Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DBqs5vg4SNQ6n0s9AAoJCoqCF5k.roa
File: DBqs5vg4SNQ6n0s9AAoJCoqCF5k.roa (raw, json)
Hash identifier: jKRW0vAcmQ02lUNLSEICTRAqUgd+fg41JMuXHLrFD6E=
Subject key identifier: 0C:1A:AC:E6:F8:38:48:D4:3A:9F:4B:3D:00:0A:09:0A:8A:82:17:99
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019C5D7FF672F6B19BD1861F52C9D102E0A1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DBqs5vg4SNQ6n0s9AAoJCoqCF5k.roa
Signing time: Sat 14 Feb 2026 18:53:13 +0000
ROA not before: Sat 14 Feb 2026 18:53:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 147.90.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5d:7f:f6:72:f6:b1:9b:d1:86:1f:52:c9:d1:02:e0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 14 18:53:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c1aace6f83848d43a9f4b3d000a090a8a821799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:01:0a:53:bb:eb:ea:15:89:bd:e5:5b:27:
c1:39:6b:db:08:90:71:da:1c:6b:17:4a:13:45:7a:
9c:98:8a:38:6f:7d:04:05:ec:12:ad:62:b1:fb:45:
d2:48:d2:4d:bf:e3:49:81:33:1e:65:1e:51:f3:e3:
48:6b:7f:44:75:4f:96:a0:b1:97:f3:7b:fc:c0:2c:
f4:e1:30:30:fb:22:28:7f:f7:50:c5:7d:28:6b:9c:
04:a0:58:f0:16:ee:65:4b:c8:2b:58:ef:8e:1a:38:
b0:0f:88:bd:20:9b:0a:d7:32:41:d5:fc:d1:aa:28:
dc:ae:4c:3f:5c:25:44:c0:19:a9:0a:5e:0b:f2:09:
e4:ad:b1:0d:b2:14:cb:8f:5e:6a:e6:43:c9:8a:60:
5e:97:d1:64:3f:2e:a5:da:40:f7:75:17:55:3b:77:
c3:b5:3c:78:d9:37:ee:d9:48:a0:00:e7:e8:ca:01:
17:ac:76:1c:2e:a9:d6:91:25:49:9a:73:f4:94:85:
87:a2:9d:f8:b0:a2:6a:dd:ea:15:5c:01:51:35:41:
70:ab:ea:49:30:87:d6:d7:ae:df:dd:5c:cf:bb:d8:
ab:f7:d0:27:03:2c:64:be:8c:17:53:1d:9b:a7:7a:
c4:a4:40:8f:a6:12:2d:29:12:b6:37:2c:74:61:e9:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1A:AC:E6:F8:38:48:D4:3A:9F:4B:3D:00:0A:09:0A:8A:82:17:99
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DBqs5vg4SNQ6n0s9AAoJCoqCF5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.13.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:3b:4e:f9:91:45:e2:65:36:d4:5d:00:f8:f4:67:9d:f5:bf:
0d:16:3b:b4:13:1d:b5:13:aa:2b:5d:5b:03:2e:04:4a:0c:2a:
27:49:64:91:cc:f3:3f:92:04:51:f3:ca:e4:31:80:48:66:d6:
c0:37:88:92:fb:95:56:19:a6:a2:a7:8a:7c:3d:88:84:56:ca:
2c:db:a7:28:a7:c7:ca:1e:1f:ce:5d:2a:4a:50:41:36:61:bf:
02:e2:d3:b9:9b:b6:d0:e3:00:a3:01:79:83:69:3f:08:99:c7:
b6:07:62:97:f4:a3:41:96:3e:75:27:87:06:a8:aa:8f:94:66:
74:58:ad:36:f0:f2:62:1a:03:a3:ad:b8:65:7a:0b:17:73:87:
5c:27:a3:82:b8:19:69:83:23:b4:cb:0f:e6:5e:61:c1:80:9b:
6f:8a:e1:9c:6a:f6:65:e9:4b:31:1d:d6:86:3d:75:b0:ee:e2:
ee:ee:50:d6:9e:f4:33:92:97:58:fd:55:5a:b1:5e:ad:21:0c:
4d:0e:a4:0d:b5:2d:33:57:1e:7e:0b:1b:8a:f5:e7:f4:ba:c9:
89:da:58:f5:d5:be:0c:82:33:c5:0c:6d:78:1c:dd:08:32:e6:
00:a5:4a:34:65:a0:b1:48:68:a8:be:45:64:6f:7d:59:d6:ba:
e6:39:16:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:12 2026 by rpki-client