Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/2YjZAZBfMxJaN9S4Gah2k03_BXk.roa
File: 2YjZAZBfMxJaN9S4Gah2k03_BXk.roa (raw, json)
Hash identifier: tyXZaahKZgI0mC/ORFeGBJ5CFSoh7zxMGdcgf4Ml6OY=
Subject key identifier: D9:88:D9:01:90:5F:33:12:5A:37:D4:B8:19:A8:76:93:4D:FF:05:79
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019EEED0AF94558D9219CCA9F7344E231A3D
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/2YjZAZBfMxJaN9S4Gah2k03_BXk.roa
Signing time: Mon 22 Jun 2026 10:11:54 +0000
ROA not before: Mon 22 Jun 2026 10:11:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 5.172.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:d0:af:94:55:8d:92:19:cc:a9:f7:34:4e:23:1a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 22 10:11:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d988d901905f33125a37d4b819a876934dff0579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:4d:e3:63:9e:4a:ec:9d:3b:9b:d8:b6:fc:42:
c6:86:0e:df:92:c9:5f:ea:eb:43:94:ac:bb:44:27:
c2:a9:6b:72:6b:2b:a8:9f:ee:3c:b8:e2:c4:0f:54:
e3:26:bc:82:80:fe:86:0f:b3:12:e2:53:70:43:b1:
53:3d:4b:98:24:7c:6b:98:40:f9:f4:15:c9:c2:d5:
0f:6b:d1:04:af:e7:2a:f6:62:37:95:7b:73:11:7d:
bd:1a:60:7c:00:4b:c9:37:db:ad:70:c0:c8:aa:62:
de:df:34:20:45:82:6f:50:2a:2f:0c:25:6b:0f:91:
4a:9b:08:2a:6a:df:6f:10:b6:52:21:28:4c:b2:23:
85:4b:e1:84:8d:cc:47:0f:d8:fb:c9:8c:21:c8:c6:
54:43:a2:07:04:0d:6a:59:00:7e:13:a7:8f:0d:2d:
1e:c8:e9:91:c4:26:ee:1f:cc:77:5b:66:66:e7:a0:
c1:8c:e9:8c:da:29:91:7b:43:a8:9c:37:eb:42:1a:
b4:23:11:5f:52:e9:4f:d0:96:a3:65:f1:ac:f8:d4:
08:12:2f:18:4e:4c:25:75:86:c0:b3:79:5c:fe:51:
fd:d6:c8:02:dc:b6:11:31:a4:06:54:be:ea:b6:c1:
91:5a:e8:4e:15:7f:19:b8:86:27:4a:0b:51:53:ef:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:88:D9:01:90:5F:33:12:5A:37:D4:B8:19:A8:76:93:4D:FF:05:79
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/2YjZAZBfMxJaN9S4Gah2k03_BXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5c:ae:be:6d:cf:8d:6f:de:be:c1:f6:89:e3:41:c8:79:bb:
79:b1:ef:fe:d8:8e:6e:1f:0e:8e:11:68:4b:63:d4:49:52:8a:
80:09:be:04:d3:1e:92:76:36:a1:b9:a7:c8:28:7a:16:1e:e2:
fd:ba:cf:73:bc:08:74:e9:2f:e3:b4:38:58:6e:db:3c:23:db:
69:5a:fa:f0:58:81:c2:b8:d0:4a:4d:c8:32:f2:e7:f4:3d:00:
59:80:d7:93:df:4b:d1:ab:3c:4b:34:88:09:e3:5a:90:cd:33:
84:85:6f:42:a0:cb:82:4a:be:fd:51:61:a5:2c:a5:0e:bb:76:
c0:4e:b4:c0:78:73:64:da:aa:1e:6b:bb:5e:79:3d:d5:84:7c:
7d:76:a3:5f:30:9d:e6:74:ef:fe:59:5d:30:3f:8a:13:16:c3:
d1:06:23:9b:46:01:d6:db:f2:6f:0f:de:48:11:38:24:ca:6c:
3f:8a:74:bd:54:8c:ba:86:2b:ef:d0:5f:67:bf:f0:df:df:5b:
cd:d1:77:1a:69:9b:ae:bd:e9:c1:c7:3d:3e:8c:1d:24:d7:28:
a9:91:c1:81:10:80:c0:29:37:2f:69:3f:0e:81:79:ab:fc:f7:
ee:8e:57:fa:7b:06:07:18:62:34:fb:df:4d:a9:3f:59:a6:39:
67:58:dd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:28:08 2026 by rpki-client