Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-osvunInha2IeOhRWxXrVqLVlzM.roa
File: 1-osvunInha2IeOhRWxXrVqLVlzM.roa (raw, json)
Hash identifier: MgtnzVVRTjv+kg2zRcBmtftSZbd15wfAWLw05xU0TLY=
Subject key identifier: FA:8B:2F:BA:72:27:85:AD:88:78:E8:51:5B:15:EB:56:A2:D5:97:33
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D8100B518C5D325A048757030304424D1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-osvunInha2IeOhRWxXrVqLVlzM.roa
Signing time: Sun 12 Apr 2026 09:23:20 +0000
ROA not before: Sun 12 Apr 2026 09:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 147.90.52.0/24 maxlen: 24
147.90.74.0/24 maxlen: 24
147.90.78.0/24 maxlen: 24
147.90.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:81:00:b5:18:c5:d3:25:a0:48:75:70:30:30:44:24:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 12 09:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa8b2fba722785ad8878e8515b15eb56a2d59733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:69:8b:e6:f3:75:6f:41:de:31:5a:f3:d7:fc:
c9:32:56:2f:99:69:b3:13:30:ac:15:fc:04:c8:14:
00:31:c3:39:f6:46:0b:d8:64:8e:d6:9d:88:61:e0:
37:9d:96:bb:35:14:a1:2f:90:2f:5f:6b:ac:8c:e3:
b4:86:b9:1f:d1:b1:8c:f3:fa:a6:27:55:d2:9b:97:
a9:d5:a8:76:da:28:b6:5e:5c:22:5d:b5:b6:59:60:
92:6a:80:61:1a:db:3c:7a:cd:3c:50:6d:40:76:6b:
3c:b8:47:0c:e9:66:7e:db:38:fd:7d:a7:35:f2:03:
ae:9c:a6:15:4e:aa:79:e4:2e:43:13:14:8b:50:8d:
46:e0:63:3e:a5:46:9c:15:0f:ed:14:65:e4:8a:03:
15:f9:b2:bc:90:43:96:3d:f9:f3:c9:be:a2:55:18:
0e:3b:28:c6:fe:7e:a1:7c:bf:af:21:31:cc:ec:66:
c3:d8:6b:78:a2:3c:96:58:82:75:97:00:43:f3:95:
e7:aa:26:2e:12:9b:d4:66:29:ae:df:25:9b:a1:55:
04:30:8a:a5:18:b2:a7:a4:fd:5e:bc:dd:22:53:8b:
86:0e:2b:c3:96:4d:3f:69:11:d0:4f:82:b3:25:3e:
4a:e6:12:db:73:e8:00:0f:4b:7e:66:f7:6f:30:f0:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8B:2F:BA:72:27:85:AD:88:78:E8:51:5B:15:EB:56:A2:D5:97:33
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-osvunInha2IeOhRWxXrVqLVlzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.52.0/24
147.90.74.0/24
147.90.78.0/24
147.90.114.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e5:05:bc:ef:0e:f5:fc:1e:47:75:af:89:6a:05:01:22:3d:
d1:66:e9:3d:cc:3d:4a:f6:fc:e8:f0:ca:fc:db:a7:63:53:89:
25:6f:b1:a3:57:42:ba:9a:22:4e:12:dc:a6:13:db:a0:96:e1:
db:d7:a5:3d:d8:da:a9:3b:e8:3b:54:d3:3d:95:89:d3:4f:ca:
65:25:af:5b:00:3d:21:f0:66:31:2b:2e:91:06:c6:1c:49:b7:
22:32:50:d8:ff:f3:b1:a7:93:2f:f7:e0:4c:aa:ff:b6:9c:7a:
f2:91:f9:44:0f:69:25:61:4b:3c:d2:05:05:54:f3:c9:38:df:
e0:da:2d:ce:55:95:89:59:f1:05:5e:c5:9e:a5:8a:5a:ef:3e:
1b:a4:96:73:d0:90:aa:87:36:40:55:8a:a4:e2:05:2e:32:0b:
77:3c:f4:6b:85:01:a1:47:c4:72:f4:33:40:ec:47:8b:7a:d3:
15:31:fc:95:ce:f1:00:ed:27:57:84:5a:fb:aa:f2:28:d5:b8:
34:d6:6e:b9:4c:af:a1:2c:2c:d8:2b:b6:05:2a:fd:6e:53:c4:
60:c9:0e:06:73:25:e0:e9:4d:ed:ec:bd:5a:db:f8:eb:7f:ac:
e3:e5:d8:6e:89:57:bd:0f:02:20:19:ac:a4:f2:64:34:95:b2:
19:fc:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:36 2026 by rpki-client