Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PXoGcCcdCrJ68e7TyP9_7VZb0z8.roa
File: PXoGcCcdCrJ68e7TyP9_7VZb0z8.roa (raw, json)
Hash identifier: Gk1g2SkZd/LKdOShL72SCrMi2z5fkni6cblDNFFWM1o=
Subject key identifier: 3D:7A:06:70:27:1D:0A:B2:7A:F1:EE:D3:C8:FF:7F:ED:56:5B:D3:3F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D2EEF25E182747943CE486E8F7D76EFB9
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PXoGcCcdCrJ68e7TyP9_7VZb0z8.roa
Signing time: Fri 27 Mar 2026 10:55:17 +0000
ROA not before: Fri 27 Mar 2026 10:55:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 147.90.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:ef:25:e1:82:74:79:43:ce:48:6e:8f:7d:76:ef:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 27 10:55:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d7a0670271d0ab27af1eed3c8ff7fed565bd33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:d2:3e:bd:35:7e:75:40:4f:b4:f1:aa:5c:
4e:7d:61:6b:56:61:9c:13:60:24:e9:b2:42:68:9e:
fc:54:37:11:27:54:20:bb:e5:c1:bd:ea:20:49:59:
97:d3:0a:b3:cc:57:bd:71:73:e8:f2:48:b2:40:3c:
f4:7d:65:2f:27:87:d2:95:16:a3:64:21:12:e5:65:
45:7c:78:50:04:47:c5:f0:8a:0b:61:c4:96:31:86:
f1:8c:e7:91:b6:0a:17:13:8d:8e:46:70:2c:3b:e5:
b5:94:52:29:94:4a:c5:d4:75:0d:6f:f8:19:12:22:
c9:5e:47:15:4b:6c:85:08:b9:32:30:04:56:b4:23:
3b:f4:79:57:eb:23:8c:96:5d:65:7c:29:cc:eb:93:
5c:95:e8:dc:4a:03:0c:9e:c3:d0:52:37:ea:12:70:
da:88:ec:a0:ca:88:48:50:2a:9c:21:36:8c:a9:c7:
73:94:52:23:de:16:2e:bf:8d:ed:a1:1d:9a:28:42:
5a:71:24:ef:30:27:28:d8:b5:ba:89:90:00:96:ff:
7a:aa:3a:2b:30:76:fc:6c:53:be:97:88:75:d3:f8:
1a:49:c7:42:ed:34:b6:84:7d:67:bc:a0:61:84:87:
29:65:68:0c:7f:3d:1e:24:de:74:eb:83:cf:36:84:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7A:06:70:27:1D:0A:B2:7A:F1:EE:D3:C8:FF:7F:ED:56:5B:D3:3F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/PXoGcCcdCrJ68e7TyP9_7VZb0z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.22.0/24
Signature Algorithm: sha256WithRSAEncryption
de:c9:f6:4a:fb:cf:ef:5a:c3:af:f7:03:76:8a:cb:b7:cf:c5:
6f:c8:8c:69:cf:49:d9:f5:be:d7:27:f2:45:d8:8d:ce:8f:08:
cf:47:57:02:6d:f5:20:86:d1:93:a8:e5:ef:fa:95:fc:e0:7c:
2c:cc:29:d5:60:29:f7:77:3f:bf:d3:e2:0c:28:d7:45:43:b5:
c8:2b:1c:25:fe:ba:5b:b1:87:42:9e:80:ff:f3:8d:41:58:a1:
41:51:83:ad:22:bb:88:1c:47:8f:dc:f2:92:b2:67:3e:4c:1c:
f1:93:2f:89:80:2f:62:d3:7d:aa:80:e5:11:c7:a1:3c:71:7c:
60:cf:db:cf:77:3d:b9:0f:5e:6e:1c:d1:a4:c6:65:1d:42:cc:
8a:d3:eb:88:e9:7d:f8:1b:28:0c:15:2e:1d:16:6d:6f:3b:36:
e3:7c:17:2e:a6:61:3d:07:aa:d9:1f:61:0d:4e:3e:f5:03:69:
f1:63:e1:ac:4d:5d:e5:80:1d:0f:84:60:20:dc:d3:6a:ca:45:
e7:3d:e3:30:51:86:cd:c6:2c:6e:ce:06:dd:36:4d:b7:2d:e2:
98:45:f7:64:58:8a:c7:fe:3d:54:f5:64:6f:2c:8e:50:98:1d:
4f:2e:84:40:6e:92:d0:81:fa:40:9c:f2:d0:a5:05:34:04:8e:
4a:ef:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:06:55 2026 by rpki-client