Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kHQwNuDsWAtFqutxc5FkNCMZBX4.roa
File: kHQwNuDsWAtFqutxc5FkNCMZBX4.roa (raw, json)
Hash identifier: P23WP/J8mpxySxX75leNMjKPqeHvIJFXJFA8C0nUzwQ=
Subject key identifier: 90:74:30:36:E0:EC:58:0B:45:AA:EB:71:73:91:64:34:23:19:05:7E
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F8F68BF47845FA5648AC02FC16A2B6603
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kHQwNuDsWAtFqutxc5FkNCMZBX4.roa
Signing time: Thu 23 Jul 2026 14:37:14 +0000
ROA not before: Thu 23 Jul 2026 14:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3170
IP address blocks: 147.90.191.0/24 maxlen: 24
167.160.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:68:bf:47:84:5f:a5:64:8a:c0:2f:c1:6a:2b:66:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 23 14:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90743036e0ec580b45aaeb71739164342319057e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:1a:a3:d3:7d:ea:25:08:88:39:80:d5:27:
5b:d2:77:38:8b:a6:78:c5:25:b8:ed:34:71:9a:48:
db:b9:af:28:e7:8f:28:96:d0:ec:4f:57:11:bf:27:
53:38:2d:6a:43:ac:ca:8e:39:52:4f:5a:b6:01:9e:
90:c5:f8:59:ce:59:9b:94:da:66:8c:2d:c3:71:45:
87:21:b0:79:31:20:dc:5a:33:ba:07:b6:67:87:d3:
6c:d0:73:ea:91:92:ef:e6:dc:30:bf:60:c0:bc:e5:
a6:0d:6a:3d:48:c4:f1:d0:36:e6:a6:18:d5:54:e7:
f7:8a:e3:36:a1:c5:34:1d:5b:2b:42:da:de:e8:78:
ed:e1:95:4a:55:a5:92:db:6e:7f:63:7f:6a:cd:f9:
ec:d5:1e:b7:32:d6:be:fe:e0:bf:54:2b:b6:24:c4:
00:c0:49:06:2a:ca:24:00:92:19:9c:ac:62:6e:10:
34:ff:fe:e1:00:6f:c3:48:46:6c:dd:6b:d8:99:80:
44:44:13:d8:09:f6:a7:ee:42:5d:14:4e:46:10:13:
4c:b6:09:52:49:82:c5:bc:31:69:a3:77:18:cb:90:
a3:d5:15:10:b6:fb:4e:11:f4:40:7c:08:8c:05:34:
56:43:12:0b:9d:c7:90:1c:a8:84:05:e6:7e:59:2b:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:74:30:36:E0:EC:58:0B:45:AA:EB:71:73:91:64:34:23:19:05:7E
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kHQwNuDsWAtFqutxc5FkNCMZBX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.191.0/24
167.160.13.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3a:bf:e7:66:60:4b:3e:77:27:7f:c9:83:df:7e:43:e9:c9:
0f:b2:95:17:70:95:4b:c7:a9:f9:2d:78:ba:89:a6:1a:b6:92:
4e:dc:70:a7:30:7a:91:ac:66:37:7c:5a:6e:ed:03:38:9a:c9:
73:7b:5b:1b:f1:56:92:95:b8:ae:d9:03:2d:7e:07:6d:2b:5a:
25:d2:ed:60:f5:97:54:83:46:e3:ca:9d:33:14:ca:55:7e:21:
9a:5c:f6:ae:0f:ca:11:1a:2d:af:6d:2c:bd:8a:72:54:42:32:
1c:20:71:c6:1f:fe:75:7d:69:b4:f1:8a:75:4a:47:67:97:c5:
2e:1a:46:39:b7:f7:d2:c8:b9:e3:20:6e:e0:27:95:0b:3e:26:
8a:23:70:ab:d7:4b:4c:51:4d:56:b1:ed:4f:37:b4:9d:af:43:
5e:3f:c8:87:99:55:0b:4a:ac:b9:05:e2:ae:47:9b:90:c0:83:
a7:08:5b:10:43:a9:aa:c9:df:70:f1:75:14:5c:3a:c4:4b:5e:
0a:1f:10:a9:32:3b:33:ff:9a:87:61:13:01:f6:15:ba:7b:e4:
31:3a:97:79:43:0b:a6:d4:d4:24:95:0c:0b:2b:44:ea:09:c3:
31:8f:22:23:30:fd:1b:7e:68:79:d3:b3:9e:62:ea:d6:e0:26:
ac:46:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:13 2026 by rpki-client