Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ikZpfgSNx17L2lB3byZ5WDU5h-Q.roa
File: ikZpfgSNx17L2lB3byZ5WDU5h-Q.roa (raw, json)
Hash identifier: f8aXiS+bi/NfsxapkR0XwjkbFDung5N66H0qSxZtvFA=
Subject key identifier: 8A:46:69:7E:04:8D:C7:5E:CB:DA:50:77:6F:26:79:58:35:39:87:E4
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019C5D80E12459C903C9F79021BC3D9D36A1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ikZpfgSNx17L2lB3byZ5WDU5h-Q.roa
Signing time: Sat 14 Feb 2026 18:54:13 +0000
ROA not before: Sat 14 Feb 2026 18:54:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 147.90.13.0/24 maxlen: 24
147.90.205.0/24 maxlen: 24
158.173.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5d:80:e1:24:59:c9:03:c9:f7:90:21:bc:3d:9d:36:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 14 18:54:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a46697e048dc75ecbda50776f267958353987e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:19:6f:ec:c2:f1:0a:e3:a8:64:2d:27:11:
55:be:bc:d2:09:32:5e:8a:3c:d4:89:d9:72:ed:2d:
f7:70:b8:90:2c:af:15:95:3d:0c:af:bf:39:bb:9e:
1b:e9:e3:90:29:f2:bb:c7:ad:13:5d:2c:98:e4:92:
93:b1:30:70:21:d3:b5:9e:04:3c:34:45:6d:af:7a:
e5:35:c7:d0:45:0b:4b:92:12:c5:7a:29:e0:67:ba:
9c:53:d1:a9:cf:eb:a4:f4:1e:43:05:dc:e3:0d:f5:
fa:4d:7a:7d:ea:85:9f:02:f0:83:97:e3:ca:e4:c6:
36:db:03:23:19:3a:41:ca:2a:e2:41:1c:d7:cd:99:
2d:42:ae:00:31:e3:ff:b5:30:17:81:fd:74:59:43:
6e:a6:0d:5f:02:4d:96:d6:b6:77:ef:57:36:6d:75:
6f:ce:fc:c7:7e:6c:c6:bd:59:7a:dd:7c:e9:1b:80:
2d:f3:bb:97:75:25:4e:cf:e2:04:d3:f4:7d:35:ca:
54:f9:ed:ee:93:a4:9e:ad:9b:23:fb:a9:96:cd:8e:
72:58:b0:4d:e0:57:1c:a8:dc:42:8d:25:93:94:4b:
0a:b1:da:0b:3d:ae:45:1d:ab:33:da:24:30:f3:8c:
e0:fd:90:d9:37:9b:19:26:f0:ae:e4:07:d4:37:f8:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:46:69:7E:04:8D:C7:5E:CB:DA:50:77:6F:26:79:58:35:39:87:E4
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ikZpfgSNx17L2lB3byZ5WDU5h-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.13.0/24
147.90.205.0/24
158.173.227.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:d7:dc:95:12:69:3e:57:84:cb:61:8a:38:10:50:c9:a1:b4:
46:9c:7a:bb:b6:a5:b8:da:0c:18:b9:49:2e:84:e5:86:95:e5:
82:c6:29:34:bd:7c:2b:0f:c3:85:29:dc:3f:51:69:9a:be:ac:
16:76:fe:9c:fa:09:3c:ad:dd:21:1e:48:a8:2e:a2:1d:6f:b5:
d8:f5:94:86:cf:38:ab:bd:fd:bc:de:4d:96:b1:de:73:37:a6:
8f:04:0d:7b:b5:69:b1:be:64:29:50:ab:25:02:59:b5:65:1c:
99:cf:b4:d0:0f:7f:d9:f6:18:93:77:c6:70:6e:46:4f:82:a5:
2c:ec:38:23:84:28:36:dc:1c:df:fe:f2:25:93:b4:0e:59:0e:
37:a8:f0:71:58:8b:1a:b0:4b:89:8b:9b:71:20:ad:a6:67:dd:
87:7a:91:93:ce:0f:1a:9d:d5:3b:75:9e:32:6e:9c:41:96:05:
57:6e:7c:e9:cd:89:8f:e4:6a:61:c9:af:66:38:50:bf:38:a6:
c2:09:64:21:3c:ac:9d:b2:a0:1b:9a:45:c1:7a:c9:6b:96:f4:
64:e4:c9:b7:a2:5b:81:a1:dc:93:0f:e4:1f:31:34:c7:0a:47:
8c:23:46:5b:43:0d:24:ae:2e:72:97:60:6c:b4:d7:9d:8a:0b:
28:56:53:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:52 2026 by rpki-client