Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/2nvjaO-9QgHUIDo_0O1ylwBW6vQ.roa
File: 2nvjaO-9QgHUIDo_0O1ylwBW6vQ.roa (raw, json)
Hash identifier: oiGKpPGm6qpApMCxU6UFVXeU7Do4Gkz7nDJJxifitKA=
Subject key identifier: DA:7B:E3:68:EF:BD:42:01:D4:20:3A:3F:D0:ED:72:97:00:56:EA:F4
Certificate issuer: /CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Certificate serial: 019F2368F5F9A05314EA1D24DDDDABBF5EE1
Authority key identifier: 23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/2nvjaO-9QgHUIDo_0O1ylwBW6vQ.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 88.151.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f5:f9:a0:53:14:ea:1d:24:dd:dd:ab:bf:5e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235380f3c8d0bd4ef79dcfc1f2a364ef7f100d31
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da7be368efbd4201d4203a3fd0ed72970056eaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:a9:23:6b:1b:5f:3a:f8:5d:a0:7f:5b:cc:
69:19:5d:ed:db:f1:7a:c3:06:12:7f:69:31:60:e3:
1c:6e:e3:12:06:f6:79:b3:48:37:b6:fd:3b:a4:bb:
a6:8e:bd:3d:a8:79:ef:5c:fe:15:1e:5d:4f:a4:a8:
a5:41:a5:cf:fb:cf:8e:50:a4:fb:cc:ed:fc:f5:ee:
55:3a:1c:bb:b8:27:ef:c1:e5:49:b7:42:95:a4:12:
9a:d5:be:c8:bb:48:47:57:e1:75:58:dd:9e:06:3f:
72:7b:d6:ae:e9:86:3a:65:db:35:27:54:9c:13:27:
3d:0d:b1:11:db:44:f0:55:54:91:62:6c:04:1f:f6:
5b:0c:7f:a5:65:51:11:b1:24:fa:7f:26:1b:85:54:
96:10:d1:27:e9:04:9f:ae:de:a2:38:1a:52:ea:86:
97:71:1f:bc:fc:53:e7:a6:c7:01:9e:b7:50:f1:27:
5f:a2:66:9c:cf:df:3c:27:fc:bf:33:c8:ec:7b:38:
9a:fe:5f:f2:73:a9:46:80:0a:67:7d:05:5c:c1:17:
70:5f:40:26:54:bc:5a:7b:fd:b5:36:ce:fb:29:10:
26:f2:0f:c8:ea:52:5e:53:15:24:d9:ff:4c:d1:4c:
04:2c:70:44:bc:77:a6:6e:9e:47:8c:ec:c9:0d:bc:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7B:E3:68:EF:BD:42:01:D4:20:3A:3F:D0:ED:72:97:00:56:EA:F4
X509v3 Authority Key Identifier:
keyid:23:53:80:F3:C8:D0:BD:4E:F7:9D:CF:C1:F2:A3:64:EF:7F:10:0D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1OA88jQvU73nc_B8qNk738QDTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/2nvjaO-9QgHUIDo_0O1ylwBW6vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/I1OA88jQvU73nc_B8qNk738QDTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5e:bd:b2:15:65:6b:fc:32:93:a8:76:4e:5f:62:00:dc:6a:
c8:81:7d:b1:cf:d0:dd:19:d5:7e:76:70:b7:b0:cb:2b:32:24:
2c:80:4d:dc:4a:f0:1a:77:fd:2f:0f:29:75:23:fc:55:b3:ca:
30:1b:20:4a:bd:65:40:3c:54:c7:07:75:bf:b6:e1:23:0f:f6:
ea:3a:0e:d6:6d:b0:20:1c:7c:3d:b7:a3:38:92:34:7e:56:26:
9d:81:6b:0d:be:7d:6b:fd:59:70:9f:d1:22:2f:7a:ed:d4:2d:
24:18:b0:e9:1b:e8:6d:df:87:66:bf:32:5c:10:09:50:81:a0:
2a:01:d8:e8:4f:69:91:1d:30:ec:04:72:ed:12:9c:e6:06:37:
9c:b4:b5:d3:d1:b5:8c:98:85:13:0d:f5:3a:38:8c:a1:3f:02:
dc:07:cf:f1:18:b9:b5:ec:fe:3f:14:32:7e:06:01:7b:b3:3b:
27:4f:f6:30:9a:93:49:36:75:4a:a8:eb:1c:45:f0:2a:0e:14:
9e:53:8d:ca:28:bf:5c:0c:31:76:2b:5f:2d:d7:4b:e9:a6:07:
d7:1b:19:28:73:32:bd:b0:29:85:b5:e4:a2:f3:4b:dd:5c:66:
54:27:4c:25:f4:61:b6:5c:83:b4:ef:a2:6a:f4:64:14:71:1b:
a2:fd:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:03:15 2026 by rpki-client