Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yD45Dx87yXZCDyFpuxILiT-nx4s.roa
File: yD45Dx87yXZCDyFpuxILiT-nx4s.roa (raw, json)
Hash identifier: ag2BZKNcqpwVdvjxUTgSpKJOsLIe9B/AGOUFRP1CrLs=
Subject key identifier: C8:3E:39:0F:1F:3B:C9:76:42:0F:21:69:BB:12:0B:89:3F:A7:C7:8B
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D7335852556F7798B928DA6DD0BAE82F6
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yD45Dx87yXZCDyFpuxILiT-nx4s.roa
Signing time: Thu 09 Apr 2026 17:06:20 +0000
ROA not before: Thu 09 Apr 2026 17:06:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 147.90.32.0/24 maxlen: 24
147.90.36.0/24 maxlen: 24
147.90.55.0/24 maxlen: 24
147.90.115.0/24 maxlen: 24
147.90.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:35:85:25:56:f7:79:8b:92:8d:a6:dd:0b:ae:82:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 9 17:06:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c83e390f1f3bc976420f2169bb120b893fa7c78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:d8:e0:a0:2a:03:3c:c5:63:a1:78:c3:84:
c0:96:65:06:a1:d4:6f:65:b9:a4:d4:37:22:9e:7b:
44:e6:38:bc:00:9f:26:0c:36:04:4f:ba:02:c5:a1:
c6:4e:8f:db:a5:d6:e5:a6:31:cf:2d:8e:59:09:1e:
d1:82:2f:8f:c0:08:b2:dd:e8:b8:11:2d:12:b5:02:
94:8c:de:b2:f5:68:95:00:45:6e:50:8f:7c:28:df:
e4:68:5b:ca:58:88:77:e2:8e:ca:ae:27:bd:86:cf:
f5:1b:1b:fd:a6:91:73:9d:22:ea:8b:f6:26:66:df:
17:ad:cb:63:d2:37:06:80:73:77:16:b8:d3:e4:ce:
70:f4:7a:81:26:07:9e:dd:8d:d2:77:d8:c2:86:f3:
e7:05:64:7a:17:15:db:a9:80:6f:77:76:1f:06:1b:
9d:db:e5:e5:2c:f4:0b:59:d7:e0:5c:9d:89:a5:ef:
37:d5:81:11:ba:d1:ca:64:e1:b3:d5:60:a8:7f:05:
f1:b7:81:ce:de:19:ef:be:d9:be:09:3d:e3:68:ca:
22:98:ef:31:1d:ef:99:2b:f5:dd:86:8a:cb:71:8f:
9f:8c:0b:8a:bd:2a:68:93:57:c6:38:7c:0b:db:03:
e4:46:c5:a9:4c:e6:41:7b:dd:60:78:d2:21:58:2e:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3E:39:0F:1F:3B:C9:76:42:0F:21:69:BB:12:0B:89:3F:A7:C7:8B
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yD45Dx87yXZCDyFpuxILiT-nx4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.32.0/24
147.90.36.0/24
147.90.55.0/24
147.90.115.0/24
147.90.127.0/24
Signature Algorithm: sha256WithRSAEncryption
92:19:c9:60:9d:af:06:f2:32:23:05:b9:ee:aa:77:c9:54:c4:
9e:39:f1:e8:17:75:02:46:07:d3:24:39:2f:95:36:7b:36:62:
32:3a:d8:0a:ee:40:6c:13:73:64:07:05:b8:90:5e:54:fd:31:
1a:7e:b1:16:91:f7:68:3a:66:5f:35:44:11:b6:08:f7:ef:4f:
85:b8:c2:06:f0:db:11:6b:68:18:4b:7c:c0:35:47:ab:17:b8:
8b:ae:b2:b9:ca:da:f8:8a:4a:e8:b9:72:8a:7d:f3:23:2d:ac:
22:c0:ff:b0:77:5d:cc:a1:87:a6:fa:fe:93:31:99:d7:bf:86:
88:52:25:96:8a:48:4d:9f:ef:54:53:ea:9b:81:f5:f8:44:4f:
5a:72:d4:e7:36:f5:3b:c4:7d:8f:29:a9:57:e5:7a:ff:0a:de:
87:70:3a:d6:5c:9d:5b:46:db:fe:b0:e1:5a:a0:41:58:e7:37:
0b:17:03:52:75:c8:69:c4:64:00:ab:59:c2:45:ce:ba:cb:f6:
e8:2c:6b:39:9e:0d:5a:60:04:48:99:77:1b:b0:13:45:93:d8:
86:c2:13:4e:e1:d7:7d:f2:5a:8d:bf:6f:e7:44:17:a1:e6:7f:
13:f8:2c:55:fc:65:05:e4:48:87:eb:49:c2:5f:66:79:51:ab:
75:0e:1e:92
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ1zNYUlVvd5i5KNpt0LroL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwNDA5MTcwNjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODNlMzkwZjFmM2JjOTc2NDIwZjIxNjliYjEyMGI4OTNmYTdjNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgLY4KAqAzzFY6F4w4TAlmUGodRv
Zbmk1DcinntE5ji8AJ8mDDYET7oCxaHGTo/bpdblpjHPLY5ZCR7Rgi+PwAiy3ei4
ES0StQKUjN6y9WiVAEVuUI98KN/kaFvKWIh34o7Krie9hs/1Gxv9ppFznSLqi/Ym
Zt8Xrctj0jcGgHN3FrjT5M5w9HqBJgee3Y3Sd9jChvPnBWR6FxXbqYBvd3YfBhud
2+XlLPQLWdfgXJ2Jpe831YERutHKZOGz1WCofwXxt4HO3hnvvtm+CT3jaMoimO8x
He+ZK/XdhorLcY+fjAuKvSpok1fGOHwL2wPkRsWpTOZBe91geNIhWC5uVwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMg+OQ8fO8l2Qg8habsSC4k/p8eLMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEveUQ0NUR4ODd5WFpDRHlGcHV4SUxpVC1ueDRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAk1ogAwQA
k1okAwQAk1o3AwQAk1pzAwQAk1p/MA0GCSqGSIb3DQEBCwUAA4IBAQCSGclgna8G
8jIjBbnuqnfJVMSeOfHoF3UCRgfTJDkvlTZ7NmIyOtgK7kBsE3NkBwW4kF5U/TEa
frEWkfdoOmZfNUQRtgj370+FuMIG8NsRa2gYS3zANUerF7iLrrK5ytr4ikrouXKK
ffMjLawiwP+wd13MoYem+v6TMZnXv4aIUiWWikhNn+9UU+qbgfX4RE9actTnNvU7
xH2PKalX5Xr/Ct6HcDrWXJ1bRtv+sOFaoEFY5zcLFwNSdchpxGQAq1nCRc66y/bo
LGs5ng1aYARImXcbsBNFk9iGwhNO4dd98lqNv2/nRBeh5n8T+CxV/GUF5EiH60nC
X2Z5Uat1Dh6S
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:15 2026 by rpki-client