Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/N1GpxRLrHbj9OUsUJdB3bLcVzog.roa
File: N1GpxRLrHbj9OUsUJdB3bLcVzog.roa (raw, json)
Hash identifier: +L4uwL7ST5JHUpyXc8iOjOorGR92rsyFM2RVm5QvEGQ=
Subject key identifier: 37:51:A9:C5:12:EB:1D:B8:FD:39:4B:14:25:D0:77:6C:B7:15:CE:88
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A032DEF5FA4FD0B5F9344C283C0BB8C83C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/N1GpxRLrHbj9OUsUJdB3bLcVzog.roa
Signing time: Mon 24 Aug 2026 08:24:27 +0000
ROA not before: Mon 24 Aug 2026 08:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201497
IP address blocks: 2.57.152.0/22 maxlen: 22
2.59.204.0/22 maxlen: 22
45.150.44.0/22 maxlen: 22
171.22.52.0/22 maxlen: 22
194.50.184.0/23 maxlen: 23
194.50.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:de:f5:fa:4f:d0:b5:f9:34:4c:28:3c:0b:b8:c8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 24 08:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3751a9c512eb1db8fd394b1425d0776cb715ce88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:e7:3d:04:45:f9:68:e6:56:c3:8e:91:ae:34:
e0:22:80:83:0a:ea:b5:83:40:d6:cb:d2:25:89:c3:
4a:ef:a5:28:ba:7f:4b:77:ae:71:27:bc:21:84:a4:
f6:f9:b8:fc:18:8a:ae:8b:64:ea:8d:1c:83:12:9e:
0d:5c:f6:e1:7f:40:e2:f0:3b:ed:78:92:c1:af:7b:
d0:e0:39:a8:e7:a3:c4:f6:9f:17:b7:e2:c7:09:7e:
21:5d:f1:32:26:5d:1e:ee:a9:0e:1f:86:46:b9:f6:
92:15:67:f8:9b:89:2c:b8:2f:a1:cc:c2:a3:31:93:
23:b8:b4:58:f0:bf:43:a4:34:05:de:0e:aa:c9:7a:
b5:ab:05:eb:14:01:14:db:b0:d6:75:60:2a:b2:53:
f6:df:44:c5:bb:bc:ee:a1:37:df:45:21:e2:dc:1b:
f6:33:c9:0c:c3:d2:39:82:28:e7:27:42:09:c7:6b:
ec:49:14:18:1b:a4:42:2e:96:38:f2:6e:9e:36:9a:
9b:36:f6:c7:b8:f5:f3:89:d0:ef:6e:c3:81:f0:69:
f1:9d:ea:88:a1:7d:c4:b5:aa:f7:f4:bb:91:9b:07:
f2:6b:af:ee:62:60:c0:9f:38:41:13:8d:2f:17:0a:
40:a1:33:75:75:b9:d1:9c:6b:3b:e4:f5:7c:c8:2b:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:51:A9:C5:12:EB:1D:B8:FD:39:4B:14:25:D0:77:6C:B7:15:CE:88
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/N1GpxRLrHbj9OUsUJdB3bLcVzog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.152.0/22
2.59.204.0/22
45.150.44.0/22
171.22.52.0/22
194.50.184.0/23
194.50.188.0/23
Signature Algorithm: sha256WithRSAEncryption
42:33:78:0d:18:97:a7:39:54:aa:b0:40:9e:a6:9a:f6:c7:29:
4a:40:66:4f:f4:95:a2:9a:13:38:67:1b:85:99:27:f7:f7:40:
13:86:dd:62:ec:43:8a:b1:c5:73:8f:9a:c8:47:17:3a:5b:6c:
b7:37:ce:61:3d:98:90:84:9c:8f:84:71:23:fe:40:a0:7d:43:
e6:07:77:0b:d3:6d:5d:55:2f:b7:e4:b9:9e:55:84:bc:6d:4e:
6a:51:d9:50:61:0a:80:af:86:52:5b:60:fa:fd:4f:fe:e0:b3:
0a:b6:87:72:44:0c:ea:fd:7e:6d:dd:38:a5:62:2c:b6:a6:e0:
d5:27:a3:bb:0f:9e:26:3b:3a:ef:1b:73:36:74:89:45:97:6a:
63:dd:b9:58:f7:b7:91:e9:99:86:c0:a5:df:71:cf:62:48:15:
0c:8e:df:f3:6c:b0:90:8f:53:d3:d8:c5:ff:96:8f:5d:b2:02:
7d:62:f6:b9:f7:a6:a4:3a:11:28:f9:c4:e3:ca:15:e8:d8:aa:
eb:96:7f:b7:cf:65:64:14:d3:42:66:cd:3c:82:93:bd:ea:e2:
f9:6d:31:03:5e:3f:26:cb:9c:db:a6:a8:07:48:eb:eb:b4:58:
15:70:b1:85:69:49:de:00:be:b7:73:dd:a3:72:df:88:00:7c:
e9:06:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:15 2026 by rpki-client