Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/W96_ekTXC2xNb42au14LKH0Hsd4.roa
File: W96_ekTXC2xNb42au14LKH0Hsd4.roa (raw, json)
Hash identifier: r1DbgVNBLL+fdB4muvmvt16+qR+rwwHXzObwQlF9JsU=
Subject key identifier: 5B:DE:BF:7A:44:D7:0B:6C:4D:6F:8D:9A:BB:5E:0B:28:7D:07:B1:DE
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019EB1C7A70534EB4D71192FEBFAE6288B5B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/W96_ekTXC2xNb42au14LKH0Hsd4.roa
Signing time: Wed 10 Jun 2026 13:45:12 +0000
ROA not before: Wed 10 Jun 2026 13:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 147.90.16.0/23 maxlen: 24
147.90.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:c7:a7:05:34:eb:4d:71:19:2f:eb:fa:e6:28:8b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 10 13:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bdebf7a44d70b6c4d6f8d9abb5e0b287d07b1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:36:32:f5:bd:76:f4:07:ad:1d:a1:f3:d2:
2d:09:ae:c8:39:8f:ef:6b:ca:6b:72:60:a8:03:e5:
90:07:88:a2:96:f3:40:ce:06:13:59:72:af:d7:11:
ee:5b:ac:69:d0:c9:c7:99:7f:ee:12:91:10:b8:8c:
4a:ea:ff:67:b2:c3:80:5c:e4:d9:c1:84:4f:f3:9c:
07:6c:93:86:74:8f:da:fd:dc:d6:2b:e5:1b:f2:bc:
a5:f3:17:cf:8d:6a:f8:f4:03:0f:9b:9c:b9:96:26:
8a:be:fb:90:d2:52:0a:4b:b5:d9:03:82:da:38:5d:
ab:c7:70:be:76:c2:cc:23:ce:cd:b0:d5:e9:7a:d1:
2b:bb:aa:ff:ea:78:e8:a9:bd:d6:93:6d:64:f0:1c:
77:d7:0d:c4:5b:19:61:7f:43:6f:f2:ec:df:52:b0:
d4:56:04:15:ec:54:4c:ae:29:6c:00:60:86:83:e5:
97:d0:37:00:f3:0e:2a:20:87:c9:13:db:ab:51:56:
c9:a5:d9:71:41:47:01:0c:80:d1:79:75:50:25:e3:
12:e8:63:fd:ae:3e:7e:93:3c:19:83:6c:f7:73:d9:
43:c2:59:14:9a:fc:21:dd:b5:a4:90:9b:b9:c7:4f:
5e:40:1a:50:83:65:72:48:cc:6a:ea:82:94:b9:1f:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DE:BF:7A:44:D7:0B:6C:4D:6F:8D:9A:BB:5E:0B:28:7D:07:B1:DE
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/W96_ekTXC2xNb42au14LKH0Hsd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.16.0/23
147.90.66.0/23
Signature Algorithm: sha256WithRSAEncryption
25:78:6a:21:f5:a4:91:b0:25:f9:af:aa:33:fe:9e:d4:e9:1c:
bc:62:51:cb:d3:37:51:f6:15:cd:76:4a:65:6a:ea:e9:e5:8a:
e9:69:1e:ca:41:5e:5b:3f:1c:38:27:bd:9c:c6:04:8c:77:e0:
2f:dd:9a:23:54:e6:4a:52:ab:c2:38:0c:40:dd:6d:59:bb:74:
a5:23:b4:ae:a5:02:25:93:fe:99:1a:7e:d4:05:0f:1d:b3:0d:
46:5e:35:bd:fa:7c:a4:f3:c6:23:90:2b:e0:94:78:56:83:57:
8b:d0:84:80:70:22:17:6e:2d:c8:bd:3f:f1:a5:44:69:ca:60:
af:18:5f:cb:d5:91:57:f1:47:59:b2:0c:80:1d:60:ae:7e:7d:
7e:12:7c:f5:33:1a:c2:55:56:41:d7:22:31:44:31:6b:46:c3:
1e:50:a8:cd:72:33:47:8f:30:8c:d0:45:94:a1:7b:a1:bb:9e:
f0:62:40:20:45:5c:7e:49:63:d7:5d:3b:be:bf:b2:57:55:4f:
00:74:37:cf:7c:f3:47:9d:26:0b:82:ee:2b:c2:e8:55:19:74:
f1:c9:2c:c2:36:a9:0c:69:54:dd:81:7b:19:96:0f:96:c0:ea:
04:25:d0:4c:ff:92:e8:f9:9d:97:cf:39:b3:bb:4b:30:eb:6d:
cb:3f:3c:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ6xx6cFNOtNcRkv6/rmKItbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwNjEwMTM0NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmRlYmY3YTQ0ZDcwYjZjNGQ2ZjhkOWFiYjVlMGIyODdkMDdiMWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXM2MvW9dvQHrR2h89ItCa7IOY/v
a8prcmCoA+WQB4iilvNAzgYTWXKv1xHuW6xp0MnHmX/uEpEQuIxK6v9nssOAXOTZ
wYRP85wHbJOGdI/a/dzWK+Ub8ryl8xfPjWr49AMPm5y5liaKvvuQ0lIKS7XZA4La
OF2rx3C+dsLMI87NsNXpetEru6r/6njoqb3Wk21k8Bx31w3EWxlhf0Nv8uzfUrDU
VgQV7FRMrilsAGCGg+WX0DcA8w4qIIfJE9urUVbJpdlxQUcBDIDReXVQJeMS6GP9
rj5+kzwZg2z3c9lDwlkUmvwh3bWkkJu5x09eQBpQg2VySMxq6oKUuR91fwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFvev3pE1wtsTW+NmrteCyh9B7HeMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvVzk2X2VrVFhDMnhOYjQyYXUxNExLSDBIc2Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBk1oQAwQB
k1pCMA0GCSqGSIb3DQEBCwUAA4IBAQAleGoh9aSRsCX5r6oz/p7U6Ry8YlHL0zdR
9hXNdkplaurp5YrpaR7KQV5bPxw4J72cxgSMd+Av3ZojVOZKUqvCOAxA3W1Zu3Sl
I7SupQIlk/6ZGn7UBQ8dsw1GXjW9+nyk88YjkCvglHhWg1eL0ISAcCIXbi3IvT/x
pURpymCvGF/L1ZFX8UdZsgyAHWCufn1+Enz1MxrCVVZB1yIxRDFrRsMeUKjNcjNH
jzCM0EWUoXuhu57wYkAgRVx+SWPXXTu+v7JXVU8AdDfPfPNHnSYLgu4rwuhVGXTx
ySzCNqkMaVTdgXsZlg+WwOoEJdBM/5Lo+Z2Xzzmzu0sw623LPzzO
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:52 2026 by rpki-client