Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2eYN7DTb_j8MLouXDJUB6208LB8.roa
File: 2eYN7DTb_j8MLouXDJUB6208LB8.roa (raw, json)
Hash identifier: b2vnjV9rMgwOBbWNOxYWyi6TlCXsVPFtHDu9VazBuhI=
Subject key identifier: D9:E6:0D:EC:34:DB:FE:3F:0C:2E:8B:97:0C:95:01:EB:6D:3C:2C:1F
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019EB297790F6E416ECB85DF7B621680899F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2eYN7DTb_j8MLouXDJUB6208LB8.roa
Signing time: Wed 10 Jun 2026 17:32:11 +0000
ROA not before: Wed 10 Jun 2026 17:32:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8342
IP address blocks: 147.45.61.0/24 maxlen: 24
147.45.62.0/24 maxlen: 24
147.45.63.0/24 maxlen: 24
147.45.88.0/21 maxlen: 21
147.45.120.0/22 maxlen: 22
147.45.127.0/24 maxlen: 24
147.45.205.0/24 maxlen: 24
193.233.60.0/24 maxlen: 24
193.233.62.0/24 maxlen: 24
193.233.124.0/22 maxlen: 24
193.233.170.0/24 maxlen: 24
193.233.236.0/24 maxlen: 24
193.233.237.0/24 maxlen: 24
193.233.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:97:79:0f:6e:41:6e:cb:85:df:7b:62:16:80:89:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 10 17:32:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9e60dec34dbfe3f0c2e8b970c9501eb6d3c2c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:8a:94:82:0f:6c:5b:5a:66:a7:87:97:14:
30:1e:29:57:8b:7f:9a:2a:27:1c:e9:ff:3b:3d:2f:
9d:8a:e1:f5:b5:22:14:dd:eb:b4:e3:78:a5:be:24:
db:f7:79:54:29:3e:9b:9f:d5:f6:2d:5e:66:56:e0:
d1:1a:1c:dd:8b:4e:6e:bd:44:e4:25:58:9d:45:83:
0d:09:40:cd:da:18:9e:52:d0:b1:b0:65:b3:1c:6f:
16:e8:b1:a3:ee:f9:4c:ce:10:94:d0:64:3c:2d:50:
10:d8:98:59:10:f1:e2:09:60:8d:63:66:72:a8:b0:
ef:6f:da:ac:23:be:6e:8f:eb:9f:0e:a4:4a:99:eb:
0e:e2:6e:a2:bd:03:61:f7:c0:ed:2e:9e:9b:76:6f:
1a:46:f9:ef:cf:9c:e3:a3:5a:f7:fd:e3:e1:e8:8e:
2d:0d:4e:61:13:7e:5f:0f:f4:cd:5a:27:76:32:00:
af:3b:97:01:1f:ab:02:1c:d4:68:2d:03:fe:21:9f:
fd:1b:2e:16:72:c0:6e:54:9a:5b:c5:1e:84:eb:8a:
0c:36:bc:dc:5b:a7:cf:d9:2c:23:8c:ac:ae:ad:ea:
04:7e:15:6a:b5:27:98:08:7b:65:aa:c1:c5:70:35:
4c:1d:25:a0:7c:0c:5d:64:9e:dc:cc:0a:01:64:9a:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E6:0D:EC:34:DB:FE:3F:0C:2E:8B:97:0C:95:01:EB:6D:3C:2C:1F
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2eYN7DTb_j8MLouXDJUB6208LB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.61.0-147.45.63.255
147.45.88.0/21
147.45.120.0/22
147.45.127.0/24
147.45.205.0/24
193.233.60.0/24
193.233.62.0/24
193.233.124.0/22
193.233.170.0/24
193.233.236.0/23
193.233.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:51:01:91:5b:d7:f8:2b:2b:e5:bb:e1:39:38:6c:7a:c6:30:
d2:6d:ab:29:ef:cf:a0:28:0b:8e:a9:50:6e:bb:13:d0:b8:19:
89:28:55:ab:60:e2:4e:b1:b6:de:88:a4:f2:18:b2:2b:fa:70:
c1:6b:68:5e:57:cd:0c:e0:21:d9:f8:02:80:ab:09:f9:e0:77:
16:77:9a:56:ff:41:85:cd:61:f2:2d:32:20:fc:ea:44:bf:3b:
43:b3:6d:36:f4:ae:58:37:ee:c5:d0:f0:71:08:12:aa:35:bc:
61:31:a6:98:aa:6f:5c:e1:d1:0d:4e:30:82:41:0f:c6:cf:40:
01:3e:91:80:a7:ba:7c:22:14:f7:05:0a:32:c0:ca:59:d5:cc:
76:51:9c:ac:96:6b:07:83:b4:92:a7:bd:8d:82:da:1b:d5:5e:
cb:47:9e:4e:04:de:cb:57:8b:26:9a:57:0b:07:2c:cd:fb:93:
bf:f1:14:f6:40:07:b5:58:3b:d0:75:96:d2:26:c7:c4:ce:0a:
84:1f:d4:e0:90:93:3d:87:4e:e2:8e:b8:f8:39:fe:04:96:47:
43:06:ec:42:15:87:42:2b:8e:b4:99:7b:27:e1:16:f3:74:c2:
e3:3b:83:d6:2d:9f:6d:ba:26:52:88:41:7a:b6:2b:a4:2b:0d:
b5:b1:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:48:55 2026 by rpki-client