Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pIKkhf7DgU3g-tNf20Ph572f5AY.roa
File: pIKkhf7DgU3g-tNf20Ph572f5AY.roa (raw, json)
Hash identifier: caAij5rLQ7i1hXQKYZXI4jgC/DplDKZrTSKcgPzzHg4=
Subject key identifier: A4:82:A4:85:FE:C3:81:4D:E0:FA:D3:5F:DB:43:E1:E7:BD:9F:E4:06
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019C47AAAC5D832D72907E4249F5C93325E6
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pIKkhf7DgU3g-tNf20Ph572f5AY.roa
Signing time: Tue 10 Feb 2026 13:08:13 +0000
ROA not before: Tue 10 Feb 2026 13:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 147.90.0.0/24 maxlen: 24
147.90.3.0/24 maxlen: 24
147.90.6.0/24 maxlen: 24
147.90.9.0/24 maxlen: 24
147.90.11.0/24 maxlen: 24
147.90.12.0/24 maxlen: 24
147.90.14.0/24 maxlen: 24
147.90.17.0/24 maxlen: 24
147.90.20.0/24 maxlen: 24
147.90.25.0/24 maxlen: 24
147.90.33.0/24 maxlen: 24
147.90.49.0/24 maxlen: 24
147.90.70.0/24 maxlen: 24
147.90.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:aa:ac:5d:83:2d:72:90:7e:42:49:f5:c9:33:25:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 10 13:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a482a485fec3814de0fad35fdb43e1e7bd9fe406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:71:35:a9:3c:d7:1b:8e:70:ce:c5:67:0e:
17:62:ab:67:63:30:9e:42:0f:32:0a:77:c9:9c:23:
7d:8f:a3:05:44:07:b5:35:9b:38:5d:1f:ca:18:cf:
99:47:21:cf:c5:98:20:59:0b:95:92:68:32:c9:f9:
f3:c6:7d:43:3d:55:97:68:06:4a:98:f4:42:1b:69:
da:2f:91:48:03:a2:92:34:47:20:79:b0:d6:12:ff:
d9:ae:2f:3d:69:a7:52:37:65:cb:b6:19:6a:ec:48:
2d:d7:ac:24:14:38:fc:8e:9a:4d:81:4d:9c:2b:8f:
fe:74:b6:35:2d:47:9b:5e:01:7e:aa:cf:61:b6:a5:
15:25:63:c6:96:f6:f0:b0:8e:63:d4:b1:34:56:d7:
d5:f2:75:8f:56:9b:f1:75:d1:a6:56:af:28:e9:42:
92:88:18:99:27:24:fb:8d:c1:d6:5e:ed:7d:05:d2:
ea:79:76:d9:24:7e:8c:35:4f:59:d0:8e:44:be:b4:
d6:ef:11:fb:43:c9:ab:79:74:3f:84:d9:08:f2:a0:
59:da:00:eb:10:03:f8:14:bb:ca:1e:20:1e:8f:e2:
24:90:7e:46:89:69:28:35:4e:fa:cf:57:aa:ad:f9:
27:2c:b7:ab:54:ac:8a:60:d9:6a:1f:39:5e:fa:6e:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:82:A4:85:FE:C3:81:4D:E0:FA:D3:5F:DB:43:E1:E7:BD:9F:E4:06
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/pIKkhf7DgU3g-tNf20Ph572f5AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.0.0/24
147.90.3.0/24
147.90.6.0/24
147.90.9.0/24
147.90.11.0-147.90.12.255
147.90.14.0/24
147.90.17.0/24
147.90.20.0/24
147.90.25.0/24
147.90.33.0/24
147.90.49.0/24
147.90.70.0/24
147.90.127.0/24
Signature Algorithm: sha256WithRSAEncryption
06:02:49:e6:1f:69:1c:64:63:d0:b0:47:54:7e:12:49:0e:31:
25:ae:07:78:0d:ad:13:4e:95:73:3e:53:01:61:74:4d:8e:0b:
d4:39:de:93:e1:0d:59:76:44:13:79:24:da:80:5d:d2:7e:b1:
b8:66:b4:50:24:d0:81:a7:d4:de:61:49:02:ca:44:6a:84:1b:
c7:ff:6c:48:e8:f2:98:a0:78:c0:d2:1c:be:a1:31:c0:e1:8c:
b3:ee:a9:06:f2:28:13:6f:99:bb:8a:c4:e4:07:8c:83:a4:62:
ff:7f:b1:f4:18:ab:ae:e9:7e:6b:45:08:1f:a4:d2:87:32:bf:
79:e0:4c:4f:6e:de:f5:3f:79:eb:98:6f:ac:80:f2:25:34:45:
2d:55:db:e7:23:0f:a1:39:b6:15:34:1b:ba:6d:4e:20:20:4f:
a4:8b:dc:b0:ae:95:5f:f4:fa:11:5a:89:cd:9e:35:ee:33:72:
50:87:c7:bb:1a:4b:e3:41:a5:11:59:5e:61:43:2e:db:8a:c9:
a7:ac:9d:35:ec:ea:19:4b:61:8b:74:76:2a:62:53:10:60:8f:
90:8e:57:e5:d5:49:86:96:4a:bf:ff:8a:b7:e2:e2:86:9a:74:
9b:3d:69:60:fa:84:25:57:6e:f8:4a:ea:95:1e:c6:28:b0:c6:
4d:28:81:ab
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZxHqqxdgy1ykH5CSfXJMyXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwMjEwMTMwODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDgyYTQ4NWZlYzM4MTRkZTBmYWQzNWZkYjQzZTFlN2JkOWZlNDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBRxNak81xuOcM7FZw4XYqtnYzCe
Qg8yCnfJnCN9j6MFRAe1NZs4XR/KGM+ZRyHPxZggWQuVkmgyyfnzxn1DPVWXaAZK
mPRCG2naL5FIA6KSNEcgebDWEv/Zri89aadSN2XLthlq7Egt16wkFDj8jppNgU2c
K4/+dLY1LUebXgF+qs9htqUVJWPGlvbwsI5j1LE0VtfV8nWPVpvxddGmVq8o6UKS
iBiZJyT7jcHWXu19BdLqeXbZJH6MNU9Z0I5EvrTW7xH7Q8mreXQ/hNkI8qBZ2gDr
EAP4FLvKHiAej+IkkH5GiWkoNU76z1eqrfknLLerVKyKYNlqHzle+m4HEwIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFKSCpIX+w4FN4PrTX9tD4ee9n+QGMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvcElLa2hmN0RnVTNnLXROZjIwUGg1NzJmNUFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAk1oAAwQA
k1oDAwQAk1oGAwQAk1oJMAwDBACTWgsDBACTWgwDBACTWg4DBACTWhEDBACTWhQD
BACTWhkDBACTWiEDBACTWjEDBACTWkYDBACTWn8wDQYJKoZIhvcNAQELBQADggEB
AAYCSeYfaRxkY9CwR1R+EkkOMSWuB3gNrRNOlXM+UwFhdE2OC9Q53pPhDVl2RBN5
JNqAXdJ+sbhmtFAk0IGn1N5hSQLKRGqEG8f/bEjo8pigeMDSHL6hMcDhjLPuqQby
KBNvmbuKxOQHjIOkYv9/sfQYq67pfmtFCB+k0ocyv3ngTE9u3vU/eeuYb6yA8iU0
RS1V2+cjD6E5thU0G7ptTiAgT6SL3LCulV/0+hFaic2eNe4zclCHx7saS+NBpRFZ
XmFDLtuKyaesnTXs6hlLYYt0dipiUxBgj5COV+XVSYaWSr//irfi4oaadJs9aWD6
hCVXbvhK6pUexiiwxk0ogas=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:36:05 2026 by rpki-client