Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kaiLzL1BhnQ6RB_gw6Dr1s1vmm0.roa
File: kaiLzL1BhnQ6RB_gw6Dr1s1vmm0.roa (raw, json)
Hash identifier: 4IDyMfKKWjhSj39yIswnv0BnGm/1J8QLzrUF9cKLcVI=
Subject key identifier: 91:A8:8B:CC:BD:41:86:74:3A:44:1F:E0:C3:A0:EB:D6:CD:6F:9A:6D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DFC8D9E28F952B19F0579B1251BD208C1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kaiLzL1BhnQ6RB_gw6Dr1s1vmm0.roa
Signing time: Wed 06 May 2026 09:10:32 +0000
ROA not before: Wed 06 May 2026 09:10:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 147.90.209.0/24 maxlen: 24
147.90.227.0/24 maxlen: 24
158.173.240.0/24 maxlen: 24
170.62.239.0/24 maxlen: 24
170.62.244.0/24 maxlen: 24
170.62.245.0/24 maxlen: 24
193.142.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:8d:9e:28:f9:52:b1:9f:05:79:b1:25:1b:d2:08:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 6 09:10:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91a88bccbd4186743a441fe0c3a0ebd6cd6f9a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:6e:00:d2:68:1c:e1:56:f7:af:3e:ce:0c:
64:31:ee:c7:57:e3:67:0b:95:2e:fb:50:2d:fb:a2:
db:d5:51:a6:c3:56:0d:0f:19:6a:cc:40:b5:38:de:
5f:4f:36:f5:e7:e7:1d:bc:ab:30:ba:c7:d7:7e:2a:
26:02:07:3b:35:b0:3b:75:9b:64:8e:5a:e5:40:65:
31:13:41:25:5f:42:20:af:6c:e7:50:d5:fe:37:af:
db:6a:6d:c7:e0:16:7b:1b:cc:e4:2a:96:16:3f:33:
32:a4:27:ba:bb:4c:41:79:84:0f:30:6a:6f:f2:4f:
83:b5:ac:94:ee:5b:f4:a3:21:7b:0a:18:49:f0:ff:
c6:d5:8c:43:11:58:01:4c:d1:12:93:cb:75:91:6c:
95:d9:f9:4e:2a:85:5e:d3:be:f9:df:c7:43:2c:61:
d2:1e:29:2a:01:28:19:0e:44:39:95:cc:9b:0e:5d:
f8:2d:e5:5e:76:26:eb:05:b3:25:b6:a3:92:cb:3f:
76:5f:e3:be:a7:ee:32:6b:1a:a2:b0:4b:fd:f0:f7:
32:37:4d:c6:41:9b:7a:ec:ef:e8:31:79:46:25:c8:
46:5c:7a:83:fc:04:ed:18:4c:b8:c1:77:d3:ed:74:
b1:21:aa:04:2b:a0:e9:03:43:68:54:90:cf:e8:a8:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A8:8B:CC:BD:41:86:74:3A:44:1F:E0:C3:A0:EB:D6:CD:6F:9A:6D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kaiLzL1BhnQ6RB_gw6Dr1s1vmm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.209.0/24
147.90.227.0/24
158.173.240.0/24
170.62.239.0/24
170.62.244.0/23
193.142.58.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fb:4d:7e:df:d9:31:f9:d0:ff:31:ca:64:b3:b4:18:04:f1:
2a:72:d4:a9:48:2a:6b:1d:69:07:22:2f:06:32:f7:70:55:bd:
d3:73:78:b7:db:f0:a9:ac:16:ec:d0:47:e4:19:4b:98:06:7f:
19:45:c2:8c:81:60:57:8b:fc:e4:3d:0b:5d:d5:f8:68:57:e9:
bd:8c:4d:94:aa:41:69:fd:3b:a3:cb:07:3a:65:b1:22:57:42:
76:5d:3e:9c:d5:99:85:8f:b1:cc:91:24:c4:aa:6f:1c:fd:18:
a4:bd:9b:45:dc:eb:ec:86:d5:2f:c6:4e:3a:d6:96:ef:33:88:
2c:79:cb:db:08:3e:cc:d1:2f:36:42:ba:f8:eb:ef:ff:97:bf:
a4:8d:c6:85:f3:38:af:f5:4a:6b:34:dc:5a:11:8e:19:3e:e8:
79:aa:94:d7:6a:02:d7:7a:86:48:d1:9d:ed:ff:f0:0d:10:95:
1b:4b:3f:d5:32:1d:1c:94:e4:f8:f1:54:43:79:ff:2c:2a:e5:
ec:32:55:4f:3c:a1:34:5b:71:57:07:77:5c:cd:8d:cc:99:bd:
96:a4:6f:47:c8:d9:4a:82:95:67:7d:1b:57:72:f1:53:b5:58:
be:a5:d5:eb:c0:c9:13:04:15:2b:a8:af:33:47:12:c2:c8:c5:
bc:d1:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:55:54 2026 by rpki-client