44:ac:53:3a:ce:57:6c:6a:55:5c:98:9e:c4:71:c4:a2:19:
dd:fb:4f:e3:5e:f8:00:23:7d:c7:8b:9f:cb:40:9c:70:31:9b:
95:5b:98:6f:e6:81:6b:1b:53:7c:20:3d:68:43:1c:24:04:4b:
ef:cc:bb:6d:61:88:3f:7a:f3:70:44:ff:01:a9:25:f6:72:2d:
4a:1a:d8:39:d1:02:05:25:72:37:d7:f9:07:9d:42:b1:15:77:
c0:11:f7:5a:27:26:7d:05:12:b0:f2:2e:e9:23:92:dc:75:12:
88:4b:fd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:24:19 2026 by rpki-client