Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/2v8-VRWu7ZQ7kaqtMJAMf8fXUB4.roa
File: 2v8-VRWu7ZQ7kaqtMJAMf8fXUB4.roa (raw, json)
Hash identifier: RUjaAMUiVfvMndNs5Aj41yn805YqU9Z4t95Kt6bJ84M=
Subject key identifier: DA:FF:3E:55:15:AE:ED:94:3B:91:AA:AD:30:90:0C:7F:C7:D7:50:1E
Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial: 019F6FCD4715A03F256F57C5DDF3EDAEE067
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/2v8-VRWu7ZQ7kaqtMJAMf8fXUB4.roa
Signing time: Fri 17 Jul 2026 11:19:11 +0000
ROA not before: Fri 17 Jul 2026 11:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 185.176.204.0/24 maxlen: 24
185.176.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:cd:47:15:a0:3f:25:6f:57:c5:dd:f3:ed:ae:e0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Validity
Not Before: Jul 17 11:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daff3e5515aeed943b91aaad30900c7fc7d7501e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:43:b2:45:ec:1e:f5:c9:f5:9c:36:53:6c:
72:fa:b5:7b:cc:d4:f7:77:fd:15:84:2b:62:a9:bf:
26:e3:f1:83:7f:fb:a9:11:fe:de:7b:22:19:69:05:
84:5b:df:cb:fc:5b:52:a7:70:80:f3:88:88:d6:e9:
db:17:98:33:4c:5f:c1:93:74:fc:85:56:b1:d5:48:
a0:46:07:76:db:ee:b5:51:30:94:7e:7a:28:88:30:
4e:88:32:45:93:49:0b:bb:3c:52:d8:fd:cb:4b:70:
35:37:b6:f3:da:5e:55:bf:75:86:79:51:9a:f4:80:
e4:07:0f:52:0b:0b:de:c6:f1:db:11:e4:ff:8f:9a:
e7:af:d1:2d:fa:d1:ff:5a:b0:b9:56:8c:e1:35:05:
d6:2a:8b:93:00:89:e6:36:60:19:4c:6a:60:71:68:
31:bf:8b:d3:09:a6:28:95:60:13:ed:8d:08:1c:1d:
95:2d:00:1a:f0:a0:5c:82:ad:6b:f5:48:77:f8:29:
9c:d3:70:5b:79:7b:8a:b7:46:f7:1d:2b:af:ca:0c:
0b:c3:4d:2b:f0:74:10:d2:a7:65:22:3e:de:9f:9d:
8e:61:29:3d:c4:f1:f9:9d:8c:88:22:b2:0f:44:24:
1b:31:0f:5d:f7:71:b2:ef:2c:f9:31:47:39:7e:8f:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FF:3E:55:15:AE:ED:94:3B:91:AA:AD:30:90:0C:7F:C7:D7:50:1E
X509v3 Authority Key Identifier:
keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/2v8-VRWu7ZQ7kaqtMJAMf8fXUB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.204.0/24
185.176.206.0/24
Signature Algorithm: sha256WithRSAEncryption
95:8f:21:d0:32:8f:a9:d5:c0:01:17:29:5e:4e:ac:5c:ac:81:
de:18:9a:f7:06:7a:4a:cb:ff:c3:ce:4d:20:03:ff:d9:1a:c8:
2f:6c:5d:2b:52:75:6d:a0:e5:35:89:8e:5a:62:fc:38:8f:8f:
51:ab:0e:6a:82:92:34:72:1d:f0:53:8e:4f:09:a1:af:9d:78:
05:e1:67:dd:59:36:10:a3:9a:42:b7:11:2b:e5:25:af:ae:a1:
30:ff:c3:de:3e:6c:1e:08:a0:1a:19:a2:19:98:53:04:d8:7c:
17:44:5b:51:64:b9:9c:c4:89:96:1b:1c:6e:9c:77:bb:ad:02:
11:02:9b:15:fd:c9:8c:aa:32:1b:60:70:1c:f6:7c:d3:2c:3d:
63:d3:fa:2f:e4:12:9b:fc:d8:49:08:00:fd:96:7a:5b:28:6e:
d2:9c:52:5f:b7:60:5f:ad:36:7c:e2:54:b1:85:17:b0:16:6d:
48:af:8a:46:d3:71:00:21:9b:b8:5d:dd:86:3f:ed:bc:d9:7d:
1d:ee:05:24:f0:35:5b:e0:7a:84:83:c7:0f:e7:bd:b0:35:18:
1b:e1:77:17:89:21:47:de:cf:d2:f6:ca:98:5d:5d:b1:d1:1e:
13:c8:94:6c:5d:9f:a3:a1:c0:dd:92:6f:f5:65:29:56:57:12:
86:0e:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:21:41 2026 by rpki-client