Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rNdoKVB0s-_CRUjDacP-g17cgaE.roa
File: rNdoKVB0s-_CRUjDacP-g17cgaE.roa (raw, json)
Hash identifier: LN3Mb1hMAY3vjlzMPqb0MTQBwlzgOODDo/wLmAbquk0=
Subject key identifier: AC:D7:68:29:50:74:B3:EF:C2:45:48:C3:69:C3:FE:83:5E:DC:81:A1
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A1A013A43242D7D0C56509B4061283B1D3
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rNdoKVB0s-_CRUjDacP-g17cgaE.roa
Signing time: Tue 03 Nov 2026 06:23:24 +0000
ROA not before: Tue 03 Nov 2026 06:23:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218499
IP address blocks: 147.90.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:13:a4:32:42:d7:d0:c5:65:09:b4:06:12:83:b1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Nov 3 06:23:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acd768295074b3efc24548c369c3fe835edc81a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:77:b4:99:ab:5c:a7:ad:87:f5:ef:ef:e7:
34:60:ac:24:89:11:b3:b6:f2:dd:f6:b6:c2:d2:e1:
8a:d5:72:f9:77:66:68:94:e4:20:28:f0:90:21:bd:
09:9e:0b:55:00:16:ca:39:38:5c:cc:eb:a6:10:06:
07:32:15:72:3a:46:84:df:db:2e:c1:59:a3:84:72:
6b:af:f3:e6:a5:30:3b:57:fa:f8:5b:c0:f5:db:4c:
26:5f:96:88:b0:28:0b:81:06:ab:8b:24:6e:25:81:
6f:ae:fb:d5:67:90:c9:30:bc:a2:ea:59:1e:7f:b8:
c2:51:4f:5b:a5:36:4d:f6:7a:ad:7e:1c:fb:ea:4b:
5f:af:86:44:c4:f2:25:26:26:78:67:ec:28:f0:6f:
c7:ee:5f:09:80:56:42:44:bd:d2:c4:ac:01:97:7d:
7d:e2:d3:4d:0d:78:c5:2e:7a:3d:f8:28:80:53:d2:
53:03:17:09:67:a0:ab:f9:85:16:08:3e:14:33:38:
9e:93:e7:14:8c:0a:4d:c7:7a:bd:5c:5f:45:f3:e1:
6c:3a:a7:c1:bf:04:bc:54:8b:cb:16:75:4c:9c:db:
ac:5d:6c:8a:13:ed:87:f1:1c:92:86:71:a7:c5:8e:
5f:83:0e:9c:ae:d3:c8:d1:c1:d8:3d:94:24:76:3b:
de:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D7:68:29:50:74:B3:EF:C2:45:48:C3:69:C3:FE:83:5E:DC:81:A1
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/rNdoKVB0s-_CRUjDacP-g17cgaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:13:49:fe:b3:3a:07:cb:2a:02:46:00:a0:74:3e:48:62:64:
f2:93:8b:34:4e:26:a4:35:08:32:16:86:b2:10:48:87:3a:f6:
05:09:ab:79:64:cb:1a:e3:46:b5:b9:d3:97:8b:97:4c:8b:95:
1c:ff:a6:29:e1:53:e1:7f:bd:2e:6f:33:35:29:73:d1:cf:28:
04:69:7c:bc:94:26:b7:3e:02:01:83:bb:01:ae:b5:c0:03:36:
e6:b3:9d:74:69:57:a6:53:40:8e:af:c0:0b:78:69:5d:c0:97:
10:08:c9:b2:b3:71:f7:2a:93:4e:5b:8c:f5:32:a3:d4:d1:2c:
12:f3:44:90:62:62:9e:db:a8:b0:b2:67:20:7f:a9:9b:38:06:
7a:a6:9b:2d:40:40:9e:5c:b9:51:fe:cc:4e:33:53:2b:6c:9c:
da:ef:38:78:0f:80:bf:b5:a0:fe:bc:23:53:ce:c7:c7:e5:ee:
fa:08:12:fa:04:4b:5c:68:85:55:f8:6a:55:2a:5b:f9:5f:ee:
cb:da:c4:ba:1e:e7:9f:27:93:e0:91:c4:83:ba:d9:8e:b1:36:
fc:ae:f1:40:7d:08:c7:be:2f:b4:e5:12:87:83:a1:22:08:7c:
3f:fd:32:4d:66:f3:dc:67:5d:27:e6:f3:54:dc:5f:90:45:73:
24:e7:ba:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGgE6QyQtfQxWUJtAYSg7HTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYxMTAzMDYyMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2Q3NjgyOTUwNzRiM2VmYzI0NTQ4YzM2OWMzZmU4MzVlZGM4MWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCd3tJmrXKeth/Xv7+c0YKwkiRGz
tvLd9rbC0uGK1XL5d2ZolOQgKPCQIb0JngtVABbKOThczOumEAYHMhVyOkaE39su
wVmjhHJrr/PmpTA7V/r4W8D120wmX5aIsCgLgQariyRuJYFvrvvVZ5DJMLyi6lke
f7jCUU9bpTZN9nqtfhz76ktfr4ZExPIlJiZ4Z+wo8G/H7l8JgFZCRL3SxKwBl319
4tNNDXjFLno9+CiAU9JTAxcJZ6Cr+YUWCD4UMziek+cUjApNx3q9XF9F8+FsOqfB
vwS8VIvLFnVMnNusXWyKE+2H8RyShnGnxY5fgw6crtPI0cHYPZQkdjveDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKzXaClQdLPvwkVIw2nD/oNe3IGhMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvck5kb0tWQjBzLV9DUlVqRGFjUC1nMTdjZ2FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk1pPMA0G
CSqGSIb3DQEBCwUAA4IBAQA+E0n+szoHyyoCRgCgdD5IYmTyk4s0TiakNQgyFoay
EEiHOvYFCat5ZMsa40a1udOXi5dMi5Uc/6Yp4VPhf70ubzM1KXPRzygEaXy8lCa3
PgIBg7sBrrXAAzbms510aVemU0COr8ALeGldwJcQCMmys3H3KpNOW4z1MqPU0SwS
80SQYmKe26iwsmcgf6mbOAZ6ppstQECeXLlR/sxOM1MrbJza7zh4D4C/taD+vCNT
zsfH5e76CBL6BEtcaIVV+GpVKlv5X+7L2sS6HuefJ5PgkcSDutmOsTb8rvFAfQjH
vi+05RKHg6EiCHw//TJNZvPcZ10n5vNU3F+QRXMk57r9
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:28 2026 by rpki-client