Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OwoXu3hHlX42tAq973plRBKb4p8.roa
File: OwoXu3hHlX42tAq973plRBKb4p8.roa (raw, json)
Hash identifier: 1AFIVgnFSCuYA32PqNLYQcTVqbnrE4sUILASP0mSL/Q=
Subject key identifier: 3B:0A:17:BB:78:47:95:7E:36:B4:0A:BD:EF:7A:65:44:12:9B:E2:9F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D4412D45BBE25AB2AAEFADD2D80244B69
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OwoXu3hHlX42tAq973plRBKb4p8.roa
Signing time: Tue 31 Mar 2026 13:26:17 +0000
ROA not before: Tue 31 Mar 2026 13:26:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 147.90.7.0/24 maxlen: 24
147.90.9.0/24 maxlen: 24
147.90.10.0/24 maxlen: 24
147.90.11.0/24 maxlen: 24
147.90.12.0/24 maxlen: 24
147.90.13.0/24 maxlen: 24
147.90.14.0/24 maxlen: 24
147.90.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:12:d4:5b:be:25:ab:2a:ae:fa:dd:2d:80:24:4b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 31 13:26:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b0a17bb7847957e36b40abdef7a6544129be29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:70:92:ac:b8:16:56:82:b5:2e:70:c8:f8:
f3:ef:04:33:f5:9e:2a:57:cf:dc:81:83:31:63:dd:
20:ac:ae:2d:df:d6:c9:29:19:ff:84:5d:44:9d:aa:
13:85:98:f9:b4:d5:cc:c8:a3:d7:61:49:17:62:19:
64:bf:2d:62:e7:5d:80:20:2c:d1:62:fa:e8:23:03:
f8:c8:2b:6c:b0:45:21:d0:04:01:3a:65:cd:ca:fb:
a6:dc:d3:e4:bc:d8:c4:72:7c:24:ca:0a:c4:e3:e8:
de:9b:4a:82:3c:93:b6:5d:51:89:23:02:8f:12:25:
8f:ae:6d:4e:f1:1a:d5:eb:74:68:1b:41:14:fd:47:
6c:aa:e2:59:f6:bc:9d:01:c3:53:bc:3d:70:3d:21:
6a:2e:34:48:63:fd:b4:d0:e1:f9:ba:43:e6:79:20:
e2:d2:8f:de:82:23:23:9b:4d:0c:be:63:6b:41:02:
55:b0:6f:15:af:61:c4:ba:2a:ea:ef:ad:18:38:12:
ad:b4:d2:07:8a:e5:a3:0f:a5:e2:ea:33:57:67:b7:
e2:9f:1d:8f:c1:57:f8:c7:15:ab:4e:5c:0f:f3:25:
1e:8f:c1:24:ab:6b:82:a0:28:d5:df:9f:79:46:51:
a6:cb:29:ec:7d:b8:f9:36:cb:74:4f:db:18:11:07:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0A:17:BB:78:47:95:7E:36:B4:0A:BD:EF:7A:65:44:12:9B:E2:9F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OwoXu3hHlX42tAq973plRBKb4p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.7.0/24
147.90.9.0-147.90.15.255
Signature Algorithm: sha256WithRSAEncryption
dd:e5:1d:25:fa:a8:2b:5a:8e:46:e2:1f:41:49:e7:ee:cb:ff:
3c:79:00:0a:fc:fd:e1:c3:74:a2:07:91:7f:22:cc:89:3b:02:
22:09:ff:b1:65:20:24:d6:7c:e5:a0:c3:e9:54:0a:15:77:38:
ab:f9:6e:73:af:bc:73:95:e9:65:0c:7e:e3:01:ff:76:94:7e:
a3:d9:df:27:33:9d:6d:34:55:2b:0b:30:14:e7:f7:8d:98:45:
7c:83:67:f1:fb:64:e3:73:aa:f8:05:2f:db:8f:d3:dc:31:86:
8b:a3:a0:04:a6:c4:1b:49:c8:71:76:30:40:c1:85:dc:c0:84:
f7:1b:a7:e0:dd:46:56:a1:d1:95:5c:10:d4:50:68:83:66:22:
40:61:05:01:5b:22:ef:1e:04:97:14:14:e8:79:98:c8:0f:7d:
7d:56:12:35:0a:50:52:30:8f:73:c1:7b:59:b0:44:7b:5a:d5:
11:d9:a6:91:73:1d:d9:94:25:2e:ac:62:3d:07:17:b8:63:2a:
3c:29:88:ee:97:58:f1:f5:ae:de:ea:e4:19:57:79:2e:d0:9a:
d7:3f:c3:4a:58:97:c2:45:fa:1c:04:1d:7b:68:01:3b:ab:f8:
fd:fd:60:8f:66:5e:03:32:4e:7a:48:27:ba:be:97:7f:9a:c1:
50:76:45:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:27 2026 by rpki-client