Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lLXbT_yRPNPZm4zg9LjS9icOzRE.roa
File: lLXbT_yRPNPZm4zg9LjS9icOzRE.roa (raw, json)
Hash identifier: MAY5To1Jn5SPWj29v6XnRzDl3TWlYrkf7eqrEAlrYYE=
Subject key identifier: 94:B5:DB:4F:FC:91:3C:D3:D9:9B:8C:E0:F4:B8:D2:F6:27:0E:CD:11
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0869FB227261A694F2C49AD13F1A28208
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lLXbT_yRPNPZm4zg9LjS9icOzRE.roa
Signing time: Wed 09 Sep 2026 14:43:27 +0000
ROA not before: Wed 09 Sep 2026 14:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 147.90.24.0/23 maxlen: 24
147.90.28.0/24 maxlen: 24
147.90.33.0/24 maxlen: 24
147.90.37.0/24 maxlen: 24
147.90.47.0/24 maxlen: 24
147.90.54.0/24 maxlen: 24
147.90.65.0/24 maxlen: 24
158.173.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:9f:b2:27:26:1a:69:4f:2c:49:ad:13:f1:a2:82:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 9 14:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94b5db4ffc913cd3d99b8ce0f4b8d2f6270ecd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:be:4e:34:e2:78:18:6d:6c:41:da:94:d5:
c4:e5:24:72:fd:ad:e8:dc:3e:f8:bd:46:d3:5e:76:
a3:b9:a7:75:91:4a:36:01:9d:cf:ab:6f:d8:f7:1c:
4f:be:8c:e5:4c:a3:cb:5c:bb:f1:80:a8:d1:d7:5d:
9d:88:93:a8:68:d0:42:e6:bc:40:48:fd:ff:67:9d:
d9:d5:21:81:72:ad:6d:61:80:17:80:a2:2c:0d:28:
0f:ea:8b:b4:48:b6:6a:cd:02:77:c7:29:b3:05:3a:
a9:38:fe:ad:84:0c:3b:71:ce:af:52:6f:b9:44:d9:
fc:ff:14:51:99:82:d6:6b:68:a0:e5:3f:7a:ba:00:
cf:3b:b9:9c:3d:43:16:84:f5:2d:71:e2:37:ce:f9:
fb:77:39:62:bf:01:be:91:24:4b:85:2b:bd:3d:00:
c4:52:6a:fd:9b:9f:fe:13:e4:86:12:a8:10:33:a2:
df:dc:7c:bc:d3:8e:76:4c:58:cb:1e:c3:2d:ab:33:
ac:ed:43:a9:b1:b5:ca:44:fa:7e:35:08:03:75:e1:
3c:fc:df:dc:d1:bc:44:a6:56:45:d4:82:55:c1:f6:
06:69:b3:96:38:98:44:25:85:32:36:10:3d:57:0f:
4b:4a:9d:2d:78:8e:27:a4:99:84:ad:36:1c:cd:eb:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B5:DB:4F:FC:91:3C:D3:D9:9B:8C:E0:F4:B8:D2:F6:27:0E:CD:11
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lLXbT_yRPNPZm4zg9LjS9icOzRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.24.0/23
147.90.28.0/24
147.90.33.0/24
147.90.37.0/24
147.90.47.0/24
147.90.54.0/24
147.90.65.0/24
158.173.204.0/23
Signature Algorithm: sha256WithRSAEncryption
e3:6d:a5:d4:ec:ad:3f:3a:29:55:13:d1:74:e1:85:51:e4:5d:
76:ec:1d:0a:b0:be:15:37:3e:31:99:cc:b3:b7:cc:8e:1a:2a:
5a:f8:96:2d:4f:71:19:d6:5d:03:f6:ea:62:d8:1a:ec:b6:c1:
b5:b4:22:9d:e0:8c:bb:28:68:0b:79:09:39:70:28:e2:1a:3c:
69:d0:c3:4e:83:66:8d:51:25:8f:db:93:29:f5:a4:b3:e8:7b:
f4:6b:5f:1f:f8:79:7b:5c:a8:33:73:22:5b:36:03:72:ab:b1:
6b:49:55:a8:bd:0a:af:b4:21:00:5b:0e:b3:37:d1:2f:39:d6:
29:1c:94:d5:a8:1e:3c:b0:a9:8f:f8:1f:af:85:14:3d:91:ec:
6c:ae:35:54:d6:d5:ed:cf:e7:e0:0d:64:2a:cc:72:8a:ec:ee:
a5:de:c1:de:15:0e:bf:41:b0:02:37:b9:3d:bc:8c:1b:5d:f3:
86:8c:ad:54:52:13:a9:6c:b5:0a:05:e2:4f:52:6f:e9:78:c4:
3c:51:32:a3:88:46:68:04:53:1e:90:fb:7f:ca:e5:02:93:99:
bd:11:85:5e:2a:79:93:84:6d:0d:2e:02:a1:57:bb:04:24:02:
38:d3:48:0e:27:8e:24:ea:56:ad:9d:cb:aa:4d:81:d3:2e:29:
11:7c:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:57 2026 by rpki-client