Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/c_6KaNKWAo2_bQN00uvRlrpcA9A.roa
File: c_6KaNKWAo2_bQN00uvRlrpcA9A.roa (raw, json)
Hash identifier: sJTBOm/CFbR++bt2WaZo0TufXUPc2q2QTTUqbr1w3Ys=
Subject key identifier: 73:FE:8A:68:D2:96:02:8D:BF:6D:03:74:D2:EB:D1:96:BA:5C:03:D0
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D81D51CA3E5F5DEC20E4677C2063E16FB
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/c_6KaNKWAo2_bQN00uvRlrpcA9A.roa
Signing time: Sun 12 Apr 2026 13:15:20 +0000
ROA not before: Sun 12 Apr 2026 13:15:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147003
IP address blocks: 147.90.66.0/23 maxlen: 24
147.90.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:81:d5:1c:a3:e5:f5:de:c2:0e:46:77:c2:06:3e:16:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 12 13:15:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73fe8a68d296028dbf6d0374d2ebd196ba5c03d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:eb:c5:e2:4e:c0:15:ec:35:c0:19:23:a7:
5f:b7:36:9b:62:c5:da:9c:54:4c:f7:ae:75:51:00:
87:fb:35:81:0a:57:11:02:86:a4:fa:4f:f4:66:95:
0d:0e:a2:73:cc:b6:5e:cb:05:5a:65:27:1a:79:d3:
01:f4:04:7f:3c:79:ad:50:5b:66:5f:f0:3c:31:5f:
6e:a7:15:74:da:f6:9a:7c:9a:c6:d4:4c:60:59:f4:
04:91:77:1e:8f:f9:1b:13:3b:56:7e:b2:d3:ab:c9:
dc:a7:8f:3e:7c:47:5e:e3:cf:0a:d0:e3:bc:a6:79:
10:70:2f:7d:7b:75:f4:01:80:03:58:7a:45:61:de:
b4:c4:da:e2:63:ff:9e:2f:5b:6d:cd:08:7a:13:d0:
c8:72:34:4a:74:05:a0:5b:8f:dd:39:43:6e:3c:90:
65:19:6f:ba:75:1c:56:1c:e6:b3:d4:db:d5:36:38:
0a:8c:f4:a1:1c:ef:4d:cc:a3:af:9a:97:d6:46:f1:
31:8c:06:7c:1f:24:67:e6:af:9e:86:4e:b5:74:af:
c9:07:a0:c7:7e:1b:17:bb:e3:6d:a1:b9:15:7d:22:
f4:ee:69:d8:fd:8f:a3:d5:66:db:92:37:9d:b7:97:
b5:65:0c:0d:3a:fb:f4:9a:5d:e8:3f:b2:27:ee:7a:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FE:8A:68:D2:96:02:8D:BF:6D:03:74:D2:EB:D1:96:BA:5C:03:D0
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/c_6KaNKWAo2_bQN00uvRlrpcA9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.66.0/23
147.90.88.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:3c:d2:b5:8d:91:ef:d6:44:c2:57:1e:a6:16:aa:c4:ec:de:
be:16:6d:21:84:a6:08:49:81:e5:43:eb:1d:be:2a:84:9d:95:
89:31:0a:5c:3f:4c:0a:2d:9a:3b:3e:1a:eb:8a:cc:ba:b4:50:
85:88:29:6d:e5:65:5c:70:58:06:fb:e6:0a:13:58:0d:dd:06:
48:d5:04:c6:04:bd:f1:0b:80:f2:0c:3d:c5:4d:5f:fd:30:da:
e5:82:8d:49:33:f9:94:e2:90:70:43:69:ab:bc:5f:1f:5d:35:
50:22:f4:01:2d:b8:0b:07:fa:e9:69:6e:da:3c:98:cf:0e:46:
da:c6:ab:ce:04:1b:97:ca:c0:7d:ac:ae:e0:11:35:58:65:d3:
26:3a:ec:c6:6c:29:34:94:4d:29:41:40:3f:d8:ce:44:6d:ef:
c9:e0:70:05:5c:5c:10:dd:a4:f6:b9:76:19:5b:84:c5:53:4b:
18:41:30:f5:63:d7:ac:28:64:98:c8:8e:91:96:71:8d:f0:2a:
04:c6:84:e4:fd:e2:c6:6f:ee:85:40:cf:21:3d:c6:0e:13:93:
d4:36:9c:2e:18:7c:f2:f0:b3:ae:c7:3c:5a:93:05:64:ce:a8:
14:8d:7e:2f:3f:31:32:87:21:9a:bd:c4:e5:fc:3d:01:a9:ee:
d2:85:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:27 2026 by rpki-client