Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kNHF58xZzlPylxLUQUNA97cESl8.roa
File: kNHF58xZzlPylxLUQUNA97cESl8.roa (raw, json)
Hash identifier: 3lsekj/1RckREKgz1sQ+jq10VRlIBn4BKQ0o2IB8kjg=
Subject key identifier: 90:D1:C5:E7:CC:59:CE:53:F2:97:12:D4:41:43:40:F7:B7:04:4A:5F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DFCBB9B70867F2ACAE22649AACAA61F50
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kNHF58xZzlPylxLUQUNA97cESl8.roa
Signing time: Wed 06 May 2026 10:00:46 +0000
ROA not before: Wed 06 May 2026 10:00:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206150
IP address blocks: 147.90.116.0/24 maxlen: 24
147.90.118.0/24 maxlen: 24
147.90.231.0/24 maxlen: 24
147.90.238.0/24 maxlen: 24
147.90.239.0/24 maxlen: 24
158.173.129.0/24 maxlen: 24
158.173.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:bb:9b:70:86:7f:2a:ca:e2:26:49:aa:ca:a6:1f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 6 10:00:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90d1c5e7cc59ce53f29712d4414340f7b7044a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:cd:f1:5f:1b:20:87:4f:f1:bc:60:dc:1b:
40:b2:97:ea:8d:a8:f3:10:78:7f:4b:9d:2a:07:d7:
16:d5:90:d4:7f:ed:24:23:fb:91:0b:20:60:3a:ea:
83:3a:65:ab:82:71:a3:84:44:9f:0c:bf:67:06:98:
ec:e5:87:e9:ca:eb:f9:9d:ee:58:f6:5c:6c:aa:f9:
71:b3:29:aa:7f:04:51:e9:02:5c:f7:d9:bb:9f:55:
c8:77:0b:e5:1f:80:ce:9c:91:28:c2:72:4b:77:e8:
4b:b2:4b:bc:5a:5f:af:d8:bb:32:f0:78:00:7d:3a:
13:f4:51:43:27:bc:1c:89:48:90:16:95:84:b1:21:
2a:e5:e4:7c:ba:b9:c3:18:15:1c:d9:5d:93:cf:39:
5e:24:87:ab:b5:17:3f:a3:ac:34:ab:d0:23:57:87:
ba:53:54:f9:53:53:82:3e:53:7f:4a:3c:a9:64:1f:
b6:b2:77:e0:40:3f:b9:e2:37:c5:09:b1:46:7a:bf:
72:ab:8b:7f:f4:59:72:5c:e0:77:05:5e:3f:1c:67:
eb:87:e9:bb:7c:21:f4:e8:ff:30:f5:6d:31:fa:5f:
c7:a9:4c:e5:77:cd:f8:cb:b3:71:30:0f:a7:3f:f9:
32:ac:4f:bb:85:d2:cc:00:40:6d:07:45:87:ed:b6:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D1:C5:E7:CC:59:CE:53:F2:97:12:D4:41:43:40:F7:B7:04:4A:5F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kNHF58xZzlPylxLUQUNA97cESl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.116.0/24
147.90.118.0/24
147.90.231.0/24
147.90.238.0/23
158.173.129.0-158.173.130.255
Signature Algorithm: sha256WithRSAEncryption
8d:12:55:4f:9d:ca:ac:a2:4f:4f:64:2c:b0:c6:70:53:a7:96:
eb:ee:0d:ab:50:4e:a4:28:f4:90:de:1b:52:71:8e:30:32:db:
69:3d:15:b5:2f:2b:43:0a:87:5b:43:e2:7e:e2:75:91:cb:71:
64:a9:8e:ec:14:0f:7f:4f:dc:fe:4f:50:9f:90:b1:cf:69:63:
24:b6:4b:c5:73:d1:02:ec:86:64:57:59:11:91:ca:5c:47:bc:
f3:6d:d9:07:36:3c:be:fc:1b:ea:7f:20:09:13:a6:9d:1e:c8:
d8:49:f9:84:3b:fd:7f:28:94:14:c5:67:3b:ab:bd:f5:31:21:
a5:fa:44:3f:f8:58:60:10:41:97:31:20:8f:84:14:fc:47:0d:
1d:68:e7:83:68:c3:35:4a:9c:32:9e:15:7c:5d:35:f5:79:e2:
3e:24:d6:9a:b9:14:cb:f8:37:a5:8d:bc:b1:d8:36:72:2b:fe:
12:2b:b4:ef:bc:fb:fc:af:f5:7b:d0:70:f6:ce:f7:0e:6b:58:
90:a6:75:31:5f:bf:e6:65:ab:34:d9:d6:e0:87:72:73:db:bd:
f1:e4:9a:a7:f3:eb:fe:59:b8:fb:69:d0:97:30:98:db:bd:6c:
56:45:d1:a9:47:0c:24:45:60:8c:e8:cf:64:e5:ed:53:31:6d:
57:f1:db:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:35 2026 by rpki-client