Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/R2KDwp-tUXnOEQqIzXntzQBf_KY.roa
File: R2KDwp-tUXnOEQqIzXntzQBf_KY.roa (raw, json)
Hash identifier: 3iTtCDR+0013mzbxoj3heBLQwp68jez1Z1Mf4xqERmU=
Subject key identifier: 47:62:83:C2:9F:AD:51:79:CE:11:0A:88:CD:79:ED:CD:00:5F:FC:A6
Certificate issuer: /CN=128bd8243e2536faccb24fead3a2162b8c766626
Certificate serial: 019F2368A756CC635C0AC1930988776BE4C8
Authority key identifier: 12:8B:D8:24:3E:25:36:FA:CC:B2:4F:EA:D3:A2:16:2B:8C:76:66:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/R2KDwp-tUXnOEQqIzXntzQBf_KY.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16024
IP address blocks: 193.26.125.0/24 maxlen: 24
2001:67c:cd8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a7:56:cc:63:5c:0a:c1:93:09:88:77:6b:e4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128bd8243e2536faccb24fead3a2162b8c766626
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=476283c29fad5179ce110a88cd79edcd005ffca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:f5:0d:e2:d4:fd:83:77:93:34:03:19:38:
33:77:05:5d:f6:d5:8f:dc:9e:5a:f3:23:ba:6a:e9:
fe:5b:36:ff:b6:b6:ce:01:9f:0d:92:cb:ef:e5:f1:
c1:9d:83:0a:3a:28:e8:a6:74:8b:fe:85:9f:17:53:
44:2c:56:a2:c6:46:03:42:4f:88:4f:81:2e:e2:3c:
94:2b:8a:2b:c4:d7:79:ff:36:9b:99:06:5e:e7:4b:
01:d7:cc:c6:2f:20:f1:62:43:28:70:fb:5b:3c:2f:
52:5e:8b:55:8e:54:1b:dc:ce:b7:f7:87:5b:ac:6c:
62:eb:e0:d1:58:53:72:5a:84:98:f6:b3:60:9d:ca:
3f:c9:f4:c1:2d:ab:88:43:38:3d:b5:26:61:87:92:
b1:d9:0b:38:2c:64:1e:e9:12:9a:3d:d3:3c:72:c5:
3a:17:08:85:de:fd:2b:d9:96:76:29:f3:fe:64:33:
db:43:4b:e9:fd:f7:d2:9d:37:4e:8f:7b:eb:08:06:
ee:bc:cd:14:f2:07:bf:97:d7:f8:a0:98:9b:31:10:
2d:13:bd:e0:f7:ec:69:f3:f3:41:3a:8c:a1:31:e4:
d0:16:40:ed:21:be:94:85:a9:15:5b:ce:23:b6:4f:
80:36:72:b1:ec:83:c5:82:f0:09:dd:e1:ae:44:84:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:62:83:C2:9F:AD:51:79:CE:11:0A:88:CD:79:ED:CD:00:5F:FC:A6
X509v3 Authority Key Identifier:
keyid:12:8B:D8:24:3E:25:36:FA:CC:B2:4F:EA:D3:A2:16:2B:8C:76:66:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/R2KDwp-tUXnOEQqIzXntzQBf_KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.125.0/24
IPv6:
2001:67c:cd8::/48
Signature Algorithm: sha256WithRSAEncryption
8d:c6:5d:96:51:fd:f6:b9:9f:15:69:40:ba:77:21:ad:68:f5:
35:64:02:e4:bb:6e:d4:8e:40:34:aa:2e:06:86:4d:e9:b5:d2:
9d:44:4d:3b:5f:7a:d8:75:49:28:80:a7:5c:bb:3b:d4:f7:7d:
e5:bb:81:1d:3f:cf:bc:63:ff:9c:be:f9:e3:63:4f:87:26:65:
19:8a:99:2a:bd:af:d8:3a:06:a5:fc:d2:86:3b:56:89:3e:1b:
d2:8c:ad:19:0c:6a:61:f7:5c:42:cf:41:6b:ad:1a:93:88:c5:
b2:d5:e6:b0:ea:76:8e:ac:84:be:7b:da:03:84:d2:06:4c:e8:
b0:1e:eb:4b:a0:8d:90:d8:37:f3:c0:64:ee:dd:5f:90:d9:39:
85:6f:dc:cb:81:c8:b9:c3:8b:d0:5d:11:98:90:68:8b:09:d0:
26:b5:6b:45:e6:40:de:cf:fb:ba:23:dc:a9:e6:69:a4:ec:20:
fc:61:bb:26:9a:46:97:66:99:5a:4f:0c:ee:d5:7b:f0:5c:33:
72:79:4a:12:b4:56:7d:e3:8a:bc:60:e8:27:3e:b7:3b:3c:e0:
b2:74:e3:06:6f:34:31:b5:34:0e:7a:7d:36:dc:4a:ed:dd:6d:
81:45:fe:41:83:c0:9b:f8:ef:02:1b:87:39:b7:75:f4:8a:e3:
f2:88:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:38:42 2026 by rpki-client