Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2HdQwYcSwNZQlbUAnyrlZKKxBw0.roa
File: 2HdQwYcSwNZQlbUAnyrlZKKxBw0.roa (raw, json)
Hash identifier: 0XqNbknlkVcC1i9x9FiPoYV6gQhW9e1uNNgfXpLi9VE=
Subject key identifier: D8:77:50:C1:87:12:C0:D6:50:95:B5:00:9F:2A:E5:64:A2:B1:07:0D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A17D3017E85E458206E478E110EC575160
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2HdQwYcSwNZQlbUAnyrlZKKxBw0.roa
Signing time: Tue 27 Oct 2026 11:47:46 +0000
ROA not before: Tue 27 Oct 2026 11:47:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 91.217.149.0/24 maxlen: 24
192.109.206.0/24 maxlen: 24
195.96.129.0/24 maxlen: 24
217.28.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:30:17:e8:5e:45:82:06:e4:78:e1:10:ec:57:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 27 11:47:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d87750c18712c0d65095b5009f2ae564a2b1070d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:6c:09:95:ca:ae:5b:f6:8c:95:23:08:3b:
25:16:bc:8a:dd:6a:7a:50:20:e4:cd:40:ca:d3:5e:
d1:41:f9:3e:b4:42:b0:b6:9b:1b:1d:21:7b:b5:e6:
13:ab:50:a4:f5:6e:9d:4e:ad:7a:6f:b4:b2:6e:7f:
68:43:61:53:15:a6:a4:b5:e1:76:7e:90:cc:d3:d4:
79:cf:94:ca:a5:92:9b:cf:2d:08:2c:a3:94:2d:01:
6a:0c:ba:9c:5d:70:02:70:a6:87:90:83:d8:a6:0c:
f1:8a:b9:45:1c:37:09:54:b3:47:db:6b:8e:06:16:
95:43:d4:bb:1e:1c:2c:c3:37:b4:df:7a:0c:87:d6:
c4:fd:7d:56:4d:be:90:59:bc:54:c2:1d:41:94:95:
cd:ec:e1:0c:18:1d:00:31:61:a4:06:74:af:5c:fc:
eb:28:cf:e0:e4:b0:41:02:a2:d1:81:84:61:f1:44:
5a:38:40:c7:6c:48:15:59:94:bb:ba:01:51:11:00:
53:fb:f9:25:5a:1c:25:30:71:77:07:52:9c:f0:a2:
f4:05:10:2f:bb:cc:fb:20:59:1d:af:6d:57:01:17:
35:ab:2a:f1:4b:14:59:e4:54:6b:7a:b8:3b:04:8f:
7c:2c:45:73:5d:b7:ef:81:d9:75:5b:c9:aa:f2:bb:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:77:50:C1:87:12:C0:D6:50:95:B5:00:9F:2A:E5:64:A2:B1:07:0D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2HdQwYcSwNZQlbUAnyrlZKKxBw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.149.0/24
192.109.206.0/24
195.96.129.0/24
217.28.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:48:cb:c1:1c:22:d1:cc:7b:36:79:48:62:9a:98:bf:8a:bd:
4d:ed:96:bb:d6:02:6c:b9:5c:82:ac:27:d5:e7:5b:1b:3c:c1:
7b:38:12:d1:5c:ea:25:c8:cd:db:c5:8f:05:2e:46:fe:ab:79:
fb:e6:b7:3f:40:6b:fb:c2:9e:56:d4:2a:69:e2:be:e7:13:35:
47:b6:fb:6d:5e:db:2e:6b:03:9a:dc:15:a5:18:99:eb:f2:80:
18:b3:fc:65:d7:93:39:b4:51:03:35:94:b8:ae:8f:73:c6:19:
37:2c:bd:24:55:b5:78:e7:6a:90:c4:f3:ac:8f:a5:cb:0b:4a:
de:99:4a:8d:26:f3:27:7c:8c:cb:59:a3:da:37:e0:69:e0:aa:
ea:2a:f5:52:09:d7:80:99:48:0c:e8:36:1e:17:bf:aa:6e:e6:
b1:0e:23:3e:87:7e:0e:5b:9d:c4:9f:90:66:ac:fe:47:24:5c:
1f:bd:e5:f5:13:4e:76:34:d7:2a:67:77:c8:75:02:f9:36:01:
11:74:f5:60:05:ab:d0:03:72:c3:47:81:03:8c:9c:34:0b:9e:
9d:5f:a9:a4:f2:a2:28:af:96:ef:6d:f6:d8:38:43:ee:d2:41:
7b:a7:93:6c:81:20:63:d8:4c:fd:62:6b:b7:a8:af:54:2d:7f:
b4:41:2e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:00 2026 by rpki-client