Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yQz_eBdjmSPNYd5ev9fLWZsEsYY.roa
File: yQz_eBdjmSPNYd5ev9fLWZsEsYY.roa (raw, json)
Hash identifier: hTTezSvfFlYF6Hew0fXJR5PRaQQYjceIpIbBj+UJ6Lc=
Subject key identifier: C9:0C:FF:78:17:63:99:23:CD:61:DE:5E:BF:D7:CB:59:9B:04:B1:86
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A1124AFB7C230CE19669487739EB6350C9
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yQz_eBdjmSPNYd5ev9fLWZsEsYY.roa
Signing time: Tue 06 Oct 2026 17:37:46 +0000
ROA not before: Tue 06 Oct 2026 17:37:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 147.90.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:4a:fb:7c:23:0c:e1:96:69:48:77:39:eb:63:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 6 17:37:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c90cff7817639923cd61de5ebfd7cb599b04b186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:3f:81:d3:5a:2a:3e:e5:8b:77:cf:1e:b5:
22:d8:e5:52:8b:3b:ca:83:26:31:3b:15:32:b1:81:
89:3d:68:5f:30:db:eb:3e:44:bb:2d:5a:e3:f9:24:
db:0b:0e:16:58:83:ef:bf:1a:e7:44:e6:7a:8d:5a:
0d:23:98:7d:a9:1d:36:48:75:38:20:40:a6:3b:00:
87:33:20:9f:8e:f2:18:20:60:74:78:0d:02:9f:82:
bc:02:7a:c3:9e:75:25:01:56:39:be:c4:80:3c:de:
7d:6b:11:07:b8:4b:6f:fa:7a:1a:4c:51:3a:f9:e4:
dd:f3:13:cd:1d:ed:11:91:c8:31:eb:6a:25:4f:c9:
14:b2:43:5c:a1:47:b1:f8:c4:5d:0e:42:6a:f9:86:
22:37:ff:2e:4e:51:6f:37:1a:a0:6d:be:8a:4e:fb:
53:e4:20:b4:16:f0:09:3f:f7:94:eb:5e:c6:70:4f:
0a:d0:42:53:3b:12:d4:ae:a6:b9:4b:a2:e2:a3:73:
30:1a:26:1f:d5:63:c8:64:7b:09:68:d5:14:c3:c1:
9d:1f:af:b9:70:05:4c:cf:62:80:58:52:1b:75:fa:
1f:d2:5b:1a:4e:d2:7f:48:07:e5:0e:31:b0:ad:c1:
a1:8d:ad:11:89:f4:75:93:21:7e:01:cc:a8:bf:16:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0C:FF:78:17:63:99:23:CD:61:DE:5E:BF:D7:CB:59:9B:04:B1:86
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yQz_eBdjmSPNYd5ev9fLWZsEsYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.64.0/24
Signature Algorithm: sha256WithRSAEncryption
95:5e:ce:aa:f0:af:7f:0c:ce:53:1f:c0:27:a3:b1:32:9d:a3:
9b:1e:1b:ab:aa:bd:a1:f0:d0:f2:ab:cd:03:ba:95:6f:14:90:
71:e6:c4:b7:87:84:52:05:d1:95:be:89:e7:3d:53:aa:bf:0b:
3d:03:7d:85:44:13:45:1b:dc:46:30:7b:39:b7:29:a5:86:8d:
81:b4:cd:f1:70:a6:52:5c:51:62:ba:b9:13:a1:86:7c:cc:4d:
39:05:17:fc:5a:11:f2:cb:ef:ad:5c:ae:2b:3c:60:14:2c:af:
69:46:7f:32:4e:79:fd:35:d6:8f:ed:e2:de:a8:f1:72:b7:95:
c0:9e:5b:89:60:e3:97:9b:4c:b6:fa:da:ef:30:bf:b2:31:fd:
54:67:33:a5:8d:78:61:7e:bd:f4:47:20:07:69:51:09:85:97:
dc:fe:a5:53:84:2b:a8:0e:c3:d7:1a:1d:30:c6:e7:77:1d:f2:
20:0e:fc:5e:94:60:1f:fa:96:9a:c1:42:08:9d:be:3b:21:11:
55:da:5e:cd:30:2e:32:d7:06:71:5a:99:43:14:c3:4c:75:b2:
32:8a:4c:e4:5a:5e:ef:1a:d9:70:7a:17:06:5c:8b:2e:74:c0:
3c:e3:92:9a:9f:0d:74:49:1d:03:55:e0:e3:8a:23:88:0f:ae:
a5:7c:0c:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaESSvt8IwzhlmlIdznrY1DJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYxMDA2MTczNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTBjZmY3ODE3NjM5OTIzY2Q2MWRlNWViZmQ3Y2I1OTliMDRiMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt4/gdNaKj7li3fPHrUi2OVSizvK
gyYxOxUysYGJPWhfMNvrPkS7LVrj+STbCw4WWIPvvxrnROZ6jVoNI5h9qR02SHU4
IECmOwCHMyCfjvIYIGB0eA0Cn4K8AnrDnnUlAVY5vsSAPN59axEHuEtv+noaTFE6
+eTd8xPNHe0Rkcgx62olT8kUskNcoUex+MRdDkJq+YYiN/8uTlFvNxqgbb6KTvtT
5CC0FvAJP/eU617GcE8K0EJTOxLUrqa5S6Lio3MwGiYf1WPIZHsJaNUUw8GdH6+5
cAVMz2KAWFIbdfof0lsaTtJ/SAflDjGwrcGhja0RifR1kyF+AcyovxYxjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMkM/3gXY5kjzWHeXr/Xy1mbBLGGMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEveVF6X2VCZGptU1BOWWQ1ZXY5ZkxXWnNFc1lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk1pAMA0G
CSqGSIb3DQEBCwUAA4IBAQCVXs6q8K9/DM5TH8Ano7EynaObHhurqr2h8NDyq80D
upVvFJBx5sS3h4RSBdGVvonnPVOqvws9A32FRBNFG9xGMHs5tymlho2BtM3xcKZS
XFFiurkToYZ8zE05BRf8WhHyy++tXK4rPGAULK9pRn8yTnn9NdaP7eLeqPFyt5XA
nluJYOOXm0y2+trvML+yMf1UZzOljXhhfr30RyAHaVEJhZfc/qVThCuoDsPXGh0w
xud3HfIgDvxelGAf+paawUIInb47IRFV2l7NMC4y1wZxWplDFMNMdbIyikzkWl7v
GtlwehcGXIsudMA845Kanw10SR0DVeDjiiOID66lfAze
-----END CERTIFICATE-----
Generated at Sat Oct 10 22:41:33 2026 by rpki-client