Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2lrzTcuM4RgY4l-4VFsUEQJKOrQ.roa
File: 2lrzTcuM4RgY4l-4VFsUEQJKOrQ.roa (raw, json)
Hash identifier: JJOb5CXuAsoDH+IXBoJsNpTcwRQ8u3+Z52I7w5b/NjE=
Subject key identifier: DA:5A:F3:4D:CB:8C:E1:18:18:E2:5F:B8:54:5B:14:11:02:4A:3A:B4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E48F4197F5C6B281BCE69B4DF6ABE7D94
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2lrzTcuM4RgY4l-4VFsUEQJKOrQ.roa
Signing time: Thu 21 May 2026 05:13:37 +0000
ROA not before: Thu 21 May 2026 05:13:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215649
IP address blocks: 89.144.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:48:f4:19:7f:5c:6b:28:1b:ce:69:b4:df:6a:be:7d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 21 05:13:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da5af34dcb8ce11818e25fb8545b1411024a3ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:ab:b5:eb:fe:04:23:18:14:65:99:d8:69:
e6:49:02:db:bd:7c:15:ce:0c:26:d7:42:09:32:6f:
1d:f5:ad:a0:80:27:25:34:32:82:a3:0c:0d:97:3e:
1a:f7:87:51:06:29:37:19:6f:11:17:0a:70:dd:95:
d2:4d:e1:b2:bc:f3:f1:88:a8:4a:8a:11:1c:4a:95:
33:48:d7:ca:fd:50:18:dc:6b:03:d0:92:1c:a4:6f:
bb:15:a7:9a:73:2b:63:17:c0:9c:96:72:93:ed:1b:
99:21:c1:5d:bd:3d:ad:2d:af:c8:6f:05:38:34:43:
ef:e1:e2:aa:ad:64:7a:4b:a6:7c:d8:34:69:9e:b4:
ad:09:6a:1b:e5:1e:c5:83:73:16:13:ef:e1:e4:f7:
d6:7d:02:53:74:2f:30:b1:79:f3:37:bc:b0:47:7d:
f8:d0:bd:ce:4a:c5:3e:b2:f6:14:55:28:18:ee:e3:
ea:02:6d:fa:c8:aa:87:56:55:b1:60:dc:02:4e:0f:
07:c0:e4:c6:da:a7:4d:f6:d8:9c:9d:2a:7c:d2:cc:
a9:39:3b:ab:17:82:2a:87:41:08:35:34:05:13:c4:
13:74:b0:9c:e2:f8:ec:aa:ab:45:a6:a8:49:ea:9d:
75:b6:ac:43:c7:c3:04:3c:91:94:d6:5f:85:3b:8e:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5A:F3:4D:CB:8C:E1:18:18:E2:5F:B8:54:5B:14:11:02:4A:3A:B4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2lrzTcuM4RgY4l-4VFsUEQJKOrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.34.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:11:e1:c7:1e:87:7e:04:cb:05:93:01:51:26:4f:26:10:f5:
fe:c4:bc:7f:17:12:ef:6a:39:64:e4:62:d2:67:0b:e9:6e:11:
81:3c:41:d1:56:14:cc:d1:af:e1:cf:b0:a2:be:ea:ec:89:87:
8b:b0:3c:37:62:5b:e0:9d:2c:c1:3f:aa:d7:93:28:88:e4:56:
df:ad:36:a5:bb:0b:30:da:c4:9d:ce:a8:8b:88:7c:05:66:0e:
eb:e3:ec:cf:0f:de:b2:52:0e:81:e0:15:fc:25:bb:4d:f1:44:
02:12:35:29:7c:22:ab:64:de:b1:b4:32:33:0b:74:e3:7c:24:
3a:c9:cd:f9:c3:84:b5:8c:30:92:46:7e:28:0b:5e:0a:4b:02:
d1:db:d7:3d:2c:e3:72:78:d8:e3:f9:dd:30:68:d0:81:bc:28:
c1:64:e7:ee:67:69:20:83:e6:07:10:04:40:40:a5:a4:fc:8d:
95:b9:dd:3e:8b:1c:d3:4e:ee:63:39:30:d5:50:38:2a:6c:bb:
22:7b:13:f2:a6:f3:c8:6a:3b:e7:f2:1b:e6:b3:bb:b5:32:6a:
1f:fc:ca:9a:60:06:06:f1:e1:f3:e5:82:e4:d6:75:bd:5d:92:
ab:b7:9b:bd:9a:13:cc:f0:a9:dd:f7:1d:37:93:60:7f:1c:4c:
fe:d2:11:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5I9Bl/XGsoG85ptN9qvn2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNTIxMDUxMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTVhZjM0ZGNiOGNlMTE4MThlMjVmYjg1NDViMTQxMTAyNGEzYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsySrtev+BCMYFGWZ2GnmSQLbvXwV
zgwm10IJMm8d9a2ggCclNDKCowwNlz4a94dRBik3GW8RFwpw3ZXSTeGyvPPxiKhK
ihEcSpUzSNfK/VAY3GsD0JIcpG+7FaeacytjF8CclnKT7RuZIcFdvT2tLa/IbwU4
NEPv4eKqrWR6S6Z82DRpnrStCWob5R7Fg3MWE+/h5PfWfQJTdC8wsXnzN7ywR334
0L3OSsU+svYUVSgY7uPqAm36yKqHVlWxYNwCTg8HwOTG2qdN9ticnSp80sypOTur
F4Iqh0EINTQFE8QTdLCc4vjsqqtFpqhJ6p11tqxDx8MEPJGU1l+FO47hqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNpa803LjOEYGOJfuFRbFBECSjq0MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMmxyelRjdU00UmdZNGwtNFZGc1VFUUpLT3JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZAiMA0G
CSqGSIb3DQEBCwUAA4IBAQDWEeHHHod+BMsFkwFRJk8mEPX+xLx/FxLvajlk5GLS
ZwvpbhGBPEHRVhTM0a/hz7CivursiYeLsDw3YlvgnSzBP6rXkyiI5FbfrTaluwsw
2sSdzqiLiHwFZg7r4+zPD96yUg6B4BX8JbtN8UQCEjUpfCKrZN6xtDIzC3TjfCQ6
yc35w4S1jDCSRn4oC14KSwLR29c9LONyeNjj+d0waNCBvCjBZOfuZ2kgg+YHEARA
QKWk/I2Vud0+ixzTTu5jOTDVUDgqbLsiexPypvPIajvn8hvms7u1Mmof/MqaYAYG
8eHz5YLk1nW9XZKrt5u9mhPM8Knd9x03k2B/HEz+0hFa
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:27 2026 by rpki-client