Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/2YDe8jQw66h2MBKz_F9DrLI7Onw.roa
File: 2YDe8jQw66h2MBKz_F9DrLI7Onw.roa (raw, json)
Hash identifier: 0Uz9Viw/NnJVogXrBaQnBPaDhcOlDIxOJ2BMrjUyIe0=
Subject key identifier: D9:80:DE:F2:34:30:EB:A8:76:30:12:B3:FC:5F:43:AC:B2:3B:3A:7C
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 01A13E276C8CCA38F9FD79C9C1B58177D0AD
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/2YDe8jQw66h2MBKz_F9DrLI7Onw.roa
Signing time: Thu 15 Oct 2026 06:02:13 +0000
ROA not before: Thu 15 Oct 2026 06:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 147.189.42.0/24 maxlen: 24
147.189.43.0/24 maxlen: 24
147.189.46.0/24 maxlen: 24
147.189.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 12:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:27:6c:8c:ca:38:f9:fd:79:c9:c1:b5:81:77:d0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Oct 15 06:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d980def23430eba8763012b3fc5f43acb23b3a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:37:bb:41:32:d0:2e:ff:e8:36:49:ad:d4:
cc:85:a4:b9:e1:ad:71:4b:1a:f6:51:fc:4c:e8:11:
66:b9:68:a2:f2:bc:67:ec:f5:ea:77:be:7d:c9:13:
a2:d2:a2:9d:7c:6c:39:08:ed:d5:ab:29:d4:70:fa:
41:68:fb:3e:4f:d0:de:ae:d8:a7:90:79:bf:1d:0a:
82:cb:2d:f1:f1:fb:1a:a9:38:ca:b5:4e:5c:02:f1:
e7:46:b4:5a:c2:24:ca:37:4e:c8:6a:76:51:a1:59:
2b:e9:d5:3f:98:07:21:46:de:5c:0a:dd:f0:e6:37:
fa:91:72:32:24:b7:82:1e:1d:a1:69:86:87:b9:38:
f3:55:91:8a:a4:86:d1:a6:ae:5e:83:2b:6c:cd:9c:
81:52:6a:a3:72:19:c5:32:92:72:1f:94:5b:8e:48:
ce:3e:d5:13:fc:e9:a0:31:20:8a:82:6e:bd:23:9b:
65:d4:62:82:47:76:7b:29:db:f1:39:b2:17:95:e9:
28:91:bb:c1:94:f5:0a:b4:c3:1a:4b:50:aa:53:c1:
c1:e4:8e:66:a7:ff:a7:ef:f8:7f:66:83:5f:ae:54:
19:9d:24:81:d1:25:03:72:46:85:e0:ee:a2:aa:7c:
fc:a3:88:8e:7f:bf:66:93:a8:cd:96:97:c6:e8:b3:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:80:DE:F2:34:30:EB:A8:76:30:12:B3:FC:5F:43:AC:B2:3B:3A:7C
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/2YDe8jQw66h2MBKz_F9DrLI7Onw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.42.0/23
147.189.46.0/24
147.189.49.0/24
Signature Algorithm: sha256WithRSAEncryption
75:cc:b9:d3:06:0d:46:ba:d5:b6:2b:bb:98:d2:9d:e4:85:d6:
0e:66:e3:34:6d:27:63:31:49:b9:59:96:9c:56:e8:57:a6:09:
df:e3:75:6b:d7:ed:bb:bd:4f:93:f5:b7:c0:44:ac:a3:57:5e:
80:1f:b2:76:d8:0d:ca:8f:ce:5c:26:a0:16:66:83:ad:9d:13:
22:a5:8c:ca:4d:c6:89:96:ae:f3:91:20:f3:49:8e:58:60:1f:
04:91:1e:bb:9f:62:8a:88:8c:63:f4:11:bb:9a:4f:8a:61:4b:
ff:72:33:4e:f8:6a:54:97:93:83:f2:63:4c:02:67:21:33:58:
d0:14:31:91:16:65:63:15:b3:93:49:ae:14:97:7a:2b:82:be:
ac:10:5f:44:11:70:ee:9a:09:6a:3a:09:ac:1e:22:fd:d2:80:
5a:70:54:ff:86:b6:22:68:3e:15:2e:1d:5e:84:2e:c3:e6:2c:
0c:fd:55:8b:62:39:66:83:fc:6c:61:54:84:f8:32:21:31:7c:
a9:7f:fc:73:f9:0e:b2:8c:e4:a9:9a:d4:e9:61:31:4a:d4:89:
58:ff:18:80:36:06:46:de:a5:16:12:33:a8:d1:89:6d:b1:c0:
da:4a:7c:1e:a4:29:71:7d:f2:55:85:e5:10:63:48:17:a5:0b:
94:3e:f5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:03:06 2026 by rpki-client