Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JYGcaZVp_J5xtTIErxeZ-sRHzKo.roa
File: JYGcaZVp_J5xtTIErxeZ-sRHzKo.roa (raw, json)
Hash identifier: dO4XgDnHn+VLilbPZ5bxsBT7ktUijm21K33KSXKj6sQ=
Subject key identifier: 25:81:9C:69:95:69:FC:9E:71:B5:32:04:AF:17:99:FA:C4:47:CC:AA
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A1158B82ABF1738DB4A98167EC6453266D
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JYGcaZVp_J5xtTIErxeZ-sRHzKo.roa
Signing time: Wed 07 Oct 2026 08:47:06 +0000
ROA not before: Wed 07 Oct 2026 08:47:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16735
IP address blocks: 147.90.184.0/24 maxlen: 24
147.90.186.0/23 maxlen: 24
147.90.188.0/23 maxlen: 24
147.90.192.0/23 maxlen: 24
147.90.196.0/22 maxlen: 24
147.90.208.0/24 maxlen: 24
147.90.211.0/24 maxlen: 24
147.90.212.0/23 maxlen: 24
158.173.187.0/24 maxlen: 24
158.173.193.0/24 maxlen: 24
158.173.209.0/24 maxlen: 24
158.173.230.0/23 maxlen: 24
173.209.2.0/24 maxlen: 24
173.209.10.0/23 maxlen: 24
173.209.13.0/24 maxlen: 24
173.209.16.0/24 maxlen: 24
173.209.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:8b:82:ab:f1:73:8d:b4:a9:81:67:ec:64:53:26:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 7 08:47:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25819c699569fc9e71b53204af1799fac447ccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:ca:37:d1:94:d4:d3:92:57:f6:e6:bb:b5:
f7:fc:63:6c:76:bd:eb:c0:87:61:a9:16:38:68:c7:
07:8e:ac:9c:05:0a:3b:74:38:d7:97:2a:a9:28:91:
c1:33:11:d3:01:57:01:0a:4c:82:1b:ed:18:80:0f:
50:c0:35:ed:0f:2e:02:f6:bf:72:0b:d0:fd:6a:8e:
c8:26:d0:13:03:cc:32:2a:bc:04:15:a3:79:48:fd:
8e:66:e7:54:6a:97:78:e8:e5:dc:3a:34:bf:e4:fd:
6c:51:be:f3:da:b1:5d:8b:f9:cb:1d:01:a2:ec:a5:
56:45:f2:4f:37:c9:5c:4c:f6:d9:16:3f:9a:2e:ab:
95:36:9a:da:37:90:62:41:c1:9b:5f:75:78:04:7b:
53:35:a3:31:cf:07:41:79:3c:65:7d:83:22:26:c2:
63:5d:d8:0e:75:ca:3d:c2:8e:18:e0:dd:a4:26:81:
a8:e3:47:a1:e0:ea:02:1e:38:93:ac:a8:c4:93:fc:
e3:00:17:8b:bf:08:4c:e9:83:9b:d8:e5:5f:18:6a:
9d:87:5e:2f:d3:84:f9:9b:5e:c9:85:85:88:8c:55:
13:54:68:16:96:6c:a3:dc:51:50:d3:68:ae:ea:b9:
a6:fd:be:d1:47:2e:40:7a:2b:04:0b:65:5a:3c:8d:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:81:9C:69:95:69:FC:9E:71:B5:32:04:AF:17:99:FA:C4:47:CC:AA
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/JYGcaZVp_J5xtTIErxeZ-sRHzKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.184.0/24
147.90.186.0-147.90.189.255
147.90.192.0/23
147.90.196.0/22
147.90.208.0/24
147.90.211.0-147.90.213.255
158.173.187.0/24
158.173.193.0/24
158.173.209.0/24
158.173.230.0/23
173.209.2.0/24
173.209.10.0/23
173.209.13.0/24
173.209.16.0/24
173.209.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f8:65:85:94:77:77:2b:fa:c1:83:8c:fb:f6:05:d7:0d:d5:
3d:43:ae:b1:37:d9:79:ee:fc:ad:e5:f2:40:59:68:48:b3:32:
50:7a:94:1c:16:9c:3c:00:3b:32:55:8d:dd:28:e7:e5:34:cc:
c5:0c:bd:40:03:ce:2a:a1:9a:87:04:95:5e:f8:7a:3f:2f:87:
1c:b3:a1:ad:98:20:8e:21:45:6f:75:86:51:1d:2f:cd:d6:ce:
70:d8:c9:a6:5b:4f:24:19:2b:32:38:cf:96:15:0f:2c:66:f0:
26:b8:34:fe:c4:ce:f2:1a:fe:3b:af:3e:a5:8e:df:ec:43:ae:
b7:75:29:24:6b:da:15:87:08:f4:b5:89:df:93:43:4a:f3:52:
b7:3c:b9:53:35:f6:57:58:76:4a:33:76:73:bb:57:ee:20:18:
cd:86:8a:07:62:06:92:9f:90:a7:11:94:14:ec:32:6f:e3:9b:
da:a3:d6:3a:1c:35:23:37:9c:65:3f:c4:67:be:ec:08:da:da:
54:4d:c2:c0:76:be:29:eb:f9:d7:88:6e:bd:c5:df:bb:3e:99:
b4:8c:43:6b:76:0d:64:33:6b:6a:a1:50:b1:55:28:e9:08:e7:
88:c9:78:e1:c7:6b:1d:94:c8:74:73:18:82:94:29:d0:14:06:
11:30:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:41:41 2026 by rpki-client