Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2nQhYKzOxcf57XyGjycFLWK4YK4.roa
File: 2nQhYKzOxcf57XyGjycFLWK4YK4.roa (raw, json)
Hash identifier: I+LZDgg7B8/TGgHODulWqSCkV4tj5/dYK2rrF0gtLsI=
Subject key identifier: DA:74:21:60:AC:CE:C5:C7:F9:ED:7C:86:8F:27:05:2D:62:B8:60:AE
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019FF534ACD8E32D21F3333C614FAD735D83
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2nQhYKzOxcf57XyGjycFLWK4YK4.roa
Signing time: Wed 12 Aug 2026 09:01:37 +0000
ROA not before: Wed 12 Aug 2026 09:01:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:4001:100::/40 maxlen: 128
2a10:2ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:34:ac:d8:e3:2d:21:f3:33:3c:61:4f:ad:73:5d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 12 09:01:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da742160accec5c7f9ed7c868f27052d62b860ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8b:2f:27:8a:63:15:9d:e6:b8:3c:f5:30:8e:
e1:bc:38:31:97:c6:c9:0a:5c:51:71:3a:f3:2f:34:
43:e5:43:1c:94:1b:0e:4d:1e:05:0a:e3:c9:c4:ab:
02:0f:65:d3:0c:5f:85:cd:cd:03:f1:38:ae:d0:ec:
94:dc:cb:5b:e7:49:99:0d:9b:03:40:6e:9c:0f:20:
2e:75:46:17:5e:ae:d7:63:d2:96:7f:d0:3b:6d:4e:
ab:96:22:e2:96:9f:56:5e:52:20:1c:ac:9f:8a:02:
8d:5f:44:51:ba:32:95:b6:0a:32:23:6f:ac:43:4d:
9d:16:ea:46:d7:96:4e:36:12:0d:09:b2:02:bd:44:
e6:a1:6a:a4:3f:78:8f:a2:14:2d:e9:a9:1b:0f:cb:
07:6b:37:d9:6a:64:43:f4:69:74:1c:52:60:e6:23:
3e:b7:23:10:60:f6:77:0d:06:75:2b:57:d3:1f:bc:
47:c1:3d:6b:10:58:2d:a3:7d:1a:8a:e2:27:86:3e:
5c:c7:e3:9d:f8:6b:4a:fe:37:94:99:b7:f3:4a:88:
3c:bb:ee:f8:b9:de:e3:cb:07:92:42:05:f9:fd:1e:
71:11:f9:ac:62:28:25:31:94:f7:9d:43:06:76:23:
c5:0b:f4:a2:81:25:89:88:f3:12:81:09:b4:7b:dd:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:74:21:60:AC:CE:C5:C7:F9:ED:7C:86:8F:27:05:2D:62:B8:60:AE
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/2nQhYKzOxcf57XyGjycFLWK4YK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:100::/40
2a10:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:b1:a3:44:4d:f0:f1:46:a6:92:26:10:76:80:da:70:a8:82:
2a:03:6e:d5:fc:9e:08:20:5a:4c:38:ba:19:24:4b:2f:a9:4d:
44:31:08:29:7e:ce:ce:cc:77:0c:cc:b6:78:f9:4a:5d:96:ff:
7a:ed:7a:19:1e:8f:80:7d:41:e6:df:76:44:37:17:61:4e:bc:
f1:60:c5:1d:da:9f:81:6f:3f:ce:3c:af:47:c0:36:4f:bb:91:
d4:6b:21:8c:14:d5:32:5a:5f:a7:c6:0a:fd:bc:f4:b8:45:e4:
9a:ee:15:cb:24:ff:34:a8:86:39:e6:09:c1:93:e0:1d:75:5b:
5f:d3:c5:1a:71:4a:b0:64:65:e9:4e:30:b0:12:13:e4:23:32:
61:ba:f0:d4:7a:fc:6c:a9:55:9d:f4:98:4f:d6:a6:c1:f5:80:
d8:cf:14:37:24:04:be:0e:04:e5:f1:fb:86:49:aa:c2:7d:ef:
8c:e7:2d:c2:9a:9a:cb:ee:61:8c:ae:9a:bd:5f:24:ea:9d:13:
8c:d4:8a:44:c4:65:53:43:ad:84:72:0e:98:d7:c2:af:01:90:
45:8f:f9:02:61:a6:24:54:01:cc:c6:e3:84:d2:9a:2c:c0:96:
92:ec:7e:12:47:d2:b6:5b:a9:77:85:c7:f8:79:fc:61:ad:56:
e5:7e:29:e7
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAZ/1NKzY4y0h8zM8YU+tc12DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYwODEyMDkwMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTc0MjE2MGFjY2VjNWM3ZjllZDdjODY4ZjI3MDUyZDYyYjg2MGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYsvJ4pjFZ3muDz1MI7hvDgxl8bJ
ClxRcTrzLzRD5UMclBsOTR4FCuPJxKsCD2XTDF+Fzc0D8Tiu0OyU3Mtb50mZDZsD
QG6cDyAudUYXXq7XY9KWf9A7bU6rliLilp9WXlIgHKyfigKNX0RRujKVtgoyI2+s
Q02dFupG15ZONhINCbICvUTmoWqkP3iPohQt6akbD8sHazfZamRD9Gl0HFJg5iM+
tyMQYPZ3DQZ1K1fTH7xHwT1rEFgto30aiuInhj5cx+Od+GtK/jeUmbfzSog8u+74
ud7jyweSQgX5/R5xEfmsYiglMZT3nUMGdiPFC/SigSWJiPMSgQm0e91vIwIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFNp0IWCszsXH+e18ho8nBS1iuGCuMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvMm5RaFlLek94Y2Y1N1h5R2p5Y0ZMV0s0WUs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwYAKg5AAQED
BQMqEC7AMA0GCSqGSIb3DQEBCwUAA4IBAQAbsaNETfDxRqaSJhB2gNpwqIIqA27V
/J4IIFpMOLoZJEsvqU1EMQgpfs7OzHcMzLZ4+Updlv967XoZHo+AfUHm33ZENxdh
TrzxYMUd2p+Bbz/OPK9HwDZPu5HUayGMFNUyWl+nxgr9vPS4ReSa7hXLJP80qIY5
5gnBk+AddVtf08UacUqwZGXpTjCwEhPkIzJhuvDUevxsqVWd9JhP1qbB9YDYzxQ3
JAS+DgTl8fuGSarCfe+M5y3CmprL7mGMrpq9XyTqnROM1IpExGVTQ62Ecg6Y18Kv
AZBFj/kCYaYkVAHMxuOE0poswJaS7H4SR9K2W6l3hcf4efxhrVblfinn
-----END CERTIFICATE-----
Generated at Fri Aug 21 21:43:49 2026 by rpki-client