Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/2filITtLre0aS9h7s_J0lG8o9ac.roa
File: 2filITtLre0aS9h7s_J0lG8o9ac.roa (raw, json)
Hash identifier: tB33DYQNO/bXVdc5HAElPMFace/IjhKVV8TRM5FqCbw=
Subject key identifier: D9:F8:A5:21:3B:4B:AD:ED:1A:4B:D8:7B:B3:F2:74:94:6F:28:F5:A7
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 01A01990AF5DEEA7D46A8D908A0FD5FEF847
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/2filITtLre0aS9h7s_J0lG8o9ac.roa
Signing time: Wed 19 Aug 2026 10:28:27 +0000
ROA not before: Wed 19 Aug 2026 10:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8648
IP address blocks: 79.142.189.0/24 maxlen: 24
79.142.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:90:af:5d:ee:a7:d4:6a:8d:90:8a:0f:d5:fe:f8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Aug 19 10:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9f8a5213b4baded1a4bd87bb3f274946f28f5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:84:70:1c:95:21:86:6f:45:0c:6a:5a:e2:
12:41:a5:5e:99:41:04:f6:13:37:a2:b5:af:81:4c:
77:b0:64:ed:c4:f6:cd:62:03:99:48:f7:ac:ad:30:
d6:bf:df:bf:fb:82:f5:23:e4:70:db:be:04:ca:09:
68:59:70:9a:0c:a0:6c:24:f3:5a:a2:3b:cf:bf:25:
80:ff:38:4e:fc:ad:e0:78:88:bd:2a:0f:23:9d:58:
7d:b2:78:39:31:87:8b:94:79:28:bd:76:5a:16:f3:
da:ae:ba:31:bd:71:9b:8d:63:5a:82:33:97:df:82:
a4:3b:21:7d:30:c6:16:51:2b:2d:49:f8:d5:11:19:
d5:20:eb:53:f8:d5:eb:72:93:07:87:a5:02:2f:03:
b1:b7:62:52:c7:45:8e:e3:74:91:2d:83:73:ba:bc:
a9:fc:48:9b:5a:81:87:c9:44:fa:3c:d4:68:ff:d4:
47:84:f4:3c:5e:fa:2e:23:c3:49:1b:99:75:90:6e:
08:7e:45:13:6c:7a:9d:a0:f2:a6:17:1a:1b:a8:3b:
5f:3f:5b:6c:7f:f7:33:4c:12:78:78:a5:3c:12:82:
34:a3:6a:05:9b:40:c0:70:b4:52:78:f4:b1:25:11:
32:b7:09:30:91:e6:a3:cd:b0:b7:d4:b4:2e:00:2f:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:A5:21:3B:4B:AD:ED:1A:4B:D8:7B:B3:F2:74:94:6F:28:F5:A7
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/2filITtLre0aS9h7s_J0lG8o9ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.189.0-79.142.190.255
Signature Algorithm: sha256WithRSAEncryption
42:ed:b4:6f:eb:32:b3:fc:e1:11:40:48:ce:06:6e:24:59:73:
f0:7b:a8:21:db:b1:1f:49:1a:ba:06:a8:d5:d9:07:f5:ce:30:
0a:54:e7:09:71:6d:5c:eb:4a:0f:58:b4:b4:05:06:df:29:cc:
ff:12:b5:eb:92:f7:d3:ad:2d:f2:4d:5f:6d:1c:98:07:92:9e:
e3:4a:d4:a0:20:3d:6b:13:a2:6e:dd:5d:d9:48:53:79:db:8d:
23:1e:48:d9:87:37:be:8b:af:83:48:4e:86:00:e7:2e:57:86:
4e:d4:a0:31:e3:30:78:33:64:fc:21:1b:84:23:68:61:bb:c6:
43:a4:00:04:cc:db:47:23:18:a9:22:2c:46:21:c3:a5:df:42:
41:70:ba:d8:31:1d:2d:ff:5d:3e:47:09:b3:e7:cf:22:78:89:
84:b4:02:8b:09:27:f7:e3:6e:5e:2f:95:84:79:66:af:6f:17:
9c:2b:38:88:86:ea:d9:6a:15:ef:0b:7e:5c:02:10:d5:8c:b8:
a1:cd:5e:c2:a6:4b:c2:55:55:2e:3d:5c:d6:7a:99:97:79:5b:
5f:b5:2f:40:f1:52:17:99:e1:b4:96:3a:5b:24:a9:53:66:e8:
5d:33:27:2d:40:ed:1c:d9:57:81:c1:3c:a2:f6:47:ef:46:11:
72:d0:ca:d7
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaAZkK9d7qfUao2Qig/V/vhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDc5OWM2N2MwODU0N2Q4MGJiMzVkMDJkYWU1MDVkNWE2
NWRjNWIwHhcNMjYwODE5MTAyODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWY4YTUyMTNiNGJhZGVkMWE0YmQ4N2JiM2YyNzQ5NDZmMjhmNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGeEcByVIYZvRQxqWuISQaVemUEE
9hM3orWvgUx3sGTtxPbNYgOZSPesrTDWv9+/+4L1I+Rw274EygloWXCaDKBsJPNa
ojvPvyWA/zhO/K3geIi9Kg8jnVh9sng5MYeLlHkovXZaFvParroxvXGbjWNagjOX
34KkOyF9MMYWUSstSfjVERnVIOtT+NXrcpMHh6UCLwOxt2JSx0WO43SRLYNzuryp
/EibWoGHyUT6PNRo/9RHhPQ8XvouI8NJG5l1kG4IfkUTbHqdoPKmFxobqDtfP1ts
f/czTBJ4eKU8EoI0o2oFm0DAcLRSePSxJREytwkwkeajzbC31LQuAC+F/wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNn4pSE7S63tGkvYe7PydJRvKPWnMB8GA1UdIwQY
MBaAFGFHmcZ8CFR9gLs10C2uUF1aZdxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQt
MWRjMGI4NGExYzdlLzEvMmZpbElUdExyZTBhUzloN3NfSjBsRzhvOWFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQtMWRjMGI4NGExYzdl
LzEvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABPjr0D
BABPjr4wDQYJKoZIhvcNAQELBQADggEBAELttG/rMrP84RFASM4GbiRZc/B7qCHb
sR9JGroGqNXZB/XOMApU5wlxbVzrSg9YtLQFBt8pzP8SteuS99OtLfJNX20cmAeS
nuNK1KAgPWsTom7dXdlIU3nbjSMeSNmHN76Lr4NIToYA5y5Xhk7UoDHjMHgzZPwh
G4QjaGG7xkOkAATM20cjGKkiLEYhw6XfQkFwutgxHS3/XT5HCbPnzyJ4iYS0AosJ
J/fjbl4vlYR5Zq9vF5wrOIiG6tlqFe8LflwCENWMuKHNXsKmS8JVVS49XNZ6mZd5
W1+1L0DxUheZ4bSWOlskqVNm6F0zJy1A7RzZV4HBPKL2R+9GEXLQytc=
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:56 2026 by rpki-client