Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/C2kt_D4OC_bCATP96J0Lcecrh_Q.roa
File: C2kt_D4OC_bCATP96J0Lcecrh_Q.roa (raw, json)
Hash identifier: /GUtwL0d0bHUSEUzfz0h1Hs+05AAyT7TJrjMS7ynWWY=
Subject key identifier: 0B:69:2D:FC:3E:0E:0B:F6:C2:01:33:FD:E8:9D:0B:71:E7:2B:87:F4
Certificate issuer: /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Certificate serial: 019EB0A9155DBED8CB69901AA5AF95129EE1
Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/C2kt_D4OC_bCATP96J0Lcecrh_Q.roa
Signing time: Wed 10 Jun 2026 08:32:11 +0000
ROA not before: Wed 10 Jun 2026 08:32:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212328
IP address blocks: 82.102.9.0/24 maxlen: 24
82.102.14.0/24 maxlen: 24
82.102.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:a9:15:5d:be:d8:cb:69:90:1a:a5:af:95:12:9e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Validity
Not Before: Jun 10 08:32:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b692dfc3e0e0bf6c20133fde89d0b71e72b87f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:d5:09:bb:f1:f7:61:54:f0:60:c4:e0:41:
cd:3d:77:1f:df:f8:ec:0d:ba:96:56:06:66:82:4f:
4a:8b:b3:6f:0a:06:5c:e1:45:d9:87:4c:d1:98:b1:
52:a3:c2:a1:54:08:3f:c7:8d:89:aa:2e:9a:66:85:
38:64:b1:7a:fe:da:29:b8:8c:29:0b:89:47:80:8c:
40:65:5e:97:91:15:94:b3:c5:1a:cd:80:e6:73:4a:
c1:32:67:b7:a2:8d:3d:77:f2:ab:fa:80:03:43:29:
c9:00:c8:18:c2:42:57:53:1c:6a:c6:16:cd:85:e2:
5a:ee:c5:e7:1a:72:0f:08:7a:d1:06:95:03:b1:95:
ff:e8:2f:1c:95:86:03:9e:03:ea:47:48:61:0d:81:
bf:be:22:1c:1b:6d:9b:39:c7:d1:85:10:3d:59:4c:
67:92:5c:a9:a0:16:6a:56:0c:58:34:30:de:4a:7e:
5d:b7:22:22:44:52:49:9c:ef:7f:f4:af:c3:e0:30:
b7:ce:c7:b4:b0:58:04:52:b5:a0:2e:b1:1f:4c:20:
bc:a7:27:a3:82:24:f7:1d:c6:8f:88:a2:dc:d6:cd:
eb:1d:9d:7e:a4:c6:ed:bf:6c:48:9c:63:33:11:19:
c3:df:22:2e:9e:d1:fe:f2:b9:2f:4e:d2:8f:73:92:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:69:2D:FC:3E:0E:0B:F6:C2:01:33:FD:E8:9D:0B:71:E7:2B:87:F4
X509v3 Authority Key Identifier:
keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/C2kt_D4OC_bCATP96J0Lcecrh_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.102.9.0/24
82.102.14.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:57:5a:dc:f8:da:c6:bd:c9:5f:86:bb:52:11:fd:bf:f3:28:
e0:20:15:36:a4:75:cc:5b:5d:36:8c:a9:2d:dc:ed:30:6b:f1:
42:42:d5:62:1e:a0:66:c0:e6:fb:f4:74:f6:16:5a:43:33:04:
55:27:7c:76:8b:b5:97:17:3c:6d:40:02:43:39:e8:15:cb:b4:
39:04:56:10:3e:5e:ad:17:26:dc:ae:20:cd:b0:ff:21:80:01:
ce:73:58:37:eb:b1:09:ef:14:d9:64:10:6b:ff:d8:0a:e0:0d:
8f:f1:eb:01:e5:9d:de:fe:fa:cd:70:e6:06:d8:11:f2:b4:cb:
e6:d5:ab:de:d4:e8:15:10:22:3b:b6:77:5a:14:4e:16:5a:5e:
71:b9:92:e1:fd:2c:2a:fd:a8:19:2d:59:33:c3:20:91:67:6f:
ea:32:92:d2:63:30:dd:b5:62:55:39:82:64:32:4f:54:05:32:
21:94:f3:fa:a2:ce:db:6b:ce:5f:dc:28:cc:ac:71:29:bc:3b:
70:91:a7:a6:a3:11:07:78:ee:05:ca:31:6a:16:b5:c4:67:42:
a2:21:ac:65:8c:8d:ab:36:ae:04:f4:a0:8e:4d:b1:41:6d:db:
ee:5d:dc:29:04:01:aa:74:50:bd:b1:19:a9:a4:49:0f:bc:4d:
40:3d:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:19:51 2026 by rpki-client