Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kVu5eilXp4icIRimiDGtNXAhvWM.roa
File: kVu5eilXp4icIRimiDGtNXAhvWM.roa (raw, json)
Hash identifier: eXag4bPqjz4Sb0BhrTrFcRjTm6GUY5FuY011yktNu5I=
Subject key identifier: 91:5B:B9:7A:29:57:A7:88:9C:21:18:A6:88:31:AD:35:70:21:BD:63
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A12A4482E41FD8E4954D4AECF2D1572066
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kVu5eilXp4icIRimiDGtNXAhvWM.roa
Signing time: Sun 11 Oct 2026 09:21:35 +0000
ROA not before: Sun 11 Oct 2026 09:21:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 147.90.24.0/23 maxlen: 24
158.173.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:44:82:e4:1f:d8:e4:95:4d:4a:ec:f2:d1:57:20:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 11 09:21:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=915bb97a2957a7889c2118a68831ad357021bd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7c:7b:5b:3b:ea:f4:ff:c0:7c:cd:b0:1c:e4:
05:dc:78:39:fb:fe:ee:83:dd:60:e5:c9:ca:57:1e:
e2:46:ac:25:d2:19:18:c7:47:ed:3e:cf:ca:eb:67:
24:a9:9a:e6:8d:a8:c6:cc:af:93:b1:76:d0:f9:5e:
f6:3e:17:c9:db:71:f6:cd:48:7f:3a:ac:17:96:0e:
3f:af:b8:db:e6:b8:80:c6:05:00:5e:0b:9b:4c:92:
3c:26:e7:f6:37:80:d7:28:69:a4:7d:5c:6d:8b:99:
9a:40:e3:54:72:ec:62:09:46:88:e0:86:93:9d:95:
46:8c:1c:52:91:0d:68:b0:88:3c:e5:e9:fd:9e:90:
d8:1b:c6:5d:71:5c:a1:0a:f4:94:39:f3:cc:b8:e8:
be:0d:8a:64:8e:e1:63:aa:2d:36:79:f7:60:d2:83:
b3:e2:7a:63:eb:4f:85:d9:1f:e8:a0:df:a2:19:c2:
3e:57:5a:7e:8d:ae:3c:0c:40:9d:9a:03:2d:42:4b:
b5:a2:ef:52:05:d8:67:9d:b7:b3:65:7a:df:df:ef:
67:a1:51:21:90:b0:21:a4:76:87:f1:ec:79:41:ec:
6d:20:c9:d0:4f:00:25:00:d5:4a:bb:55:e4:03:87:
3b:f6:78:8d:ed:98:f9:8b:fc:2b:45:63:f1:58:cf:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:B9:7A:29:57:A7:88:9C:21:18:A6:88:31:AD:35:70:21:BD:63
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kVu5eilXp4icIRimiDGtNXAhvWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.24.0/23
158.173.204.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:8c:a8:0b:e1:c5:23:9b:e6:45:5f:4c:9f:f4:9d:f9:dc:c8:
69:10:ab:a5:c9:58:a3:74:33:86:ab:96:d7:1e:98:bc:21:3e:
f8:d1:ed:ea:4d:9d:6b:2c:c6:2b:30:f7:56:e4:e1:ee:76:af:
a3:ba:ce:47:09:1d:20:cb:b2:e5:71:2b:4b:41:f7:b9:23:9e:
e8:3a:bc:af:4a:7c:0b:9f:f5:f2:c7:e6:c0:6e:7e:8b:4b:18:
58:29:fe:a4:26:90:6e:eb:89:02:4b:92:7f:ff:03:76:9f:fe:
c0:fa:68:8c:77:ec:b9:01:ee:9f:e4:21:ac:07:c3:31:bc:63:
a6:32:80:45:46:01:dd:4f:9e:19:6d:54:c8:ca:61:52:46:d6:
4e:1c:50:0e:0d:23:b5:9d:06:b0:76:9a:e2:b4:d8:74:0d:55:
01:01:20:2a:c7:13:48:ea:66:01:d6:90:ed:01:20:61:39:29:
0f:d3:6e:82:90:79:9b:83:b0:3d:5a:12:f0:58:52:ff:a7:5e:
6d:de:bd:3c:3e:0d:ce:9b:c6:95:b1:16:80:85:bd:8e:c7:0b:
48:9a:15:bc:1f:b4:09:65:c5:9a:70:01:dd:d6:c3:7f:3b:de:
36:a1:24:aa:fb:cc:c1:1d:b5:ab:54:81:82:00:14:ec:c5:e1:
cf:14:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:06:35 2026 by rpki-client