Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/2NUk4-WXGTUF0GeRTyrSDLbq3VI.roa
File: 2NUk4-WXGTUF0GeRTyrSDLbq3VI.roa (raw, json)
Hash identifier: EXU9HQQMoERyAYQurjGAOh6YNj+Rb1FRWmfk9KwEk5I=
Subject key identifier: D8:D5:24:E3:E5:97:19:35:05:D0:67:91:4F:2A:D2:0C:B6:EA:DD:52
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A06C48495AD77C955A74BB976CBB1ADA66
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/2NUk4-WXGTUF0GeRTyrSDLbq3VI.roa
Signing time: Fri 04 Sep 2026 11:57:51 +0000
ROA not before: Fri 04 Sep 2026 11:57:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218910
IP address blocks: 194.233.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:48:49:5a:d7:7c:95:5a:74:bb:97:6c:bb:1a:da:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 4 11:57:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8d524e3e597193505d067914f2ad20cb6eadd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:23:55:29:fd:1a:67:78:1e:c3:5e:e5:b9:
7d:80:cc:8c:58:84:60:a2:6f:90:0d:9c:4f:72:79:
b0:b2:a1:e0:f8:2b:d0:7c:17:48:17:39:c8:40:16:
8e:5b:b8:ce:f7:04:23:b9:5e:32:d2:a3:3d:7f:73:
cc:29:26:5a:cb:8c:af:c0:d3:31:f9:39:92:b8:3d:
4a:34:68:cc:b7:37:b5:93:9f:ab:41:c0:f6:aa:6c:
c4:7f:de:dc:0b:27:98:a5:8e:7a:64:20:65:1d:99:
d1:8c:c1:07:74:a3:db:f3:db:11:ba:76:2a:d6:63:
69:ac:32:a3:20:65:07:a1:02:e4:ce:69:32:8d:05:
90:b8:69:76:f5:87:1f:8e:ca:c5:12:2f:a0:db:e0:
e3:88:1c:f5:14:ed:6d:e4:71:cd:e8:62:3e:84:d3:
01:24:32:94:ea:47:8c:a6:63:37:41:27:89:fa:5f:
ae:07:18:78:13:55:23:45:56:8f:0c:f1:98:57:b6:
62:0b:e7:57:12:ce:0d:a6:b0:66:4b:7a:67:1e:0b:
81:f4:47:1c:b3:3c:27:2d:07:a6:e8:92:5b:44:27:
62:3d:b8:e7:6f:fa:27:5d:83:0b:c1:e4:ad:c3:f2:
25:e4:7d:41:2a:3e:7c:5d:b0:7f:13:ed:44:61:72:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:24:E3:E5:97:19:35:05:D0:67:91:4F:2A:D2:0C:B6:EA:DD:52
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/2NUk4-WXGTUF0GeRTyrSDLbq3VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.149.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:81:7d:f7:ee:bc:2b:18:9a:b5:c6:0d:0c:32:b1:a0:90:f6:
10:6d:26:3e:8c:11:f2:c3:be:3a:fe:3f:ad:ec:13:85:ab:d4:
ac:fa:24:dd:53:f3:6b:de:55:ab:fa:e3:38:a9:c0:99:3d:00:
99:76:32:e2:0a:cc:e2:87:17:a9:63:12:fc:63:47:cb:cd:a0:
42:7b:54:6a:10:19:ba:9f:e3:44:5f:c2:45:4c:c2:14:11:c1:
aa:44:56:35:9b:b1:fd:31:40:32:f9:e0:0d:bb:4e:53:ee:dd:
30:99:db:23:8c:04:4a:8b:28:78:80:f6:a0:8a:47:28:be:6e:
c0:a7:29:70:f5:31:4d:e9:80:80:1d:c6:f2:9d:e4:6d:43:9f:
19:e2:50:21:60:94:56:01:3e:a1:e9:4d:eb:d2:02:66:1d:98:
c2:58:7e:56:81:61:6e:74:6b:e0:24:45:61:da:05:38:a5:60:
cd:79:c1:5b:43:e8:12:a8:9e:24:86:34:f9:18:b2:c7:7a:f7:
05:99:a0:67:9b:b6:d1:e4:27:90:97:7e:42:d4:f0:ea:20:ee:
d0:8b:5d:71:0d:30:0c:01:0e:c7:97:da:d6:70:7c:16:3d:91:
62:b9:68:59:e5:0b:93:f6:58:cb:05:cc:d8:14:b0:e5:d0:ad:
5b:19:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:27:30 2026 by rpki-client