Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wWBUjM9FO7RKWBRDBUlrA0zd2lM.roa
File: wWBUjM9FO7RKWBRDBUlrA0zd2lM.roa (raw, json)
Hash identifier: GBDFq2DUlsi5tiqFy6su4ha3yIdqydvBe4SJv6dD7VQ=
Subject key identifier: C1:60:54:8C:CF:45:3B:B4:4A:58:14:43:05:49:6B:03:4C:DD:DA:53
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D68173D6F9464AE597D76F9C093996D65
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wWBUjM9FO7RKWBRDBUlrA0zd2lM.roa
Signing time: Tue 07 Apr 2026 13:17:26 +0000
ROA not before: Tue 07 Apr 2026 13:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60542
IP address blocks: 147.90.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:17:3d:6f:94:64:ae:59:7d:76:f9:c0:93:99:6d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 7 13:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c160548ccf453bb44a58144305496b034cddda53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:04:43:32:ac:5b:02:5a:5b:11:78:7b:e4:
f7:96:66:20:76:80:7e:26:ae:79:0c:97:76:60:37:
71:97:95:4f:16:ff:65:a7:cd:4e:0c:a4:27:c5:89:
96:75:b7:2c:0c:07:01:68:41:2a:44:7d:d0:fd:62:
a6:a0:93:67:3b:6b:bb:58:2c:cf:3e:7b:63:ea:19:
6e:7f:00:47:8e:af:ae:21:ce:4a:9e:fc:c8:e9:60:
f7:8f:8b:d2:61:75:12:58:32:67:e4:d1:0a:1c:f2:
8b:f1:e6:a9:5b:7d:1d:52:67:36:02:5a:b2:2d:4f:
8e:33:ca:14:ee:2a:86:80:12:1a:95:4b:43:28:ba:
df:47:33:49:80:2d:09:a1:3b:fb:47:3b:20:88:7b:
af:45:74:49:f4:02:3f:de:3f:a6:dc:44:7c:1b:29:
20:6d:a4:b7:4b:b3:33:d1:6a:1f:82:be:cb:14:00:
0e:32:1d:e8:6b:68:db:87:9d:81:07:9d:28:20:23:
18:bd:69:3c:c4:7d:4c:4f:f7:19:ab:90:b7:18:ff:
50:59:06:d4:33:02:7a:54:f9:3d:d7:8e:ae:8d:8f:
2b:09:62:6f:e2:f6:66:34:39:f8:20:5a:1a:1f:5f:
72:03:e7:aa:56:78:21:ad:d4:c9:4d:e2:b5:21:bb:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:60:54:8C:CF:45:3B:B4:4A:58:14:43:05:49:6B:03:4C:DD:DA:53
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wWBUjM9FO7RKWBRDBUlrA0zd2lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.39.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d9:c1:71:8f:fa:93:64:13:37:09:a2:f7:22:3e:85:08:79:
36:8f:d9:d1:58:4e:9e:62:69:21:ee:e3:7e:ab:b4:eb:48:a9:
6d:ab:ff:2a:b1:ec:d7:f3:4d:b7:12:4a:dc:4b:b0:69:96:e5:
1b:a5:39:51:27:ff:63:da:8f:ae:39:17:53:9c:6e:02:1a:1c:
ad:89:6a:fe:82:21:13:bb:a7:3a:d3:82:41:c8:a2:9c:38:c0:
e1:20:d3:05:78:e8:e7:c2:cf:d8:4f:8f:97:f8:96:37:d0:55:
41:5a:f6:1f:f2:02:38:58:e3:06:8f:77:3b:c3:57:f9:32:84:
50:e2:a8:ad:9b:b7:26:f1:da:24:c3:93:ce:a6:a0:1d:29:86:
2a:7e:2b:94:b4:6a:9e:07:b7:eb:39:20:9b:c5:2b:8f:b8:8c:
88:9d:7b:58:61:03:3c:c2:ea:91:45:64:fe:63:d4:20:68:d2:
e5:03:74:41:06:d4:40:b5:0f:7a:00:42:28:59:1a:91:2b:d1:
21:d7:8c:e8:76:57:41:9c:4a:4f:7e:d0:64:b1:a5:90:57:ba:
1f:f4:92:23:c9:1c:0a:47:80:e2:28:62:07:2e:4d:89:90:2d:
4e:61:e9:32:65:79:69:8c:09:d9:65:25:dc:ce:ac:b9:2b:ae:
b5:52:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:07:25 2026 by rpki-client