Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/x3j2yW7FF-Hl809sG_kmx1XiK3Y.roa
File: x3j2yW7FF-Hl809sG_kmx1XiK3Y.roa (raw, json)
Hash identifier: /nC6uJIJlQALPefMcssDkxjCW0bdlZMWvIEi1UdEEYQ=
Subject key identifier: C7:78:F6:C9:6E:C5:17:E1:E5:F3:4F:6C:1B:F9:26:C7:55:E2:2B:76
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A092275A4BF8EBDA22DD7F889FBF9CF729
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/x3j2yW7FF-Hl809sG_kmx1XiK3Y.roa
Signing time: Fri 11 Sep 2026 20:27:27 +0000
ROA not before: Fri 11 Sep 2026 20:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214467
IP address blocks: 147.90.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:27:5a:4b:f8:eb:da:22:dd:7f:88:9f:bf:9c:f7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 11 20:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c778f6c96ec517e1e5f34f6c1bf926c755e22b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bc:b8:62:e5:a1:5f:ce:f0:66:51:8c:c8:90:
69:99:69:90:e9:54:b9:94:ae:d2:26:e3:43:6e:a5:
1e:f5:e2:58:a0:7c:79:37:27:37:8b:18:77:79:66:
a7:71:4c:28:ca:b3:d2:68:27:6a:27:30:e9:bd:65:
83:5b:02:ab:98:56:0c:83:08:3d:c7:4a:2c:36:df:
c2:6d:5a:aa:5b:64:76:f2:3f:85:70:e3:1b:ae:0f:
55:78:7d:e1:13:72:36:8c:87:36:49:70:82:6e:26:
b8:60:34:ec:d3:00:84:51:ce:04:9c:c9:55:ca:68:
49:ff:77:dc:c7:d0:e6:3b:8c:2a:b8:6f:40:a9:24:
27:b3:a2:b4:7c:51:3e:d5:24:fe:f6:48:26:0e:12:
d0:17:24:f6:44:b9:af:12:2c:62:cb:bd:77:85:39:
55:b9:9c:8a:2a:74:e9:be:3f:4a:05:bc:48:6a:7b:
cf:d3:af:c6:a6:94:30:7d:0b:4e:48:48:96:2b:e4:
0f:bc:79:23:97:78:fb:29:41:60:1d:3b:18:0a:ea:
2c:16:45:71:31:c5:9b:45:ea:98:3d:ac:6f:79:89:
d8:cd:66:a3:b5:c3:37:53:52:51:0a:47:81:4a:30:
7a:8b:04:55:12:ce:ca:2c:3e:5f:fe:ca:08:24:0b:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:78:F6:C9:6E:C5:17:E1:E5:F3:4F:6C:1B:F9:26:C7:55:E2:2B:76
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/x3j2yW7FF-Hl809sG_kmx1XiK3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:9d:69:5a:45:d5:6a:88:45:f7:2a:53:89:3f:8c:aa:32:11:
9d:11:3b:1e:d6:f7:35:2f:8e:3d:5b:be:77:da:8f:59:93:a6:
6e:d9:80:67:c7:e5:96:c9:2d:c9:5f:cc:4b:93:2c:6e:d5:e5:
50:ac:73:e7:3e:e1:dd:22:b7:b4:ab:b5:12:06:10:50:be:f2:
b1:d0:f1:fd:5a:37:bb:2e:1b:2f:d2:1c:a3:4d:f7:8e:12:d3:
39:a8:3d:98:db:5b:42:b9:21:26:48:c9:d8:15:55:75:f4:ac:
6f:e1:04:bf:3f:99:d8:7c:ac:fc:96:d2:fb:4d:48:66:69:69:
7b:83:cd:d2:42:c8:97:21:bc:54:bd:5b:63:85:e3:73:9f:7e:
0f:69:17:8e:11:61:e4:5c:ec:7e:8a:d8:10:10:aa:3e:e6:18:
01:b5:43:67:4a:39:eb:b1:80:4e:94:61:11:96:1f:0c:e7:41:
02:07:fa:1a:b3:c2:81:24:3d:60:7f:88:cb:93:68:61:68:62:
02:9c:09:3e:60:ae:11:8f:09:ff:2c:2f:10:28:9f:91:23:54:
85:71:b2:07:3a:c4:51:fa:f6:30:7b:ae:bf:ef:ea:65:65:15:
cf:ab:15:9c:3d:cf:0c:e6:ac:00:57:20:63:3b:1d:07:80:90:
cf:ea:41:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:51:03 2026 by rpki-client