Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/jp1QXQ5vWZeNgtAqU-Mgc9yz8Xw.roa
File: jp1QXQ5vWZeNgtAqU-Mgc9yz8Xw.roa (raw, json)
Hash identifier: MhkvOxQpLn90dxf6id06Ak+4SKVevLWDsF4cmngfN4M=
Subject key identifier: 8E:9D:50:5D:0E:6F:59:97:8D:82:D0:2A:53:E3:20:73:DC:B3:F1:7C
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DD7A86146558A34399477A00DC84DCBDD
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/jp1QXQ5vWZeNgtAqU-Mgc9yz8Xw.roa
Signing time: Wed 29 Apr 2026 05:13:49 +0000
ROA not before: Wed 29 Apr 2026 05:13:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2860
IP address blocks: 147.90.84.0/22 maxlen: 24
147.90.244.0/22 maxlen: 24
158.173.176.0/22 maxlen: 24
158.173.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:a8:61:46:55:8a:34:39:94:77:a0:0d:c8:4d:cb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 29 05:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e9d505d0e6f59978d82d02a53e32073dcb3f17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:ef:2b:db:23:b1:d8:60:8d:c3:3e:05:61:
4a:42:4c:ea:93:f6:1f:da:a1:8a:9b:99:e8:38:14:
05:2e:ac:38:2b:74:06:6a:1d:a8:79:74:cd:d7:6a:
c2:6b:1a:34:2b:79:ce:c1:67:f6:0e:10:c0:1b:ff:
35:e1:14:8e:10:94:a0:af:d4:1f:02:a0:f6:97:5d:
5d:f3:df:2f:cf:c9:bd:96:9c:cc:f0:40:e8:2d:1f:
ea:7c:c4:96:01:21:d9:c0:ea:28:0f:4b:92:a6:31:
91:93:ce:ef:ca:7f:ec:c8:59:5e:fa:13:08:b1:d0:
46:01:c7:c7:e1:04:43:39:2d:2a:d3:2c:f7:ee:5b:
21:41:1c:11:d3:ef:2c:bc:a6:03:2e:7d:3b:4f:0a:
06:6e:66:4f:b6:16:bc:1d:08:a2:1b:7b:74:54:99:
88:3f:7e:63:c1:4b:10:84:6b:46:d2:f0:10:be:b1:
4a:53:30:62:af:19:ff:8d:4e:63:e6:d1:55:5c:0f:
79:54:22:4e:8a:25:45:13:3b:00:d1:93:a9:97:59:
29:cb:4e:03:6d:b8:0e:dc:56:0f:58:65:69:85:48:
f4:2d:63:9c:b9:d1:96:25:f9:d9:8f:e6:18:42:38:
ea:0b:83:91:64:29:f5:6c:0f:b5:6d:d8:53:87:aa:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9D:50:5D:0E:6F:59:97:8D:82:D0:2A:53:E3:20:73:DC:B3:F1:7C
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/jp1QXQ5vWZeNgtAqU-Mgc9yz8Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.84.0/22
147.90.244.0/22
158.173.176.0/22
158.173.238.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:3a:4c:e8:b3:09:28:a7:8e:54:63:46:2a:7b:8c:74:f7:c3:
5d:0c:69:b9:49:5e:19:4c:08:cd:25:5b:5d:00:3b:57:7f:5a:
d6:6f:75:20:a8:bf:4d:10:ab:39:ea:0e:a6:55:d8:43:88:70:
36:52:a0:80:c8:bc:94:5d:3d:7f:9d:4b:13:3f:c9:76:25:2c:
7a:d3:17:9f:2b:9a:02:95:99:e0:dc:ad:1c:1c:fe:0c:c7:0a:
b5:ff:d9:ad:cd:5b:83:4f:72:2d:0e:13:4f:7b:4e:7d:6c:ab:
ca:6a:21:6c:af:27:e1:8b:26:75:32:26:1f:4f:fd:7f:17:cc:
cc:91:60:62:2a:56:bc:bf:a3:88:b2:54:96:45:5b:f6:fd:4a:
57:3c:4b:2d:7d:18:a5:b7:12:18:57:9d:05:69:e4:0b:a2:a8:
4d:b1:14:3b:5d:bf:7c:c5:e6:60:33:10:cd:4f:ed:2c:e8:dc:
b9:77:c9:fe:90:75:5b:c9:28:14:e6:07:4a:f3:7f:e2:99:de:
72:6b:61:ef:90:b5:b9:46:45:d2:ef:74:d9:01:dd:35:58:cf:
78:85:f3:6d:55:2d:6b:b2:83:bb:60:16:f7:7c:b3:62:9d:0c:
2a:f2:ac:11:3f:bd:3b:79:9a:d6:5b:ea:19:70:b3:98:37:76:
f6:b0:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:31 2026 by rpki-client