Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lUnwu0XXlzokBDSIn3Rl-NSl340.roa
File: lUnwu0XXlzokBDSIn3Rl-NSl340.roa (raw, json)
Hash identifier: AyIfDrjdnyfmtg6n0cUgSmy1Ck5N66vEOezjrMW1Hks=
Subject key identifier: 95:49:F0:BB:45:D7:97:3A:24:04:34:88:9F:74:65:F8:D4:A5:DF:8D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D9111B2F469B745ED645484540C4CC127
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lUnwu0XXlzokBDSIn3Rl-NSl340.roa
Signing time: Wed 15 Apr 2026 12:15:49 +0000
ROA not before: Wed 15 Apr 2026 12:15:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206150
IP address blocks: 147.90.116.0/24 maxlen: 24
147.90.118.0/24 maxlen: 24
158.173.129.0/24 maxlen: 24
158.173.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:11:b2:f4:69:b7:45:ed:64:54:84:54:0c:4c:c1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 15 12:15:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9549f0bb45d7973a240434889f7465f8d4a5df8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:03:9e:b9:e2:11:db:96:63:de:9b:3d:a9:
2b:a4:8e:9c:53:8b:48:eb:aa:fb:2b:c8:53:88:b0:
69:7e:e7:61:b1:be:f6:98:ff:b5:c5:7d:11:99:7c:
04:54:b0:f5:ad:ef:98:47:da:fc:ef:a5:bb:24:03:
60:23:ed:22:21:f4:71:3b:02:e1:79:5d:ec:3f:28:
31:4b:16:34:f7:f5:eb:3d:d9:c4:f3:81:42:cc:5b:
75:6f:0e:6a:70:75:d5:40:1b:f9:f9:f3:b4:c0:b4:
1f:75:e9:6f:75:cc:a3:ab:50:68:f2:c9:2c:52:77:
8b:36:6f:32:3a:9b:97:06:73:c5:a4:a8:37:30:ef:
4b:ff:e4:2b:3d:4f:dc:cc:8f:ce:f0:f9:62:8e:11:
48:b3:fc:c9:d6:54:58:48:24:17:24:3a:30:fb:a7:
04:05:9b:6f:15:e4:fc:df:20:ae:01:0b:1b:2a:86:
48:ac:29:be:26:a1:d6:54:1f:6b:3e:0b:23:50:13:
4f:87:4a:8c:68:4f:a6:fc:4a:bb:e7:a5:d0:78:30:
f5:9e:60:c3:ab:9f:43:18:bd:26:49:bd:fb:60:73:
3d:33:a2:e5:4b:19:10:b6:76:bb:5a:0d:21:60:be:
4b:10:93:74:80:10:10:d0:0b:50:ed:d6:00:3f:b7:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:49:F0:BB:45:D7:97:3A:24:04:34:88:9F:74:65:F8:D4:A5:DF:8D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lUnwu0XXlzokBDSIn3Rl-NSl340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.116.0/24
147.90.118.0/24
158.173.129.0-158.173.130.255
Signature Algorithm: sha256WithRSAEncryption
8f:54:43:7f:00:0e:95:86:88:f4:45:82:2c:a0:ea:f7:82:a4:
fe:2a:ca:2f:69:76:06:b7:c1:35:d5:bc:6c:f2:69:ad:95:ef:
38:c1:42:d5:a7:41:94:41:3f:f5:8c:10:0b:03:cb:00:6c:ff:
e6:a3:38:c9:73:5b:ea:8c:f4:06:d1:9c:aa:e9:38:2b:06:5f:
98:d0:f8:12:89:39:fe:8c:e4:3c:79:76:36:d7:75:e7:62:35:
67:25:64:98:7d:22:37:7b:6a:f9:ba:a7:f1:41:f5:55:16:cc:
28:f2:78:48:38:64:dd:61:09:3b:ec:8f:5b:b5:2f:59:28:a9:
e1:69:b5:b6:65:27:df:d5:e7:11:2c:b9:81:da:18:bf:e0:55:
0c:41:ab:c6:b9:41:28:a5:95:18:bf:90:16:2f:2d:d4:52:d7:
9d:7e:22:e4:44:be:48:b6:74:04:08:ba:68:4a:dc:09:81:06:
ea:93:f5:b7:a3:db:84:2c:8e:83:57:d4:38:4d:db:33:5e:ee:
df:db:26:9e:e1:35:d5:3c:eb:0b:b7:be:df:9c:a7:30:7e:cc:
dc:b4:d8:03:55:e8:6c:b7:3d:54:40:6a:b2:51:30:91:51:13:
5c:4f:72:58:39:55:cf:25:93:96:22:6b:0e:c5:ee:15:2f:9c:
be:86:9d:34
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ2REbL0abdF7WRUhFQMTMEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwNDE1MTIxNTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTQ5ZjBiYjQ1ZDc5NzNhMjQwNDM0ODg5Zjc0NjVmOGQ0YTVkZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnogDnrniEduWY96bPakrpI6cU4tI
66r7K8hTiLBpfudhsb72mP+1xX0RmXwEVLD1re+YR9r876W7JANgI+0iIfRxOwLh
eV3sPygxSxY09/XrPdnE84FCzFt1bw5qcHXVQBv5+fO0wLQfdelvdcyjq1Bo8sks
UneLNm8yOpuXBnPFpKg3MO9L/+QrPU/czI/O8PlijhFIs/zJ1lRYSCQXJDow+6cE
BZtvFeT83yCuAQsbKoZIrCm+JqHWVB9rPgsjUBNPh0qMaE+m/Eq756XQeDD1nmDD
q59DGL0mSb37YHM9M6LlSxkQtna7Wg0hYL5LEJN0gBAQ0AtQ7dYAP7fgKwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJVJ8LtF15c6JAQ0iJ90ZfjUpd+NMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvbFVud3UwWFhsem9rQkRTSW4zUmwtTlNsMzQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAk1p0AwQA
k1p2MAwDBACerYEDBACerYIwDQYJKoZIhvcNAQELBQADggEBAI9UQ38ADpWGiPRF
giyg6veCpP4qyi9pdga3wTXVvGzyaa2V7zjBQtWnQZRBP/WMEAsDywBs/+ajOMlz
W+qM9AbRnKrpOCsGX5jQ+BKJOf6M5Dx5djbXdediNWclZJh9Ijd7avm6p/FB9VUW
zCjyeEg4ZN1hCTvsj1u1L1koqeFptbZlJ9/V5xEsuYHaGL/gVQxBq8a5QSillRi/
kBYvLdRS151+IuREvki2dAQIumhK3AmBBuqT9bej24QsjoNX1DhN2zNe7t/bJp7h
NdU86wu3vt+cpzB+zNy02ANV6Gy3PVRAarJRMJFRE1xPclg5Vc8lk5Yiaw7F7hUv
nL6GnTQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:35 2026 by rpki-client