Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kgYvY10ZfhsbWnF6E8X91TAN8sw.roa
File: kgYvY10ZfhsbWnF6E8X91TAN8sw.roa (raw, json)
Hash identifier: +MzcnI8aQY7Q4qko3eVGkvYWf4my7l/f1ny/crU73zk=
Subject key identifier: 92:06:2F:63:5D:19:7E:1B:1B:5A:71:7A:13:C5:FD:D5:30:0D:F2:CC
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A08F2565EBC88B98D71D665FC3D8897B39
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kgYvY10ZfhsbWnF6E8X91TAN8sw.roa
Signing time: Fri 11 Sep 2026 06:26:27 +0000
ROA not before: Fri 11 Sep 2026 06:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 147.90.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:25:65:eb:c8:8b:98:d7:1d:66:5f:c3:d8:89:7b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 11 06:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92062f635d197e1b1b5a717a13c5fdd5300df2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ef:76:44:a0:f6:86:d1:2b:0a:b6:22:5d:f7:
ff:ae:0d:2b:76:ab:01:90:5b:12:17:f1:ee:7e:86:
18:83:79:9d:ba:90:8d:6d:66:6f:cd:ae:75:e9:92:
c8:de:08:3d:3e:a8:75:f0:11:3c:f5:d0:d3:2b:7c:
dd:a9:8d:f3:cd:4b:60:32:5c:c3:28:03:c1:6b:5d:
bc:00:ac:c3:0a:8f:f5:3c:b0:a1:66:bc:16:99:46:
cf:11:f0:38:47:fd:8f:dd:aa:ac:55:87:97:24:31:
ca:81:64:d5:08:b5:1b:11:0d:11:94:ca:02:1a:37:
43:a8:26:4c:42:8b:11:77:eb:7a:93:29:5c:19:55:
73:36:e1:8b:ec:12:37:d8:79:71:4d:9d:bf:e2:cb:
68:a7:2a:e1:38:c0:89:a7:b0:a0:03:93:6a:c0:33:
4d:6e:7c:95:95:5d:bf:98:f5:3c:c5:a5:2e:4a:aa:
e3:41:fd:4b:bb:49:a6:d1:2b:42:4c:19:62:78:45:
23:87:25:8d:c9:52:bb:b6:5b:9f:a0:51:8d:fb:07:
0c:df:c2:9a:69:84:80:6c:9a:33:d4:06:3a:92:49:
e7:a7:de:08:96:5e:5e:94:ec:dd:d0:c7:15:1c:51:
fc:9b:1c:30:f8:65:ef:93:46:07:47:16:59:13:02:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:06:2F:63:5D:19:7E:1B:1B:5A:71:7A:13:C5:FD:D5:30:0D:F2:CC
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kgYvY10ZfhsbWnF6E8X91TAN8sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.16.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:03:dd:93:b3:1d:75:0c:06:bb:97:79:ea:78:17:7c:e7:dd:
62:76:41:08:b1:22:83:2f:11:9b:eb:9d:65:94:1a:4f:1a:cb:
d7:93:b1:3d:74:9a:da:4d:ff:a2:36:aa:4e:62:c1:30:26:88:
04:2c:5b:a0:98:3c:13:93:16:25:88:65:33:10:6c:53:04:69:
91:f9:6d:83:12:91:5e:4f:41:02:4d:85:67:c1:35:1d:cd:ba:
fa:29:eb:65:9c:49:a9:50:85:4c:6f:0a:e9:23:e9:fd:c0:10:
a9:75:a5:01:14:15:5c:fb:15:01:f0:c8:70:6e:96:0e:ca:15:
bd:e3:f8:c4:94:d9:ac:84:ff:0f:92:b2:9a:4e:60:a0:da:cf:
cc:b8:95:0c:8c:f8:a1:3d:12:6a:6a:57:a7:3d:17:77:8c:5b:
58:a9:33:b1:eb:6a:ec:69:47:24:8c:45:39:73:05:0a:f6:79:
7f:e6:3f:87:e9:67:2d:0f:b0:87:ad:c0:b8:df:5a:f5:79:71:
62:b4:2b:3c:3d:a4:1b:a9:c3:8a:95:b7:1f:ff:63:56:5f:bc:
d6:9d:86:87:02:38:1a:de:52:37:8e:9a:0d:fa:b5:00:69:1e:
d5:79:e3:ab:cf:03:af:7c:ea:7b:2b:2d:2a:2e:4d:04:da:bd:
13:a1:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:46:09 2026 by rpki-client