Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/QyUxI8gMVkaKgQ8wtVFs1TFUhHM.roa
File: QyUxI8gMVkaKgQ8wtVFs1TFUhHM.roa (raw, json)
Hash identifier: ghDDAHQMn8eeFvTZ18UjHBXzZ4pzrLVpnTC9qlRLhM0=
Subject key identifier: 43:25:31:23:C8:0C:56:46:8A:81:0F:30:B5:51:6C:D5:31:54:84:73
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D293FC80FA5DAE094EED56EAC8BD6E555
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/QyUxI8gMVkaKgQ8wtVFs1TFUhHM.roa
Signing time: Thu 26 Mar 2026 08:25:38 +0000
ROA not before: Thu 26 Mar 2026 08:25:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205502
IP address blocks: 147.90.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:3f:c8:0f:a5:da:e0:94:ee:d5:6e:ac:8b:d6:e5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 26 08:25:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43253123c80c56468a810f30b5516cd531548473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:80:60:74:98:54:c8:a8:50:ff:d8:f6:a7:
ab:57:a9:52:d3:c2:3e:34:a4:bd:ed:c1:eb:e4:87:
34:e6:ea:1d:e0:fc:42:ce:7b:2f:4d:85:54:e7:b4:
4a:52:ce:ac:f2:a5:2f:22:e3:63:b6:5f:39:07:04:
dc:37:95:e3:e9:28:14:f4:27:6b:3c:e2:d0:3f:a6:
09:3a:3d:93:7a:09:1e:31:49:20:86:cd:b7:04:a9:
d9:88:4c:f9:b5:92:de:c3:0a:0b:91:b5:a0:cf:69:
f2:3d:2c:12:c9:b3:e6:0f:cd:d2:a0:e8:92:d8:c1:
d8:83:36:35:be:3a:c9:19:c5:0b:a8:46:da:92:a7:
8f:86:fa:7e:a3:10:36:9e:a9:9a:d1:78:cf:09:cc:
15:2f:45:db:2d:56:92:73:5b:98:5d:c3:63:a6:c5:
0f:42:b1:47:83:cb:12:e6:fe:fc:85:0a:34:24:b4:
66:6b:33:67:ff:eb:b0:eb:68:88:5b:c3:3b:32:e8:
d3:76:c6:bd:36:9b:94:af:65:15:f5:75:2d:ab:18:
0d:85:57:ce:60:4e:a4:a7:19:e4:e8:0c:80:67:c7:
4b:35:f9:9d:43:10:be:8a:52:44:98:5a:8c:77:a9:
b7:32:ec:72:7e:49:f3:02:46:60:cf:6e:25:3e:df:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:25:31:23:C8:0C:56:46:8A:81:0F:30:B5:51:6C:D5:31:54:84:73
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/QyUxI8gMVkaKgQ8wtVFs1TFUhHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.16.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:f7:ed:b0:55:af:73:a6:0e:30:e9:2b:83:4c:c1:92:f8:d4:
ca:e7:55:80:1d:34:5b:29:0b:ba:21:4d:f1:2a:88:fc:96:c8:
95:19:d8:8a:2e:00:56:b1:c0:25:2b:cc:3c:b5:75:0d:57:47:
a0:8b:53:c0:5a:5f:1c:f1:65:e6:db:0f:28:1e:12:b1:4d:70:
35:42:3a:01:f0:1a:0e:8a:e6:88:3b:ac:50:46:46:d9:ea:31:
52:74:2b:b8:38:4a:15:37:6f:18:8a:b2:c4:72:31:9a:8b:9a:
0e:20:c0:a6:28:a7:48:09:13:7a:c1:07:32:51:36:ba:91:05:
86:7a:56:ef:c4:0b:c8:2e:16:59:b0:51:9f:bc:dc:55:db:c1:
55:17:17:ce:63:ce:aa:21:67:1c:46:e8:50:4e:2d:12:72:9b:
16:68:ea:9c:28:e7:ee:c5:90:ea:fe:17:39:df:af:37:1b:3e:
7e:6e:2a:3b:41:b6:cf:70:7c:39:a8:40:86:2f:c9:3d:92:50:
7d:28:c4:cf:62:a9:7d:b7:4b:67:a9:58:b3:78:d9:75:88:61:
04:17:1f:32:9c:f1:1f:c9:4c:95:f0:76:67:c3:b5:e8:82:62:
ed:cf:a8:75:0e:02:fc:76:bf:e5:3b:06:12:0c:6c:51:e4:5b:
5e:70:af:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:06 2026 by rpki-client