Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IdosZn1Rav6y6l6qOO41XOMKSDs.roa
File: IdosZn1Rav6y6l6qOO41XOMKSDs.roa (raw, json)
Hash identifier: tZcTvJID2peBjVrmtevz/9y2abbt1ObCVeD4g9qTpD0=
Subject key identifier: 21:DA:2C:66:7D:51:6A:FE:B2:EA:5E:AA:38:EE:35:5C:E3:0A:48:3B
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019C236B273580FC4B5991A5E8307F2E5D6A
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IdosZn1Rav6y6l6qOO41XOMKSDs.roa
Signing time: Tue 03 Feb 2026 12:12:30 +0000
ROA not before: Tue 03 Feb 2026 12:12:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 147.90.1.0/24 maxlen: 24
147.90.192.0/21 maxlen: 24
147.90.208.0/21 maxlen: 24
158.173.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:6b:27:35:80:fc:4b:59:91:a5:e8:30:7f:2e:5d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 3 12:12:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21da2c667d516afeb2ea5eaa38ee355ce30a483b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:a3:11:f8:96:51:a5:4f:52:2b:ea:22:be:
be:98:dd:ab:af:ac:8d:46:38:22:c6:21:28:1e:d8:
b3:87:df:8b:c8:ec:c6:3f:f5:64:b3:76:e7:7f:2e:
0e:3b:7a:d5:db:86:08:d2:d8:76:a0:3d:08:67:64:
f5:65:c0:49:66:69:9b:2b:35:f3:8f:5d:8a:ec:28:
b7:b1:17:a2:5b:a0:c7:d3:01:2e:0f:7d:65:d2:70:
c2:87:50:b0:67:47:03:3f:05:8a:e8:5e:53:20:09:
b5:b9:41:63:73:9e:ef:81:20:23:6b:fc:4c:1e:22:
97:4c:a6:84:25:29:e8:c3:2c:0c:9b:a5:92:8c:2b:
27:45:14:e4:72:9c:6a:b6:ce:b2:1d:be:d3:3e:ee:
15:28:8a:95:b9:39:7c:e5:04:70:bd:66:8a:28:b7:
76:49:56:ca:48:2d:63:b0:ba:99:04:79:10:f5:a7:
1a:c7:43:dd:cf:61:ba:d0:b7:64:8b:89:27:1c:28:
49:de:ef:ec:1f:82:7d:f4:f3:ad:61:c1:4c:73:13:
f1:b6:ff:a9:83:2e:56:67:24:ba:e0:10:40:b3:24:
f2:68:ee:97:5b:f8:3e:26:69:a8:2e:04:bc:d1:6d:
1e:d2:97:c5:a3:b7:d3:63:80:40:25:5a:e8:15:33:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DA:2C:66:7D:51:6A:FE:B2:EA:5E:AA:38:EE:35:5C:E3:0A:48:3B
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/IdosZn1Rav6y6l6qOO41XOMKSDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.1.0/24
147.90.192.0/21
147.90.208.0/21
158.173.198.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:6c:5e:1f:f8:3b:7f:49:7e:5c:76:46:e4:99:29:19:b2:e7:
1e:75:71:92:41:9d:82:29:74:98:ba:57:1f:56:e4:47:6c:1d:
2f:3b:96:7a:9b:46:e9:95:0d:e3:5b:21:90:3a:6a:4e:45:f8:
d5:db:45:7e:f6:73:ba:31:d5:e5:92:f3:c9:8f:27:51:03:2d:
ab:58:d3:37:fd:95:ef:59:0b:61:88:27:8e:84:4a:20:35:ac:
14:0e:2a:50:af:70:56:0b:35:ab:24:41:be:80:4f:f8:ba:e1:
8a:7d:4b:dc:59:4f:04:95:48:b1:1e:33:3b:4b:61:20:58:43:
e4:d4:95:fc:9c:ae:59:33:38:32:a2:d8:ba:a0:05:9a:84:2b:
6d:4f:fe:48:1f:73:4e:23:68:27:98:74:28:e0:9d:a2:de:56:
ed:ec:69:30:bc:a0:77:1c:53:4c:d9:d4:9a:b0:bc:83:89:7e:
a4:e6:cb:ae:e5:e5:2c:9d:21:63:14:0c:ec:6a:36:f2:ec:6a:
3f:6c:6f:5b:d1:74:80:46:db:8c:99:e8:fa:b9:23:02:be:5d:
61:d9:61:da:2e:bb:de:af:24:35:f5:44:3b:a0:59:77:40:43:
d8:30:6e:59:3b:c6:1a:3d:0a:eb:d5:5e:61:ac:48:a5:0c:52:
5f:dd:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:25 2026 by rpki-client