Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/2Ai39wk2IJN5A9va_AC40LFzqWU.roa
File: 2Ai39wk2IJN5A9va_AC40LFzqWU.roa (raw, json)
Hash identifier: Izeu/F4EjqSAc8sBUPxcx6Por3E0vpcdBzZDlLmLG7g=
Subject key identifier: D8:08:B7:F7:09:36:20:93:79:03:DB:DA:FC:00:B8:D0:B1:73:A9:65
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A16B3EEA0443AC2D7CCAA10F3FA4EF214A
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/2Ai39wk2IJN5A9va_AC40LFzqWU.roa
Signing time: Sat 24 Oct 2026 00:10:47 +0000
ROA not before: Sat 24 Oct 2026 00:10:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 85.92.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:3e:ea:04:43:ac:2d:7c:ca:a1:0f:3f:a4:ef:21:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 24 00:10:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d808b7f7093620937903dbdafc00b8d0b173a965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:b2:0f:3b:da:9f:6a:06:18:28:37:7b:f6:
1f:1f:f7:3a:01:1c:8b:6b:e5:3f:7f:3e:63:2d:ee:
b6:93:e2:cd:0f:d5:3f:05:90:84:77:46:45:fa:2b:
6a:7d:09:43:71:60:55:be:9c:52:a9:fc:18:3f:3b:
ad:7d:98:47:58:d9:bb:48:f1:0e:a5:90:89:4c:9d:
2f:c0:de:3b:4a:c1:99:92:ff:f8:b9:b5:41:6f:12:
f7:64:6e:ad:f7:ec:f2:4c:4e:c7:2a:06:0d:12:75:
f1:91:16:a9:2d:e4:89:97:85:26:b9:fd:d2:9a:cc:
ce:40:76:e6:f9:02:bd:f1:6f:b7:4c:0e:ce:23:37:
6a:77:56:17:26:dc:24:5c:62:ce:41:34:eb:81:ca:
4b:64:50:33:b9:9e:a5:48:3b:de:10:e5:33:d2:64:
db:24:d4:a0:ff:e4:67:b6:8e:64:5e:8d:8c:3a:4d:
8e:17:41:0e:f5:37:1e:c5:29:16:7b:70:b6:8f:63:
7c:60:27:25:e5:fb:40:8d:07:4d:e6:bd:df:09:4e:
5a:d4:ca:4c:47:8e:d0:27:28:cb:a5:46:ab:b1:40:
97:21:59:c3:8a:8d:86:d0:3d:48:12:97:40:4a:89:
50:c0:c7:7d:1b:58:4b:22:81:4b:b4:06:aa:9c:13:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:08:B7:F7:09:36:20:93:79:03:DB:DA:FC:00:B8:D0:B1:73:A9:65
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/2Ai39wk2IJN5A9va_AC40LFzqWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.141.0/24
Signature Algorithm: sha256WithRSAEncryption
29:52:21:e4:db:ab:6b:9d:36:d7:cd:0c:6c:77:b3:97:07:5f:
93:12:ec:b7:18:3e:de:d5:d7:7d:26:28:57:1f:ce:28:90:34:
10:13:bc:38:44:51:cc:df:48:47:2c:6f:1d:6e:f7:22:49:d0:
d4:60:23:32:37:bb:b0:62:c4:c6:cb:01:b0:26:0c:24:f4:6d:
2b:a4:65:af:2f:a6:02:05:77:57:eb:25:31:7b:a6:ed:a4:9c:
09:1d:de:32:a2:0d:28:65:fa:04:b4:00:52:1d:14:45:63:43:
67:2d:09:28:40:1f:05:56:e7:66:83:d2:31:ca:96:db:cb:d9:
7f:ec:39:55:9e:91:34:bb:d8:ff:63:8b:58:a8:49:dd:95:44:
6a:8d:d3:5d:a0:29:ae:d1:31:ad:09:1e:a6:f3:6b:44:73:a2:
72:51:85:a5:0c:bf:f6:c3:30:de:17:62:ca:eb:99:23:7a:eb:
75:4d:9d:cf:1f:aa:f8:94:d5:4e:f1:43:1f:9e:b5:87:23:77:
0b:90:7a:dc:4b:0a:c7:3b:3f:d3:f1:2b:4e:c7:02:4a:d6:b1:
62:7b:91:3e:9e:36:b8:0a:f2:5a:3d:8c:0a:36:48:a6:74:87:
f3:ab:46:35:ad:60:8a:83:b1:f7:d3:75:b6:45:94:cb:7e:8f:
12:f6:76:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:18 2026 by rpki-client