Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PEexLDcbtVrIpN9iKx6F1gcXu3g.roa
File: PEexLDcbtVrIpN9iKx6F1gcXu3g.roa (raw, json)
Hash identifier: QPdFLPERG98ot15/VPdGTBO/PKuJwPBYQJ6kj/XC1TY=
Subject key identifier: 3C:47:B1:2C:37:1B:B5:5A:C8:A4:DF:62:2B:1E:85:D6:07:17:BB:78
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019EBC0FCAA890F06C8E09AD1EED4DA193D1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PEexLDcbtVrIpN9iKx6F1gcXu3g.roa
Signing time: Fri 12 Jun 2026 13:40:11 +0000
ROA not before: Fri 12 Jun 2026 13:40:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26739
IP address blocks: 147.90.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:0f:ca:a8:90:f0:6c:8e:09:ad:1e:ed:4d:a1:93:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 12 13:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c47b12c371bb55ac8a4df622b1e85d60717bb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:8f:ed:90:44:27:21:b3:e2:ab:d3:2f:24:
29:34:05:e2:9b:aa:ba:52:65:f2:49:74:ef:09:a8:
11:dc:11:e0:91:ce:5d:ee:20:17:11:c6:c3:18:67:
a5:34:c2:ce:2e:2e:ca:c0:b3:ec:43:a9:b2:97:e5:
cf:d4:9c:43:7c:28:30:e7:c9:a6:a3:d1:65:31:a0:
f8:fe:df:7b:f8:69:8c:fb:2f:2d:0e:d1:22:1f:7f:
ee:b1:94:99:bc:97:c5:dd:01:89:16:6c:b4:38:dc:
8f:3e:a1:4c:1e:f3:dc:d7:fb:5d:60:a1:4b:60:96:
c1:9a:bf:a6:d9:60:ec:1f:62:c9:b4:7e:d3:e0:73:
04:a3:b7:1e:40:e8:97:7a:2f:3b:f4:72:89:82:d6:
da:f4:b6:40:48:64:c0:26:72:94:ab:3d:a6:63:43:
fa:f1:3a:b8:1d:d4:a6:13:40:04:97:e3:99:32:41:
96:fe:56:12:04:ff:ba:73:fd:0a:99:7c:96:09:59:
b5:28:fa:be:24:c0:e3:e3:8b:67:29:6f:b4:1c:4e:
8c:b2:4f:79:be:fe:f8:d2:28:7b:07:98:3f:aa:39:
ec:83:ca:a7:40:39:dd:8b:ba:07:67:63:37:e6:fa:
23:b7:76:cc:7c:27:86:71:cc:55:72:e8:50:88:6e:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:47:B1:2C:37:1B:B5:5A:C8:A4:DF:62:2B:1E:85:D6:07:17:BB:78
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PEexLDcbtVrIpN9iKx6F1gcXu3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.120.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:c1:a9:4b:73:e0:d5:b2:8f:c6:79:5f:df:92:2e:b8:62:74:
28:da:ec:2d:46:e6:1b:23:82:45:ed:f9:7e:c8:34:fc:fe:80:
3b:79:6f:c9:22:f4:40:40:d7:89:f0:f6:ed:67:56:6c:a6:10:
a4:82:81:b2:17:6b:00:18:59:83:8c:e2:06:d8:7c:21:e5:5b:
55:69:e4:c7:87:f6:83:aa:f4:b8:ba:15:be:ca:bd:00:02:6f:
44:40:e8:3f:2b:7b:79:9d:aa:c9:ec:f2:af:b1:60:61:ed:b5:
68:24:5b:09:3e:ce:26:b2:dd:bb:2b:cf:63:8c:0d:36:d9:8a:
1d:2a:cc:66:46:67:f6:e9:25:66:3b:3d:87:fd:56:7d:84:00:
79:a3:60:21:5b:4c:ba:da:78:e9:ae:5f:fc:44:f5:56:a2:51:
1d:cd:d8:9a:c6:53:89:44:24:d1:ee:f3:10:8b:3a:7d:00:8d:
f7:89:ab:7c:e5:a4:3c:e0:24:aa:66:f4:06:b3:77:1e:a4:e3:
ef:f4:fe:37:64:c8:be:62:ec:20:54:b0:5b:97:42:de:3d:16:
98:df:7f:cc:84:fd:35:4f:67:4b:a7:39:70:75:c6:e1:f3:da:
3c:8e:73:bf:eb:9b:13:2e:98:9f:97:75:52:01:76:88:c3:2c:
33:b8:e9:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ68D8qokPBsjgmtHu1NoZPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwNjEyMTM0MDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzQ3YjEyYzM3MWJiNTVhYzhhNGRmNjIyYjFlODVkNjA3MTdiYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lKP7ZBEJyGz4qvTLyQpNAXim6q6
UmXySXTvCagR3BHgkc5d7iAXEcbDGGelNMLOLi7KwLPsQ6myl+XP1JxDfCgw58mm
o9FlMaD4/t97+GmM+y8tDtEiH3/usZSZvJfF3QGJFmy0ONyPPqFMHvPc1/tdYKFL
YJbBmr+m2WDsH2LJtH7T4HMEo7ceQOiXei879HKJgtba9LZASGTAJnKUqz2mY0P6
8Tq4HdSmE0AEl+OZMkGW/lYSBP+6c/0KmXyWCVm1KPq+JMDj44tnKW+0HE6Msk95
vv740ih7B5g/qjnsg8qnQDndi7oHZ2M35vojt3bMfCeGccxVcuhQiG6KewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDxHsSw3G7VayKTfYisehdYHF7t4MB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvUEVleExEY2J0VnJJcE45aUt4NkYxZ2NYdTNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk1p4MA0G
CSqGSIb3DQEBCwUAA4IBAQAfwalLc+DVso/GeV/fki64YnQo2uwtRuYbI4JF7fl+
yDT8/oA7eW/JIvRAQNeJ8PbtZ1ZsphCkgoGyF2sAGFmDjOIG2Hwh5VtVaeTHh/aD
qvS4uhW+yr0AAm9EQOg/K3t5narJ7PKvsWBh7bVoJFsJPs4mst27K89jjA022Yod
KsxmRmf26SVmOz2H/VZ9hAB5o2AhW0y62njprl/8RPVWolEdzdiaxlOJRCTR7vMQ
izp9AI33iat85aQ84CSqZvQGs3cepOPv9P43ZMi+YuwgVLBbl0LePRaY33/MhP01
T2dLpzlwdcbh89o8jnO/65sTLpifl3VSAXaIwywzuOmk
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:33 2026 by rpki-client