Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2ZpjUZ8EdvObYKpePFIfbgfFPKM.roa
File: 2ZpjUZ8EdvObYKpePFIfbgfFPKM.roa (raw, json)
Hash identifier: UOZO1W5+Je27fb8nXsR9IODOPG5g2CcWWcEDcnzAozM=
Subject key identifier: D9:9A:63:51:9F:04:76:F3:9B:60:AA:5E:3C:52:1F:6E:07:C5:3C:A3
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019E69EA5CB1A024712D11C579BDA6F31C21
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2ZpjUZ8EdvObYKpePFIfbgfFPKM.roa
Signing time: Wed 27 May 2026 14:50:27 +0000
ROA not before: Wed 27 May 2026 14:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197243
IP address blocks: 5.8.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:ea:5c:b1:a0:24:71:2d:11:c5:79:bd:a6:f3:1c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 27 14:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d99a63519f0476f39b60aa5e3c521f6e07c53ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:f7:91:36:a6:c7:b6:41:9b:72:a5:6b:6a:
eb:09:90:32:d6:85:97:3d:98:9a:78:92:15:91:9d:
f3:a7:37:83:1e:13:e4:f6:7b:a4:f2:d3:ce:84:f4:
66:73:bb:ea:69:3c:3e:dc:6c:07:a7:5e:1e:a3:d7:
bb:3a:d9:0c:44:c6:6d:db:f2:00:66:3b:18:81:48:
4c:f4:40:ac:d6:be:35:f7:92:36:65:fc:ab:d0:a1:
43:af:7a:d8:ec:48:f2:2b:39:c9:a5:3d:75:39:ae:
c0:41:55:66:de:c3:0f:76:f8:21:6c:2b:0b:9e:4d:
46:3e:b3:c0:37:cc:c9:1b:c6:4e:e2:b6:1b:f0:21:
0c:9c:ee:d9:4f:0e:0b:a8:d6:7a:7d:85:dc:7d:71:
85:a8:86:65:c9:3b:06:92:fc:a1:96:56:4d:42:d0:
0e:9a:d6:a5:4e:97:5e:a8:16:3c:07:5a:cc:e8:c8:
d2:df:95:76:f2:aa:13:8e:a2:3c:3a:67:64:1b:a0:
ab:1f:5c:d0:06:ea:f5:d9:91:82:15:4a:3a:75:0e:
0f:c4:66:ce:e1:3d:f8:d4:e2:77:3b:b2:eb:46:6a:
22:1a:d6:47:f0:77:c2:79:1e:5e:7f:69:50:41:23:
06:4d:30:36:92:b2:ee:dc:0b:65:9d:95:26:1f:58:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9A:63:51:9F:04:76:F3:9B:60:AA:5E:3C:52:1F:6E:07:C5:3C:A3
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2ZpjUZ8EdvObYKpePFIfbgfFPKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.44.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:1f:71:a7:1a:cc:6c:c3:11:b7:89:48:f8:01:62:e5:54:b1:
6c:75:06:52:ad:fc:1e:a9:bc:2f:96:b8:50:21:f7:76:03:0d:
8c:82:8f:eb:74:6f:06:aa:00:9e:0f:0f:2c:d1:a7:ee:7f:fd:
86:a9:31:bc:75:8b:61:a4:7a:d5:09:c1:9f:dd:53:9c:6e:33:
5c:c2:c1:fc:38:07:df:0f:91:ed:6c:b7:ef:53:4a:ed:4a:9b:
16:28:38:71:6f:f5:a0:b9:86:03:45:1c:99:1d:5d:65:86:54:
f3:26:e5:d2:8a:d1:5c:d6:af:b6:d1:21:ae:68:8b:15:33:94:
80:01:2e:f6:9d:51:a4:2f:c0:93:97:58:70:39:72:f9:3a:bc:
be:18:a7:ff:73:fc:ba:69:e6:14:28:a9:01:19:9b:47:36:c2:
6c:9a:56:22:da:27:66:8c:a7:da:1b:bb:2f:ea:18:de:c4:2d:
16:84:1b:6c:92:2b:3d:fb:c6:3e:9d:98:e1:fd:24:fd:a2:e5:
b1:bb:e0:bd:64:c5:2c:6d:c4:b6:31:49:7b:99:d0:b3:ef:8a:
e6:0d:9c:b1:80:0c:4b:13:c9:3c:1e:ec:ca:f2:e4:00:97:c9:
ab:0d:d5:04:6e:7e:9a:4e:17:1e:ba:a2:1c:a6:48:d3:c8:bb:
bc:60:3f:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5p6lyxoCRxLRHFeb2m8xwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjYwNTI3MTQ1MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTlhNjM1MTlmMDQ3NmYzOWI2MGFhNWUzYzUyMWY2ZTA3YzUzY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pr3kTamx7ZBm3Kla2rrCZAy1oWX
PZiaeJIVkZ3zpzeDHhPk9nuk8tPOhPRmc7vqaTw+3GwHp14eo9e7OtkMRMZt2/IA
ZjsYgUhM9ECs1r4195I2Zfyr0KFDr3rY7EjyKznJpT11Oa7AQVVm3sMPdvghbCsL
nk1GPrPAN8zJG8ZO4rYb8CEMnO7ZTw4LqNZ6fYXcfXGFqIZlyTsGkvyhllZNQtAO
mtalTpdeqBY8B1rM6MjS35V28qoTjqI8OmdkG6CrH1zQBur12ZGCFUo6dQ4PxGbO
4T341OJ3O7LrRmoiGtZH8HfCeR5ef2lQQSMGTTA2krLu3AtlnZUmH1gXlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNmaY1GfBHbzm2CqXjxSH24HxTyjMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvMlpwalVaOEVkdk9iWUtwZVBGSWZiZ2ZGUEtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQgsMA0G
CSqGSIb3DQEBCwUAA4IBAQDCH3GnGsxswxG3iUj4AWLlVLFsdQZSrfweqbwvlrhQ
Ifd2Aw2Mgo/rdG8GqgCeDw8s0afuf/2GqTG8dYthpHrVCcGf3VOcbjNcwsH8OAff
D5HtbLfvU0rtSpsWKDhxb/WguYYDRRyZHV1lhlTzJuXSitFc1q+20SGuaIsVM5SA
AS72nVGkL8CTl1hwOXL5Ory+GKf/c/y6aeYUKKkBGZtHNsJsmlYi2idmjKfaG7sv
6hjexC0WhBtskis9+8Y+nZjh/ST9ouWxu+C9ZMUsbcS2MUl7mdCz74rmDZyxgAxL
E8k8HuzK8uQAl8mrDdUEbn6aThceuqIcpkjTyLu8YD8g
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:06 2026 by rpki-client