Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/2opF5RUsv3XDc1My0IeDj7X6rkY.roa
File: 2opF5RUsv3XDc1My0IeDj7X6rkY.roa (raw, json)
Hash identifier: rLnnTlMpS3ub6k4swr9VWzMlA8CfLQoDtyjmLZJnpi4=
Subject key identifier: DA:8A:45:E5:15:2C:BF:75:C3:73:53:32:D0:87:83:8F:B5:FA:AE:46
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 01A096B5BB7528CEDB75922E9A4A85861429
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/2opF5RUsv3XDc1My0IeDj7X6rkY.roa
Signing time: Sat 12 Sep 2026 17:41:27 +0000
ROA not before: Sat 12 Sep 2026 17:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206300
IP address blocks: 64.83.24.0/22 maxlen: 24
189.24.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:96:b5:bb:75:28:ce:db:75:92:2e:9a:4a:85:86:14:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Sep 12 17:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da8a45e5152cbf75c3735332d087838fb5faae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:a6:e9:ef:a3:7e:b8:55:7b:4d:2b:4f:56:
f3:a4:ba:cd:87:8a:71:5d:c4:bc:d2:53:83:79:5c:
b8:6a:21:c9:76:92:b8:77:16:38:41:75:80:a5:7f:
94:b6:39:b3:b6:c0:c6:f6:db:80:06:33:e1:a9:83:
78:c2:43:ad:33:6b:43:8b:87:4f:3e:da:cf:80:47:
95:d0:22:35:51:63:c4:36:10:35:6a:5a:1d:4c:2d:
ab:97:78:99:ac:fb:f9:03:8c:9e:f9:3e:f6:1f:9e:
70:26:ad:3c:e4:9a:12:cb:a9:22:63:cc:b7:b5:04:
d8:54:c3:34:e8:67:46:9f:ac:74:74:e2:e3:b2:96:
78:f9:90:30:80:6d:3e:df:18:91:18:aa:f3:a0:a6:
65:ba:0a:03:31:fe:20:c8:9f:46:41:13:1f:a4:25:
d3:46:e5:1e:ff:ee:f4:83:7b:ab:bb:d5:5d:b2:d7:
88:0f:28:56:d1:bf:61:62:46:41:cd:8e:d0:ce:34:
f4:4c:ca:84:d1:b6:38:8d:ee:cd:0a:ec:40:6d:15:
dd:0c:38:ec:87:01:37:99:d6:58:30:80:a5:18:cb:
81:c9:f8:d2:8d:9f:9c:b6:2f:a2:5f:5e:ed:f2:3d:
0d:56:c8:b8:39:9e:3d:83:b0:80:8a:73:e9:cc:fa:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8A:45:E5:15:2C:BF:75:C3:73:53:32:D0:87:83:8F:B5:FA:AE:46
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/2opF5RUsv3XDc1My0IeDj7X6rkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.83.24.0/22
189.24.74.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:c1:5f:50:76:f8:d2:40:46:e0:73:19:24:3d:07:90:62:f3:
9f:90:16:be:53:61:46:ca:44:7e:a5:40:3f:7e:1f:b7:b1:41:
86:57:76:6c:eb:78:d9:cd:58:8b:c0:9e:db:1d:26:ac:4d:53:
77:b3:9c:a0:67:26:d7:25:cd:b9:87:03:07:02:e4:3c:84:ae:
86:83:5f:96:55:47:92:77:46:16:19:7e:38:0d:04:a6:ea:7e:
93:97:57:42:74:83:d0:92:5d:96:c6:bd:b1:ba:46:fd:f1:43:
95:db:fd:d4:fe:47:36:30:74:f7:a5:a8:d4:b6:67:7a:a4:ca:
ea:ef:56:a9:34:d1:85:8e:26:d8:a5:61:75:33:c9:cb:76:6e:
ec:de:64:23:7d:95:ac:f0:18:c9:52:47:c1:dc:be:8d:c8:28:
6d:d1:f6:28:b7:19:c5:3f:b8:f0:9a:93:e4:d8:be:af:82:c7:
19:c7:c7:f4:b0:9a:d2:a5:43:bc:f2:15:41:89:19:3c:2b:bf:
67:34:9f:b0:f8:d0:dd:87:7f:42:e9:f9:5b:88:d5:b3:5b:3c:
ef:8c:9c:b2:8f:01:07:f1:4c:cc:3d:09:b3:fc:6d:91:b6:eb:
bc:e6:2b:d9:e9:b5:a8:26:7a:58:54:cd:e9:1d:35:23:28:24:
83:32:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:21:54 2026 by rpki-client