Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/2ZZv1bu-DuBhQPjig9kj-QVD9l8.roa
File: 2ZZv1bu-DuBhQPjig9kj-QVD9l8.roa (raw, json)
Hash identifier: qmccUpOGDFw4lhDyr1xdmfP+fhpyBahooky3nxxST/g=
Subject key identifier: D9:96:6F:D5:BB:BE:0E:E0:61:40:F8:E2:83:D9:23:F9:05:43:F6:5F
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 019D4DB0EAF0606A1472D1A46008D6DFE9EA
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/2ZZv1bu-DuBhQPjig9kj-QVD9l8.roa
Signing time: Thu 02 Apr 2026 10:15:33 +0000
ROA not before: Thu 02 Apr 2026 10:15:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.222.249.0/24 maxlen: 24
185.222.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4d:b0:ea:f0:60:6a:14:72:d1:a4:60:08:d6:df:e9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Apr 2 10:15:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9966fd5bbbe0ee06140f8e283d923f90543f65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:e2:64:8d:8b:bf:9d:65:33:97:54:9a:bf:
1a:c7:02:00:a3:93:67:ec:c5:eb:aa:b4:75:86:d5:
c2:1c:91:08:87:b3:c7:d1:39:5b:3d:d3:f5:94:d4:
41:6d:bb:88:42:6f:36:de:63:7b:7b:68:29:bd:91:
b2:c2:c7:25:f0:00:60:03:47:50:d0:51:f3:be:4b:
ee:bc:0a:3b:db:5a:47:db:25:32:59:ae:60:85:f1:
a9:71:f5:04:ac:11:ea:cb:a2:0b:49:79:e9:0e:53:
cf:b3:92:22:44:28:cf:fe:51:74:49:cb:50:28:69:
77:7a:cc:d5:8e:42:80:7e:2f:13:1a:13:bc:ea:21:
b4:bc:3e:42:fe:12:15:89:93:65:01:3e:cf:44:07:
67:33:8e:4a:18:ba:f3:d5:c5:04:fc:b1:7e:e2:90:
06:a6:0e:c4:e9:89:c7:d2:c0:dd:a3:40:7a:48:14:
ab:83:0d:3f:55:a8:6c:54:da:6e:e3:90:18:e8:7a:
60:7a:f3:0f:02:22:aa:01:22:d1:e3:05:52:7e:fb:
71:64:fe:90:5b:dd:16:95:b4:96:7c:db:63:14:8d:
31:cc:11:82:5e:8e:29:f2:db:53:5b:e0:54:8f:06:
63:89:de:27:c1:af:ad:0b:31:68:ac:3c:25:78:6a:
8b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:96:6F:D5:BB:BE:0E:E0:61:40:F8:E2:83:D9:23:F9:05:43:F6:5F
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/2ZZv1bu-DuBhQPjig9kj-QVD9l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.249.0/24
185.222.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f3:2e:ce:ed:88:c6:13:6c:ed:ee:86:7b:d9:b8:87:98:88:
e3:34:5f:7b:d0:8d:38:d5:4a:07:d0:47:0c:db:bf:37:fb:5e:
39:6d:fb:b5:cf:e5:57:57:9d:4b:39:52:0d:ec:46:bb:e1:10:
90:a1:a4:98:5c:c1:b8:2a:0e:08:cb:65:8d:3c:80:f1:82:ce:
6f:5a:b9:ed:70:81:cb:55:61:18:68:29:62:40:71:9b:16:f5:
d7:57:5e:91:27:a0:2e:41:15:36:e3:ba:85:f2:57:10:db:02:
54:f2:eb:f4:e9:30:cf:b6:5a:7e:62:c1:28:ae:b1:0a:61:6c:
98:8f:29:62:fa:9a:47:b9:a2:a0:83:2a:6e:21:77:e2:49:7f:
16:6b:01:86:1e:1a:f5:d7:54:58:c5:50:dc:cf:99:a7:a3:01:
3b:4c:fd:92:82:5d:3d:b5:9b:aa:a3:bf:83:42:ff:2f:39:dd:
d0:57:88:40:14:c4:24:a4:ca:2e:ad:e8:e4:5e:2c:ee:c5:98:
64:40:b4:b7:60:9c:12:4d:fa:f9:e7:76:e7:fe:3b:66:b3:2a:
77:37:ed:19:b6:d0:47:b0:ad:aa:8a:d9:fd:34:83:4b:70:d5:
d5:bf:42:1a:87:fc:2c:0f:58:de:1a:d8:2d:bb:d2:02:4c:a8:
d1:01:84:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:15 2026 by rpki-client