Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/2Zslfn__QIhx6OX48_NKfIqrzSc.roa
File: 2Zslfn__QIhx6OX48_NKfIqrzSc.roa (raw, json)
Hash identifier: VYnOK+rc+xOxyoEFqSm+yquuiXcM9YH3Y4gu3Gh6hXg=
Subject key identifier: D9:9B:25:7E:7F:FF:40:88:71:E8:E5:F8:F3:F3:4A:7C:8A:AB:CD:27
Certificate issuer: /CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Certificate serial: 019F236887393A5507039A99B2FB8C3C13A1
Authority key identifier: EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/2Zslfn__QIhx6OX48_NKfIqrzSc.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 93.191.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:87:39:3a:55:07:03:9a:99:b2:fb:8c:3c:13:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d99b257e7fff408871e8e5f8f3f34a7c8aabcd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:bf:a4:cb:ad:e1:40:6d:8e:23:fe:f6:af:
8c:95:06:49:dd:d6:20:fa:74:9d:d1:ad:47:fb:e5:
53:08:d4:5b:da:73:2f:a6:93:cf:ec:9f:85:a0:c0:
a6:19:27:25:c3:19:58:ca:fa:26:e9:9c:db:87:18:
cb:bf:c3:d7:c4:f1:45:0c:ab:20:09:84:19:9b:73:
16:30:4a:51:5e:1c:47:33:99:ef:15:d3:b0:29:bc:
42:07:50:9d:cb:9d:b9:fb:4d:2d:77:1a:83:b7:52:
6e:d8:88:cc:db:a3:aa:42:2c:1d:36:7b:15:34:51:
b6:76:14:56:ba:24:53:e8:3f:8f:da:7a:cf:1f:57:
cb:9c:12:74:25:b4:07:2e:82:ef:62:1a:24:72:38:
92:5e:18:ec:fb:8c:78:f1:e5:60:e3:cd:a0:27:2a:
6c:32:b3:e9:eb:6c:e1:88:30:6a:42:dc:82:44:0d:
e6:a3:16:cc:b3:c5:ef:9d:03:3e:eb:a2:6a:1d:e9:
cb:cc:93:a5:02:b9:bc:b6:10:22:74:46:d3:c8:72:
8d:a4:bb:40:ac:11:88:e1:68:0c:64:b2:91:82:58:
69:15:4f:d1:0a:08:ab:77:9b:be:19:b2:87:8f:ff:
dc:9d:01:9f:47:59:10:a2:a0:67:63:e8:31:fc:47:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9B:25:7E:7F:FF:40:88:71:E8:E5:F8:F3:F3:4A:7C:8A:AB:CD:27
X509v3 Authority Key Identifier:
keyid:EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/2Zslfn__QIhx6OX48_NKfIqrzSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.148.0/23
Signature Algorithm: sha256WithRSAEncryption
85:2a:25:93:b4:31:63:9d:3b:64:81:d6:7b:96:d0:c8:95:10:
6e:25:6e:a1:c2:4b:39:02:68:60:cd:96:fe:39:cc:c6:c0:60:
58:99:58:64:5a:3b:ec:21:98:d0:8f:df:ae:69:d4:4b:e4:15:
83:21:47:17:c1:c6:b1:c0:37:a3:5e:33:30:68:27:00:54:72:
41:d9:fd:87:c3:7c:b8:2e:b6:64:10:64:ff:5b:bb:23:9d:81:
33:f1:0c:8b:9e:09:f8:96:22:db:e4:60:ab:0e:25:13:8d:6c:
ca:ee:60:9a:13:29:b5:26:52:bc:8a:af:6e:f0:48:ee:c1:56:
59:34:00:6e:58:95:25:b9:75:45:9b:e8:75:ef:c6:a5:52:6f:
b2:61:73:60:3f:bc:84:93:6f:3e:ed:0c:17:2a:df:d9:a9:f5:
5c:c1:7c:02:33:13:44:a7:50:c0:9f:c7:90:e9:73:68:1f:e6:
39:1e:4f:12:fd:9b:75:e1:a0:bc:3c:65:3e:46:3e:d4:2c:97:
0c:29:2b:fc:84:1f:ea:7a:7b:2e:68:83:c7:90:3c:9a:64:8c:
bd:22:6e:b6:2f:9c:27:b6:2d:5c:fb:61:a9:e2:15:7a:b0:94:
2d:57:50:21:24:e8:29:c7:ec:75:54:bf:79:a5:ee:b6:3b:5f:
fb:47:09:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:50 2026 by rpki-client