Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uPufiOF5bVZdWB4lv4cVKso8XN0.roa
File: uPufiOF5bVZdWB4lv4cVKso8XN0.roa (raw, json)
Hash identifier: MRb4cfjo4YYLQW7vmFu4tgb4oFZWjtCvd8J4jMuVnYg=
Subject key identifier: B8:FB:9F:88:E1:79:6D:56:5D:58:1E:25:BF:87:15:2A:CA:3C:5C:DD
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DCF0A877DD68416012BE2F0A4ADFF6489
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uPufiOF5bVZdWB4lv4cVKso8XN0.roa
Signing time: Mon 27 Apr 2026 13:04:26 +0000
ROA not before: Mon 27 Apr 2026 13:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207550
IP address blocks: 147.90.120.0/23 maxlen: 24
147.90.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:0a:87:7d:d6:84:16:01:2b:e2:f0:a4:ad:ff:64:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 27 13:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8fb9f88e1796d565d581e25bf87152aca3c5cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:69:31:06:6c:d9:d9:20:01:ec:9f:01:c2:
64:22:2d:5f:c7:d2:12:a3:35:fd:28:79:c2:9b:c3:
40:df:c9:89:e6:60:5d:cb:4a:53:ae:29:63:9b:b7:
4e:3e:54:b5:2b:a9:3b:12:c3:21:8e:cd:b7:fd:41:
2a:fd:2f:a5:7e:60:61:d6:65:fa:07:ba:e5:1f:39:
7d:06:ff:b9:92:e2:d6:0b:ee:74:0b:e9:f0:47:02:
95:7c:be:f3:74:77:eb:fd:73:66:a7:f9:03:26:8f:
90:f4:4e:10:f5:84:f7:f3:9d:b5:11:a9:6a:c0:a0:
5c:ae:f7:0d:86:6f:9a:b9:24:05:bc:e8:44:96:f5:
2a:21:31:f1:3f:8d:4d:fa:a6:e9:78:74:65:0d:a5:
3b:86:ce:44:ab:13:70:2c:a2:56:d1:ad:9d:49:36:
71:fd:f3:a8:6c:a1:55:91:6f:55:0b:e0:20:2c:21:
32:3b:ae:7e:5c:4b:a6:22:24:3d:c4:64:91:2f:15:
8e:0a:71:bd:0c:b2:9a:ac:22:9f:23:b9:58:80:34:
bb:da:13:83:ab:5c:a0:b3:b7:40:b7:89:a4:c3:97:
81:a8:2b:a7:59:25:9d:61:b7:71:29:eb:35:ab:41:
22:82:13:7d:ab:20:ff:8c:da:67:98:65:b8:e0:52:
64:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:9F:88:E1:79:6D:56:5D:58:1E:25:BF:87:15:2A:CA:3C:5C:DD
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/uPufiOF5bVZdWB4lv4cVKso8XN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.120.0/23
147.90.233.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:54:3c:69:6d:2a:fb:fc:2d:6b:b2:d9:fa:f1:26:0d:c2:14:
a1:b5:32:56:e0:a9:aa:5f:f4:b6:c4:55:38:fb:44:f3:62:30:
5a:ee:88:2b:87:6d:12:d9:b4:b6:56:99:4d:ca:e7:5a:83:29:
22:34:06:c5:34:2d:2a:55:19:b9:49:1d:e2:dc:95:28:07:27:
31:b1:d0:4e:40:d2:a4:95:d9:5e:b4:cb:05:a9:82:d7:ca:9c:
37:d6:76:54:cd:ba:f6:95:b3:8d:e7:17:9c:36:6c:a5:6b:fb:
6b:e1:50:96:c4:28:b3:6d:5f:34:ff:e6:ab:49:aa:e3:07:ef:
c7:c1:4b:a5:d9:41:c7:8d:02:ec:70:fe:c0:f0:1e:3e:c8:4f:
05:05:c4:ec:bb:f3:c3:b8:00:87:12:da:c8:11:e5:af:b5:80:
97:b6:3f:7e:5b:dc:67:00:a5:bf:71:e9:e8:2e:db:90:68:10:
9d:a6:6a:cd:71:40:42:a3:4d:2d:54:d0:d4:44:c5:13:6a:be:
0c:b0:71:48:f1:b8:40:ef:2a:97:87:66:06:e3:d3:47:4b:4c:
e5:ec:97:60:bf:1c:5f:35:0d:42:ae:67:9e:6b:45:88:f4:9c:
a8:27:e4:50:d4:32:d0:dc:e9:f2:27:1b:ee:8a:63:20:d0:ab:
e6:68:a3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:17 2026 by rpki-client