Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/2B2WsXFKrE0PsjMLGDLFgrkoQHk.roa
File: 2B2WsXFKrE0PsjMLGDLFgrkoQHk.roa (raw, json)
Hash identifier: I2f8cSCJ55gr+41EbqG2bCbVCSI6WYHHpiTlmKWKwag=
Subject key identifier: D8:1D:96:B1:71:4A:AC:4D:0F:B2:33:0B:18:32:C5:82:B9:28:40:79
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 01A061EAEB141E9B160AC789928EE6DFDE6D
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/2B2WsXFKrE0PsjMLGDLFgrkoQHk.roa
Signing time: Wed 02 Sep 2026 11:39:40 +0000
ROA not before: Wed 02 Sep 2026 11:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215355
IP address blocks: 143.246.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:ea:eb:14:1e:9b:16:0a:c7:89:92:8e:e6:df:de:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Sep 2 11:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d81d96b1714aac4d0fb2330b1832c582b9284079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:8c:dd:c2:e1:ab:39:75:45:aa:0d:19:dd:
56:4b:60:ca:d5:61:55:9b:c3:1c:eb:02:12:c4:24:
fe:59:0d:13:36:0f:ed:8e:1c:0b:f1:98:d4:ab:b9:
5a:25:cf:38:63:ae:9d:33:45:52:2d:1a:94:8f:90:
06:9a:62:c3:cc:20:4b:20:78:23:ad:1c:ab:e1:6b:
b3:37:aa:26:ad:ab:3c:39:23:93:c9:19:b7:ee:c2:
db:56:b8:47:14:9e:f9:2a:54:56:02:2b:4c:5f:4a:
0a:2e:82:39:ba:59:c8:5b:bf:c1:27:34:0b:3a:79:
eb:0e:ea:ee:d1:17:6b:fd:4e:78:c7:e0:ea:0a:67:
da:d2:e5:24:7f:ed:77:61:17:bf:72:c7:d5:5a:8a:
15:1a:96:67:4f:1a:54:bd:88:a9:ee:4d:52:fc:a7:
63:c6:ab:fa:ae:4e:61:db:0c:50:fb:4b:56:77:c8:
91:27:64:47:8a:c9:97:7c:1f:1a:e9:35:e3:89:d1:
41:68:9f:35:5e:fb:86:e0:1e:35:24:6f:fd:f1:f2:
ba:80:69:9f:56:58:45:1f:03:23:98:cb:c8:66:3b:
09:ad:db:0f:f2:85:d9:77:aa:53:ed:57:25:21:31:
76:e8:4a:8f:25:db:db:33:29:ac:78:25:f5:7b:3d:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1D:96:B1:71:4A:AC:4D:0F:B2:33:0B:18:32:C5:82:B9:28:40:79
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/2B2WsXFKrE0PsjMLGDLFgrkoQHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.52.0/23
Signature Algorithm: sha256WithRSAEncryption
03:44:83:54:cc:23:1a:6a:f4:17:39:b6:4c:5c:83:aa:b0:8e:
5a:a8:66:b7:bf:e0:1b:ae:43:f1:a2:f0:51:b7:b5:10:a4:d0:
e0:b1:26:d0:42:68:f2:43:d3:2b:05:d9:0e:48:4a:82:b5:b2:
76:0c:73:24:ae:65:86:54:d3:e3:e4:34:4e:21:8a:19:81:8f:
e7:68:e2:a4:d8:e6:2e:ff:0e:a6:de:e5:2b:22:9f:18:16:17:
ad:c2:a8:d0:67:63:53:e6:d5:2a:79:37:ff:70:b9:8e:6e:f2:
ac:07:0d:a9:7d:f9:1c:97:e5:45:d5:6c:bc:8f:95:8f:0a:8d:
07:b1:0f:76:90:fa:42:47:72:f8:95:e7:fb:f3:a5:90:eb:da:
33:bc:38:19:03:c5:d7:eb:66:bf:71:1f:49:67:a0:0f:7d:77:
f2:73:61:25:5d:db:4d:5d:04:22:be:b5:96:73:27:a6:50:ad:
52:31:d9:78:0f:14:4e:3b:e7:75:ca:d5:c6:ae:c1:5c:19:72:
54:9f:44:51:bd:f0:16:f1:b4:a3:e9:1f:4a:7b:23:30:a6:f5:
2a:be:d6:53:3e:58:6e:87:57:09:f1:c3:da:8c:c1:36:64:9e:
38:c1:87:d5:89:a5:64:7a:4a:b6:64:f8:7a:5d:19:07:ae:00:
62:4e:62:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBh6usUHpsWCseJko7m395tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWQ4MDJjYWY5YWE4ZjQyN2YxZGQwODU1NmM4OTk5NWYw
NDc4ZDEwHhcNMjYwOTAyMTEzOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODFkOTZiMTcxNGFhYzRkMGZiMjMzMGIxODMyYzU4MmI5Mjg0MDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjCM3cLhqzl1RaoNGd1WS2DK1WFV
m8Mc6wISxCT+WQ0TNg/tjhwL8ZjUq7laJc84Y66dM0VSLRqUj5AGmmLDzCBLIHgj
rRyr4WuzN6omras8OSOTyRm37sLbVrhHFJ75KlRWAitMX0oKLoI5ulnIW7/BJzQL
OnnrDuru0Rdr/U54x+DqCmfa0uUkf+13YRe/csfVWooVGpZnTxpUvYip7k1S/Kdj
xqv6rk5h2wxQ+0tWd8iRJ2RHismXfB8a6TXjidFBaJ81XvuG4B41JG/98fK6gGmf
VlhFHwMjmMvIZjsJrdsP8oXZd6pT7VclITF26EqPJdvbMymseCX1ez0oCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNgdlrFxSqxND7IzCxgyxYK5KEB5MB8GA1UdIwQY
MBaAFFGdgCyvmqj0J/HdCFVsiZlfBHjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYt
MDcxNzY0NjkwZWNmLzEvMkIyV3NYRktyRTBQc2pNTEdETEZncmtvUUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYtMDcxNzY0NjkwZWNm
LzEvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBj/Y0MA0G
CSqGSIb3DQEBCwUAA4IBAQADRINUzCMaavQXObZMXIOqsI5aqGa3v+AbrkPxovBR
t7UQpNDgsSbQQmjyQ9MrBdkOSEqCtbJ2DHMkrmWGVNPj5DROIYoZgY/naOKk2OYu
/w6m3uUrIp8YFhetwqjQZ2NT5tUqeTf/cLmObvKsBw2pffkcl+VF1Wy8j5WPCo0H
sQ92kPpCR3L4lef786WQ69ozvDgZA8XX62a/cR9JZ6APfXfyc2ElXdtNXQQivrWW
cyemUK1SMdl4DxROO+d1ytXGrsFcGXJUn0RRvfAW8bSj6R9KeyMwpvUqvtZTPlhu
h1cJ8cPajME2ZJ44wYfViaVkekq2ZPh6XRkHrgBiTmL+
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:18:45 2026 by rpki-client