Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/2WVr5p2H7r2azbb2WIvSV483tPM.roa
File: 2WVr5p2H7r2azbb2WIvSV483tPM.roa (raw, json)
Hash identifier: IwiB9DNZvI6+xxe/bmcy9dKCy2z4spHmBIdmUbXkKUo=
Subject key identifier: D9:65:6B:E6:9D:87:EE:BD:9A:CD:B6:F6:58:8B:D2:57:8F:37:B4:F3
Certificate issuer: /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial: 019F236902BF316DEC487D7D0A47C19DCE6B
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/2WVr5p2H7r2azbb2WIvSV483tPM.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209076
IP address blocks: 2a0e:cc00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:02:bf:31:6d:ec:48:7d:7d:0a:47:c1:9d:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9656be69d87eebd9acdb6f6588bd2578f37b4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:11:72:94:64:20:f3:c7:4e:bb:6a:02:81:
c1:9d:6f:58:58:91:f0:bb:5d:ea:df:cd:e9:6f:04:
6a:ed:13:0e:3e:1f:d7:07:1d:2e:75:60:6c:2e:b3:
65:a1:5d:5a:b4:f8:32:d8:31:60:f1:63:e3:10:8c:
f1:2a:f5:01:fc:09:48:df:e0:a2:13:51:49:f4:68:
ce:21:51:03:e5:87:de:47:99:ee:3b:01:5c:d1:ce:
ea:bf:42:10:54:96:a7:9e:18:63:d8:dc:30:39:55:
78:15:89:e8:f6:bf:4b:2b:7f:66:c8:a3:e5:da:e7:
b3:21:92:2d:86:86:18:e7:a6:3b:09:b4:52:15:b6:
13:5d:2d:5e:d4:a6:92:75:0c:53:b3:94:9c:54:72:
42:6b:f8:73:aa:77:f8:01:bd:d9:be:11:3e:a8:07:
f8:60:71:0e:1d:06:ea:aa:d6:e0:e6:2e:91:d3:1d:
5b:19:da:36:e3:87:9c:19:52:4c:6f:1e:55:ba:0d:
05:b3:eb:c7:e8:2f:92:58:72:f4:cf:63:a4:76:e4:
e0:ab:31:e6:be:95:d4:da:7d:fc:55:29:8f:61:7b:
23:ca:b8:0c:d4:10:f2:95:6c:ec:67:ec:43:d1:8a:
0f:86:93:9d:d3:79:c8:4f:39:f2:02:85:61:60:4c:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:65:6B:E6:9D:87:EE:BD:9A:CD:B6:F6:58:8B:D2:57:8F:37:B4:F3
X509v3 Authority Key Identifier:
keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/2WVr5p2H7r2azbb2WIvSV483tPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:cc00::/29
Signature Algorithm: sha256WithRSAEncryption
ae:48:a7:9a:1f:57:d9:8b:14:b5:40:d9:4a:b5:5c:25:53:63:
ca:0a:70:92:fe:fe:c9:ff:dc:80:41:28:2f:59:20:f2:c2:09:
d6:cf:8a:15:33:ea:16:0e:ab:d9:9f:1f:1b:f5:15:59:4d:06:
0c:65:79:d0:86:71:4c:06:5b:6b:a9:df:ff:0c:cd:74:a5:24:
ba:78:9b:dc:d5:b5:e5:c2:dc:a3:5f:86:e3:0c:e3:b8:b8:0a:
2e:cc:de:38:cd:de:eb:cc:1b:1f:d6:92:bd:61:dc:6f:40:4f:
52:03:04:e9:54:86:8e:f7:28:60:2b:69:b7:ab:3e:47:a3:ae:
a3:0c:51:e9:09:c3:89:f8:46:4e:cd:3b:dd:00:4f:4b:c7:1a:
a0:e6:20:10:51:b6:87:f0:79:44:3e:8a:52:6c:fb:ef:c3:91:
29:29:1f:df:1c:f5:48:7e:a3:27:61:3b:7a:ea:1e:06:ba:cd:
c0:07:68:e3:86:96:54:cb:85:6d:34:ba:12:25:1c:16:41:e0:
a5:82:1c:48:32:a8:5d:cb:c2:01:67:0e:ee:b6:39:81:8f:24:
5e:e2:8c:8c:b9:2c:7f:99:37:c7:1a:29:ad:3d:ba:57:e0:11:
78:6e:24:46:dd:30:7d:ce:fc:ca:c5:77:42:ea:e1:8d:c7:65:
ce:61:d2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:13:01 2026 by rpki-client