Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2g_12O9IZkO-NEmFAv-tFZkbBVE.roa
File: 2g_12O9IZkO-NEmFAv-tFZkbBVE.roa (raw, json)
Hash identifier: mnCl8FvKFH+DFBTvqPq1XeU4kxUoINZiKTWs6aoOaj0=
Subject key identifier: DA:0F:F5:D8:EF:48:66:43:BE:34:49:85:02:FF:AD:15:99:1B:05:51
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A13AECB3257006DDA12558911C051A2897
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2g_12O9IZkO-NEmFAv-tFZkbBVE.roa
Signing time: Wed 14 Oct 2026 14:59:13 +0000
ROA not before: Wed 14 Oct 2026 14:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219207
IP address blocks: 2a0e:4001:9800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ec:b3:25:70:06:dd:a1:25:58:91:1c:05:1a:28:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 14 14:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da0ff5d8ef486643be34498502ffad15991b0551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:ee:f0:e4:e3:69:7c:3a:64:97:7c:11:2a:
fb:cc:62:b5:e4:b6:b4:dd:1a:03:ca:b6:3f:08:49:
cb:19:46:20:34:fe:0a:5f:83:32:9b:1f:14:bb:8e:
55:59:0f:d6:6d:ab:fb:07:c3:80:65:4d:8d:4b:36:
98:0b:d8:18:ac:fd:b1:3b:9a:87:f6:7a:33:1a:38:
e6:25:51:fe:39:07:a1:af:3b:24:6f:a4:a3:9f:82:
1a:e8:af:91:71:aa:ab:12:9d:f9:00:14:22:a6:a8:
53:0c:d8:f0:36:59:69:15:c6:49:1f:66:5d:9c:bd:
46:1c:29:d6:58:51:14:70:5b:8b:5d:f3:8a:3a:8b:
54:03:91:0c:5a:ae:39:34:9a:28:6c:c8:0c:d4:85:
5e:f3:32:0c:8c:3a:3b:f7:77:67:c3:53:50:cb:14:
ee:e0:42:6e:e5:0d:1a:79:bc:35:af:d4:9a:26:fc:
54:b0:4f:57:63:14:9d:0d:73:67:09:42:f4:c9:be:
4f:cd:b5:e8:19:74:a2:ac:24:a0:db:f0:cf:29:fa:
7e:f5:b6:87:37:15:4b:b8:2e:f7:19:a3:3a:30:7f:
8d:b0:73:5e:d6:e4:89:36:f4:a2:dd:fa:b9:33:b2:
61:b7:a2:45:a7:2f:1b:27:43:f7:64:75:db:a5:58:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0F:F5:D8:EF:48:66:43:BE:34:49:85:02:FF:AD:15:99:1B:05:51
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2g_12O9IZkO-NEmFAv-tFZkbBVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:9800::/37
Signature Algorithm: sha256WithRSAEncryption
48:1d:48:f3:d0:74:7b:cf:b4:12:6a:17:2b:f9:d6:e1:8b:5f:
11:3d:4a:6f:74:51:af:52:70:8d:d2:36:fc:1a:98:b3:bf:ef:
a7:61:b7:81:10:0a:df:83:1b:3d:bc:4e:42:44:24:14:7f:7e:
9c:90:1e:7f:11:0e:6f:fe:23:03:f0:de:b9:f0:f2:5e:e8:eb:
86:f5:dc:5a:87:dd:18:b8:ca:cc:86:d9:ad:0c:dd:71:b4:84:
29:4b:e2:81:2b:df:f2:1e:65:cc:67:0d:be:85:97:23:8e:b2:
1d:90:0e:37:5b:5d:be:74:9d:1b:3a:8d:a5:9c:c5:3e:a0:f3:
08:e8:15:ee:29:a3:ba:2f:34:d9:41:b9:ca:34:7e:66:8d:19:
d6:05:8c:9e:ef:0f:0f:e2:76:4f:b7:f2:dc:76:f8:98:74:d7:
71:a7:2a:cf:82:e3:86:6f:d1:fe:9e:b9:67:26:27:77:58:7f:
3b:ce:45:04:63:6c:52:19:2d:e1:2d:61:0e:57:9f:b9:44:ba:
39:28:3c:68:01:e8:71:26:8c:c5:58:77:77:5d:94:fc:d2:87:
bb:d4:bf:b9:a8:2b:1f:4e:af:c6:89:30:3a:5e:82:ae:ef:9d:
cd:a6:c2:f5:78:29:a6:79:3e:af:4a:c0:7c:ba:22:de:8c:16:
1c:ad:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:32 2026 by rpki-client