Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/iW41crKbp_FO5HcbNlqNl4vZ6lQ.roa
File: iW41crKbp_FO5HcbNlqNl4vZ6lQ.roa (raw, json)
Hash identifier: 3MK+dSfyilcf/3vXfpUzm3y3muK/eZSVjTo5dYxveIs=
Subject key identifier: 89:6E:35:72:B2:9B:A7:F1:4E:E4:77:1B:36:5A:8D:97:8B:D9:EA:54
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F61FFD663310781A0ED94CA88A1050329
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/iW41crKbp_FO5HcbNlqNl4vZ6lQ.roa
Signing time: Tue 14 Jul 2026 18:59:44 +0000
ROA not before: Tue 14 Jul 2026 18:59:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 147.90.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:ff:d6:63:31:07:81:a0:ed:94:ca:88:a1:05:03:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 14 18:59:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=896e3572b29ba7f14ee4771b365a8d978bd9ea54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:00:b0:99:4d:c5:0a:7a:47:da:e0:eb:69:
f3:0c:42:cb:84:89:f0:52:2c:35:12:ad:2e:08:8d:
1d:9b:5f:b8:e6:1c:b6:bd:fb:f3:9b:10:e3:cf:07:
38:6b:76:bf:de:22:c2:81:d8:38:b2:96:dd:5f:7d:
88:d8:e4:2d:b9:28:2e:e0:3b:41:32:28:16:d2:12:
6c:57:e1:a6:9b:2d:e5:2a:20:c4:22:2b:03:52:dc:
e5:18:ae:30:bc:17:2c:07:4b:45:46:9e:f4:37:f8:
bb:a6:78:44:de:24:ed:91:b6:79:96:a8:d2:ec:ec:
ae:01:d3:4e:dd:f9:fb:e4:dd:5e:47:b2:90:a4:6c:
e4:3d:8b:1c:c6:c2:3d:a3:3b:ef:b6:96:2e:4b:33:
fa:17:40:db:2d:01:ce:1c:77:29:84:e2:2b:82:46:
33:ac:d0:ef:17:1f:8e:58:2d:5f:60:11:82:8e:5c:
e8:e2:71:6d:20:a7:9c:75:7e:25:6c:c1:8f:d3:0e:
23:6d:78:94:8a:fb:dc:d0:2d:a3:92:1b:42:94:ff:
06:e2:f0:97:20:e9:eb:78:27:3f:6a:e1:52:70:e6:
be:ee:a4:21:5e:21:bf:31:18:4d:97:9e:c3:e7:ba:
f6:f6:36:41:e7:55:2a:7f:6f:44:f8:88:04:23:3c:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6E:35:72:B2:9B:A7:F1:4E:E4:77:1B:36:5A:8D:97:8B:D9:EA:54
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/iW41crKbp_FO5HcbNlqNl4vZ6lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:89:3b:0c:2d:6a:53:3a:3c:a1:b4:0d:e0:da:26:63:32:86:
d3:42:6a:0a:f8:b2:50:82:f9:fc:4d:66:4b:4c:a3:f4:2f:15:
ee:39:af:12:fc:ae:15:95:2f:32:bb:f4:83:e5:b2:2b:9e:d2:
52:cc:18:5f:ec:8b:94:43:aa:d3:f7:43:9d:23:4a:50:52:a7:
73:7e:a4:1b:19:1b:4d:1b:17:d9:cd:0e:94:68:f6:43:b5:fd:
41:00:a1:04:33:5b:08:3c:fc:64:41:82:6c:53:21:34:e8:fa:
17:a4:2c:b2:c8:2d:ea:32:95:8d:fa:10:ea:16:01:34:78:ba:
73:48:9a:34:7f:4b:ae:1e:92:cb:d4:70:5f:14:3b:36:f1:3b:
12:e9:92:23:c4:98:83:ef:16:4a:f0:7f:4e:22:77:ac:7f:45:
cc:83:82:6d:c3:5c:2a:d4:04:d5:f7:57:87:fa:7a:48:13:aa:
97:5c:ec:a3:71:fb:28:58:d1:02:71:58:e2:25:47:6c:64:ba:
b5:74:09:e5:84:ae:72:c1:66:16:4b:d7:f2:2e:7a:7d:cf:a7:
ef:a6:3b:46:3a:d6:d1:17:eb:03:6c:fc:3b:63:35:91:eb:0d:
f9:b8:d0:d4:39:76:ac:ad:27:52:89:fd:f6:af:c2:19:63:ad:
56:8c:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:43 2026 by rpki-client