Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2Tu4-QFo161FaESFdQvJN5mHle8.roa
File: 2Tu4-QFo161FaESFdQvJN5mHle8.roa (raw, json)
Hash identifier: U8a5lVRYc+Rh8wX7w3nqjwMseOml0Yy0TNaORJqXk7s=
Subject key identifier: D9:3B:B8:F9:01:68:D7:AD:45:68:44:85:75:0B:C9:37:99:87:95:EF
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019E67A527001E550015117334303D993618
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2Tu4-QFo161FaESFdQvJN5mHle8.roa
Signing time: Wed 27 May 2026 04:15:37 +0000
ROA not before: Wed 27 May 2026 04:15:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 5.8.18.0/24 maxlen: 24
5.101.81.0/24 maxlen: 24
5.101.82.0/24 maxlen: 24
5.101.83.0/24 maxlen: 24
5.101.84.0/24 maxlen: 24
5.101.85.0/24 maxlen: 24
5.188.61.0/24 maxlen: 24
46.161.0.0/24 maxlen: 24
146.185.233.0/24 maxlen: 24
146.185.239.0/24 maxlen: 24
193.93.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:67:a5:27:00:1e:55:00:15:11:73:34:30:3d:99:36:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 27 04:15:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d93bb8f90168d7ad45684485750bc937998795ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:40:5a:9d:65:44:8e:16:5f:c1:b2:a2:e1:
31:b1:60:54:f9:ee:ea:33:03:f4:14:ee:74:5d:82:
2e:5e:8c:01:7e:8a:44:12:87:83:8d:01:9d:86:03:
bd:e5:51:3e:60:39:5b:4f:36:89:8f:6e:cf:57:15:
fe:ba:61:f6:de:41:8c:1b:4e:3d:42:87:13:aa:66:
a5:86:a4:c3:1e:8e:ae:37:49:17:62:60:5e:44:a4:
0d:73:55:cb:d5:f8:b5:d0:36:dd:e0:0b:3e:3a:d1:
fd:37:5d:53:ab:c4:08:e6:81:a0:1c:d4:cb:17:2d:
08:1c:c7:a3:6d:b3:a3:45:9e:1a:2f:34:c9:21:ab:
07:fe:47:eb:d6:13:8e:d1:98:2e:a6:92:f1:cc:16:
ae:8d:6f:8c:af:b9:db:e1:5d:df:f9:a7:05:d8:7f:
b9:a3:25:b3:83:cb:af:bf:cb:9f:56:88:9f:a1:d0:
aa:7c:ca:c1:6b:0a:f6:57:f7:c2:db:f0:c8:d2:79:
f2:50:c8:2d:42:ee:cd:95:14:09:37:2b:f4:6a:ba:
c9:96:24:0f:98:64:86:3c:09:a5:18:ce:ad:9c:61:
e3:b5:6d:86:7b:8a:81:e3:c6:e3:e4:c3:be:94:f6:
09:0a:28:81:b8:83:a0:6a:18:dd:fa:b3:b5:6a:35:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:B8:F9:01:68:D7:AD:45:68:44:85:75:0B:C9:37:99:87:95:EF
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2Tu4-QFo161FaESFdQvJN5mHle8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.18.0/24
5.101.81.0-5.101.85.255
5.188.61.0/24
46.161.0.0/24
146.185.233.0/24
146.185.239.0/24
193.93.192.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5f:b4:63:54:ba:5b:37:8c:53:e1:85:33:7f:5b:09:ce:95:
bf:aa:2b:f2:ac:0d:b6:a1:36:8d:06:74:89:8f:cb:7d:50:bd:
91:76:e3:d1:ce:27:b2:46:21:37:68:ca:39:6e:c3:2e:a5:61:
7a:3f:64:86:96:88:66:32:61:ad:42:0c:a2:7d:7d:d8:4e:f5:
cc:5e:3d:b1:f0:03:50:1c:f5:48:c8:6d:b5:87:1e:59:26:ce:
2f:b2:f7:ad:2a:f7:a1:5e:f3:be:22:90:b0:34:26:98:1d:69:
02:cb:d4:6d:bc:d5:7d:0d:0d:39:0b:d1:98:7a:bd:88:b6:73:
13:cd:8a:51:90:26:44:e9:bf:fd:05:a7:a7:81:60:ec:71:72:
e0:ed:2a:da:bc:77:c7:e9:4e:a4:c4:73:24:9c:43:e5:4d:3c:
34:04:54:d4:3b:7e:f6:71:9e:3a:51:c1:a3:30:a3:73:87:a7:
9e:15:82:ad:c0:0c:1b:fe:cc:ba:27:f5:6e:95:25:4d:70:86:
7a:ad:29:46:c9:4a:b2:d5:82:a3:05:11:af:12:a1:6e:59:73:
e6:b9:c2:15:a0:53:95:32:2c:33:1a:af:20:7c:eb:b7:6c:58:
c5:f0:9d:9c:e5:39:2b:ec:44:cb:34:ab:5b:67:e1:cb:07:2e:
c2:5e:c5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:14:04 2026 by rpki-client