Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/2iJZrWnUX6sYPNWVC4jhvrs_wCo.roa
File: 2iJZrWnUX6sYPNWVC4jhvrs_wCo.roa (raw, json)
Hash identifier: ywT5tAEbmT6fgEmvUHylpSZqrWzDDHqYU96pzjuMhAA=
Subject key identifier: DA:22:59:AD:69:D4:5F:AB:18:3C:D5:95:0B:88:E1:BE:BB:3F:C0:2A
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A167D5E7FE6657198294AFA453427CB652
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/2iJZrWnUX6sYPNWVC4jhvrs_wCo.roa
Signing time: Fri 23 Oct 2026 08:17:14 +0000
ROA not before: Fri 23 Oct 2026 08:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218303
IP address blocks: 2a0a:87c0:fff3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:d5:e7:fe:66:57:19:82:94:af:a4:53:42:7c:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Oct 23 08:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da2259ad69d45fab183cd5950b88e1bebb3fc02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:2c:b5:0e:3c:4b:ff:28:b6:43:d7:01:a5:
26:e4:37:c3:0b:ed:19:7b:d4:8f:45:a5:d5:a3:d9:
67:e8:6e:62:8d:46:a9:0a:f4:b2:79:bd:91:d3:af:
0a:0e:94:1f:69:32:da:e5:eb:c0:4e:c7:72:31:73:
06:0e:c5:42:d1:1b:dd:90:b3:65:d6:40:d7:47:ea:
1c:9e:cc:cf:f6:98:ad:06:bb:80:87:06:0f:ba:d3:
b7:10:37:65:f1:94:45:8a:42:ae:0e:59:12:e2:70:
ce:b3:91:d0:ba:7c:8c:78:21:cd:19:f0:1b:92:68:
02:d5:17:43:46:cb:84:ea:82:52:e3:20:2d:ce:61:
f7:ee:f6:7c:6f:4a:29:92:31:4c:0c:ac:d5:30:bf:
78:a9:be:78:9f:5a:ba:b5:d5:47:52:b6:cd:e7:99:
1f:fd:7c:12:55:83:65:62:c1:82:c6:4b:94:f9:43:
36:50:b1:67:50:29:80:b2:19:e0:0d:0a:da:c0:f1:
4a:15:ae:43:f1:bb:13:30:91:e2:6c:90:e8:be:fb:
52:08:fc:e2:d3:8f:c1:8a:4e:b7:58:c4:8a:5e:ab:
4a:d3:d5:b8:52:5d:ff:e4:74:af:f3:47:df:58:b6:
66:d6:29:f2:3d:49:6a:d5:5b:ed:bf:be:49:68:3b:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:22:59:AD:69:D4:5F:AB:18:3C:D5:95:0B:88:E1:BE:BB:3F:C0:2A
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/2iJZrWnUX6sYPNWVC4jhvrs_wCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:fff3::/48
Signature Algorithm: sha256WithRSAEncryption
0a:18:39:ab:12:0d:b3:0c:c4:f9:a8:da:33:be:10:22:8d:2c:
55:a1:c9:06:81:58:96:95:72:de:26:b5:0a:c8:69:2c:c9:bd:
77:7e:70:c5:ba:79:15:14:eb:bf:4a:0a:66:ec:23:92:68:88:
06:8d:0e:82:78:ce:c6:03:c1:b0:8b:13:81:7a:ac:5c:67:17:
5f:cc:5e:4c:ca:c9:04:50:a1:b9:63:0b:e0:25:3f:9a:40:a2:
11:34:79:dc:d5:29:10:47:55:1d:43:07:bd:58:ab:f3:15:32:
2c:ff:99:61:22:a4:27:a7:be:04:d1:bc:ea:d3:26:af:84:b8:
9c:6f:50:76:df:22:8f:8d:b2:ef:e5:57:2b:ea:4c:af:65:53:
71:2c:84:9a:5b:e0:c0:af:f6:3c:04:23:69:2b:18:11:c0:e2:
88:e2:19:33:c2:6a:d3:20:4e:bd:dc:21:02:d8:1f:45:d5:4f:
17:fd:13:ea:83:bf:6e:02:1e:0a:b5:26:41:79:11:11:af:d7:
ab:c3:c2:88:ee:1c:04:47:83:47:bc:f6:b1:74:a0:00:16:11:
80:f6:91:f8:89:cc:5c:26:b4:1f:7b:1e:10:c0:03:8f:7f:6b:
3f:f4:f6:8c:9b:9f:2f:7d:ee:0b:13:3a:88:90:ed:33:a1:d6:
b6:d3:a3:e4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaFn1ef+ZlcZgpSvpFNCfLZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOGZmM2FjZmNhZWQyMDNlOTZkZTkxYWIwOGM2ZWZiNjQw
MzFhNjMwHhcNMjYxMDIzMDgxNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTIyNTlhZDY5ZDQ1ZmFiMTgzY2Q1OTUwYjg4ZTFiZWJiM2ZjMDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpAstQ48S/8otkPXAaUm5DfDC+0Z
e9SPRaXVo9ln6G5ijUapCvSyeb2R068KDpQfaTLa5evATsdyMXMGDsVC0RvdkLNl
1kDXR+ocnszP9pitBruAhwYPutO3EDdl8ZRFikKuDlkS4nDOs5HQunyMeCHNGfAb
kmgC1RdDRsuE6oJS4yAtzmH37vZ8b0opkjFMDKzVML94qb54n1q6tdVHUrbN55kf
/XwSVYNlYsGCxkuU+UM2ULFnUCmAshngDQrawPFKFa5D8bsTMJHibJDovvtSCPzi
04/Bik63WMSKXqtK09W4Ul3/5HSv80ffWLZm1inyPUlq1Vvtv75JaDuP1wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNoiWa1p1F+rGDzVlQuI4b67P8AqMB8GA1UdIwQY
MBaAFH+P86z8rtID6W3pGrCMbvtkAxpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjRfenJQeXUwZ1BwYmVrYXNJeHUtMlFER21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xODhkMWMtZmZlMi00MjNiLTg3ZmIt
OGY5YzY1YWMxNmM2LzEvMmlKWnJXblVYNnNZUE5XVkM0amh2cnNfd0NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xODhkMWMtZmZlMi00MjNiLTg3ZmItOGY5YzY1YWMxNmM2
LzEvZjRfenJQeXUwZ1BwYmVrYXNJeHUtMlFER21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgqHwP/z
MA0GCSqGSIb3DQEBCwUAA4IBAQAKGDmrEg2zDMT5qNozvhAijSxVockGgViWlXLe
JrUKyGksyb13fnDFunkVFOu/Sgpm7COSaIgGjQ6CeM7GA8GwixOBeqxcZxdfzF5M
yskEUKG5YwvgJT+aQKIRNHnc1SkQR1UdQwe9WKvzFTIs/5lhIqQnp74E0bzq0yav
hLicb1B23yKPjbLv5Vcr6kyvZVNxLISaW+DAr/Y8BCNpKxgRwOKI4hkzwmrTIE69
3CEC2B9F1U8X/RPqg79uAh4KtSZBeRERr9erw8KI7hwER4NHvPaxdKAAFhGA9pH4
icxcJrQfex4QwAOPf2s/9PaMm58vfe4LEzqIkO0zoda206Pk
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:05 2026 by rpki-client