Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/2pxyRznKvAboLyDSRY5V9DkFgro.roa
File: 2pxyRznKvAboLyDSRY5V9DkFgro.roa (raw, json)
Hash identifier: WoYHz9zhv/T6GpS58bm/XhcMRq+CFzhIAVEesETjxDA=
Subject key identifier: DA:9C:72:47:39:CA:BC:06:E8:2F:20:D2:45:8E:55:F4:39:05:82:BA
Certificate issuer: /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial: 019FB774884927F144C4653C1918390B2D43
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/2pxyRznKvAboLyDSRY5V9DkFgro.roa
Signing time: Fri 31 Jul 2026 09:14:55 +0000
ROA not before: Fri 31 Jul 2026 09:14:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2603
IP address blocks: 109.105.96.0/20 maxlen: 20
109.105.112.0/21 maxlen: 21
109.105.120.0/22 maxlen: 22
185.174.116.0/22 maxlen: 22
2001:948::/29 maxlen: 29
2001:948::/32 maxlen: 32
2001:948:feed::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:74:88:49:27:f1:44:c4:65:3c:19:18:39:0b:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Validity
Not Before: Jul 31 09:14:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da9c724739cabc06e82f20d2458e55f4390582ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:1a:ba:0c:28:d6:35:d9:30:d3:e8:09:4c:
a9:cc:76:41:2f:54:f0:05:9a:46:71:71:4a:25:d5:
4b:d0:51:cc:39:35:d6:61:5a:3f:d6:ec:1c:f4:27:
52:3b:a9:d5:40:91:1f:38:27:99:72:c8:44:19:4f:
de:88:5f:3c:51:65:72:e9:1e:9e:0e:23:4c:b2:45:
a4:ee:10:1e:01:f0:1b:08:a4:62:17:1e:46:d4:d3:
07:99:44:10:e2:74:95:d9:09:0d:e4:cf:17:49:e2:
d5:f8:64:80:d9:0b:53:72:40:8e:ef:7f:d7:93:ca:
fe:68:e0:b8:16:c2:c1:cd:6e:ed:e4:cd:3a:6d:fd:
ea:65:4b:04:c3:fe:b2:18:99:3c:c3:50:4f:3b:1c:
bc:2a:19:c9:c4:e0:9d:31:9d:b8:42:de:df:43:a7:
be:5f:38:d4:69:e8:4b:9d:03:37:1a:8c:8d:05:63:
c9:f6:07:59:45:13:04:3a:14:18:c8:0e:49:2a:32:
61:04:83:fd:ab:5d:bd:47:59:47:d0:9f:56:c7:44:
4a:e9:c6:71:b3:26:18:3c:2f:52:48:34:1c:ca:3b:
a4:27:69:22:ba:5c:b3:e9:37:d1:ea:6b:bb:e8:46:
1e:cf:b8:7f:3e:53:a9:11:8c:7e:da:3d:e4:8a:50:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9C:72:47:39:CA:BC:06:E8:2F:20:D2:45:8E:55:F4:39:05:82:BA
X509v3 Authority Key Identifier:
keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/2pxyRznKvAboLyDSRY5V9DkFgro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.96.0-109.105.123.255
185.174.116.0/22
IPv6:
2001:948::/29
Signature Algorithm: sha256WithRSAEncryption
75:30:1e:fe:8a:1e:c7:a9:b5:a3:2f:4c:24:3f:fe:63:9b:6d:
5d:60:df:71:fc:99:81:bf:5b:63:0c:f5:75:4b:e9:9c:6e:a5:
4c:ba:79:3d:e5:f1:e4:fe:9a:52:0e:74:81:83:3c:de:04:b7:
49:ac:d9:ce:0b:ff:83:8c:65:3b:25:a9:77:73:a1:a6:2d:d8:
89:a2:cd:8b:a8:4a:5b:5e:83:2b:f2:01:45:d7:47:89:63:13:
aa:93:fc:3f:35:3c:8a:18:70:45:39:d1:c7:c8:de:09:2d:ff:
bd:bb:a2:8e:ff:5e:c0:bb:04:3a:3d:0e:d7:39:36:40:d2:9b:
03:93:d5:da:88:77:2c:7e:a8:2d:24:19:6b:9c:d4:79:d5:5d:
4f:51:db:25:a9:d0:ff:e2:80:4b:c8:22:8c:30:05:34:10:6b:
57:dc:60:08:bc:9e:d2:03:5b:54:62:18:51:4f:6b:3d:89:38:
b2:0c:f8:ea:cf:f2:bc:68:7c:75:59:2f:31:72:c8:17:48:20:
54:db:eb:c5:7a:9e:46:97:fb:ef:1a:70:34:ec:4b:7d:bc:f5:
a3:25:23:24:90:ba:87:32:5f:80:dc:43:fa:e7:0a:f8:ed:f4:
87:c0:d3:08:77:34:0b:27:68:c3:46:3f:79:f1:89:9e:80:9f:
62:7a:2d:c9
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ+3dIhJJ/FExGU8GRg5Cy1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTZhZTYyNWQ5NTA2ZGY0YTNlNTc3YjI0YTg2ZmNlM2M3
M2E4ZjgwHhcNMjYwNzMxMDkxNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTljNzI0NzM5Y2FiYzA2ZTgyZjIwZDI0NThlNTVmNDM5MDU4MmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsEaugwo1jXZMNPoCUypzHZBL1Tw
BZpGcXFKJdVL0FHMOTXWYVo/1uwc9CdSO6nVQJEfOCeZcshEGU/eiF88UWVy6R6e
DiNMskWk7hAeAfAbCKRiFx5G1NMHmUQQ4nSV2QkN5M8XSeLV+GSA2QtTckCO73/X
k8r+aOC4FsLBzW7t5M06bf3qZUsEw/6yGJk8w1BPOxy8KhnJxOCdMZ24Qt7fQ6e+
XzjUaehLnQM3GoyNBWPJ9gdZRRMEOhQYyA5JKjJhBIP9q129R1lH0J9Wx0RK6cZx
syYYPC9SSDQcyjukJ2kiulyz6TfR6mu76EYez7h/PlOpEYx+2j3kilCSCQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFNqcckc5yrwG6C8g0kWOVfQ5BYK6MB8GA1UdIwQY
MBaAFNNWrmJdlQbfSj5XeySob848c6j4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYt
MmVhODdlNmVhMmEwLzEvMnB4eVJ6bkt2QWJvTHlEU1JZNVY5RGtGZ3JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYtMmVhODdlNmVhMmEw
LzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAVtaWAD
BAJtaXgDBAK5rnQwDQQCAAIwBwMFAyABCUgwDQYJKoZIhvcNAQELBQADggEBAHUw
Hv6KHseptaMvTCQ//mObbV1g33H8mYG/W2MM9XVL6ZxupUy6eT3l8eT+mlIOdIGD
PN4Et0ms2c4L/4OMZTslqXdzoaYt2ImizYuoSltegyvyAUXXR4ljE6qT/D81PIoY
cEU50cfI3gkt/727oo7/XsC7BDo9Dtc5NkDSmwOT1dqIdyx+qC0kGWuc1HnVXU9R
2yWp0P/igEvIIowwBTQQa1fcYAi8ntIDW1RiGFFPaz2JOLIM+OrP8rxofHVZLzFy
yBdIIFTb68V6nkaX++8acDTsS3289aMlIySQuocyX4DcQ/rnCvjt9IfA0wh3NAsn
aMNGP3nxiZ6An2J6Lck=
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:03:44 2026 by rpki-client