Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/_qoSHFSl5RuXN0tVklCAd--Ir-k.roa
File: _qoSHFSl5RuXN0tVklCAd--Ir-k.roa (raw, json)
Hash identifier: jlgSIuufvv7odJ6zZXEd6VbDni2MNBfejytqScZ70VU=
Subject key identifier: FE:AA:12:1C:54:A5:E5:1B:97:37:4B:55:92:50:80:77:EF:88:AF:E9
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019C2D1EB5F97F39E81012B5C92DB81A6875
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/_qoSHFSl5RuXN0tVklCAd--Ir-k.roa
Signing time: Thu 05 Feb 2026 09:25:13 +0000
ROA not before: Thu 05 Feb 2026 09:25:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 147.90.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:1e:b5:f9:7f:39:e8:10:12:b5:c9:2d:b8:1a:68:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 5 09:25:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feaa121c54a5e51b97374b5592508077ef88afe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:7b:76:a2:5b:17:84:4f:ca:7b:30:ae:ee:
31:cc:2d:6f:db:a2:43:52:4d:99:9b:41:04:e1:0e:
8a:e0:e8:8e:46:88:46:3d:c2:0a:22:05:1d:8c:20:
23:cd:f7:21:c3:3d:f4:50:00:dc:1d:34:75:65:91:
a3:7e:44:5e:78:4f:44:50:f9:e4:4e:e7:4d:d2:d3:
0e:f7:66:17:59:f8:c5:2b:6a:02:d8:b2:50:2d:5f:
80:b6:15:f1:2b:d1:55:a9:50:02:c7:21:28:73:cb:
c8:46:92:c7:55:d1:10:28:62:a4:11:b4:ff:c6:78:
f7:de:e3:3a:a5:2f:a2:26:11:f7:9a:2e:a1:6b:4d:
e1:eb:26:5a:1e:3c:b5:bd:1b:d5:da:bd:91:df:65:
b2:83:de:65:79:31:e0:59:c9:71:ce:27:bb:20:15:
f5:9a:bf:41:cb:4a:b5:22:b5:e5:c0:a6:86:93:60:
96:56:de:b4:40:09:08:14:4b:aa:ef:42:72:0a:f3:
2f:eb:0c:ed:aa:02:eb:f0:c6:ae:ed:5e:17:b5:cb:
e0:6c:9d:95:1d:d7:74:82:d4:87:5c:7d:69:0b:66:
e2:ee:ca:2d:e4:f1:9c:3a:cb:88:05:8e:60:a5:92:
af:6c:d2:16:ef:33:5f:58:77:b7:ab:89:64:59:5b:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AA:12:1C:54:A5:E5:1B:97:37:4B:55:92:50:80:77:EF:88:AF:E9
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/_qoSHFSl5RuXN0tVklCAd--Ir-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.13.0/24
Signature Algorithm: sha256WithRSAEncryption
94:3a:2b:b5:5c:ba:b0:46:b0:db:d0:93:74:ae:12:c0:8e:e2:
eb:d6:4f:87:39:85:41:ff:6b:78:37:b3:88:ce:06:a7:68:93:
e4:39:1a:f5:39:78:60:af:11:8c:a0:42:0c:cb:94:63:0d:19:
33:b2:ac:28:e8:11:19:e0:6e:9b:bb:3d:2c:0e:3f:74:a3:2a:
56:95:3e:c2:e0:7a:ad:2a:8e:ae:8a:5b:7f:be:e0:93:e0:5b:
cc:3c:d6:58:80:a0:45:99:7e:58:41:32:ec:0f:e5:8d:e8:9e:
f8:a1:23:85:2d:c7:b7:a5:56:2d:c7:49:1a:d8:42:6e:16:8a:
1d:7f:0b:80:77:6c:a8:34:de:d9:43:ea:ac:f1:ec:2c:ae:a9:
6e:e3:f7:d2:ff:b3:ff:51:dc:7a:5d:fb:74:08:9a:e0:3c:5b:
eb:45:da:b7:da:c1:5d:62:0b:bf:99:bb:40:8b:91:4f:4e:f1:
32:90:5d:a6:30:0c:d9:2b:58:d8:c2:a9:62:21:c3:bf:21:de:
27:a1:74:a4:9a:d0:a5:c6:4e:6d:54:32:58:ec:b1:47:db:dd:
9f:d9:34:a3:f3:aa:8a:59:46:13:6c:f2:7d:48:be:09:fb:5a:
fb:51:b3:90:b9:a8:1c:24:40:b1:61:5f:0b:e5:c8:66:3a:4a:
f3:3a:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:41 2026 by rpki-client