Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/2oUCAmQ_JBLLzK9lNtPeqSU_xMk.roa
File: 2oUCAmQ_JBLLzK9lNtPeqSU_xMk.roa (raw, json)
Hash identifier: Y9xlUpgRZjeRhxT7Uz6aik8QvK6gVshg+R8VfpRfP+A=
Subject key identifier: DA:85:02:02:64:3F:24:12:CB:CC:AF:65:36:D3:DE:A9:25:3F:C4:C9
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A0F1F8A7C107F76416B76F9E0956AD74D1
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/2oUCAmQ_JBLLzK9lNtPeqSU_xMk.roa
Signing time: Wed 30 Sep 2026 10:59:59 +0000
ROA not before: Wed 30 Sep 2026 10:59:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219521
IP address blocks: 185.165.77.0/24 maxlen: 24
2a14:db80:6::/48 maxlen: 48
2a14:db80:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:f8:a7:c1:07:f7:64:16:b7:6f:9e:09:56:ad:74:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Sep 30 10:59:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da850202643f2412cbccaf6536d3dea9253fc4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:b5:5e:1a:34:ff:60:ff:5d:b4:14:a4:49:
37:44:61:ee:43:c8:10:84:54:6f:89:c6:46:81:5e:
33:81:dd:dd:fa:5a:c8:88:bd:ca:3c:75:08:64:c0:
69:5f:40:71:87:8a:05:b3:20:fa:c8:1f:33:51:bd:
0f:7d:18:94:e9:d5:bd:75:f0:e9:95:f9:79:77:4f:
99:81:3c:af:6c:f9:0c:42:d3:97:9a:d7:0b:e6:2c:
f2:9c:6c:6d:fd:59:1e:62:7d:6c:9d:b6:86:3a:44:
51:f0:8f:ad:5d:2b:f8:16:4a:a0:ed:9d:fd:5a:c6:
e1:60:90:14:c7:d1:bb:2f:d9:b7:a1:0d:26:da:d7:
c5:0e:c7:07:b1:c8:84:26:3a:0c:cd:99:18:58:1b:
64:17:8a:c1:05:b4:dd:9a:dc:52:61:11:4d:1f:da:
6e:ef:a4:b3:c5:8a:8f:88:58:6a:82:95:27:30:5d:
ca:d8:38:3f:4b:c7:fc:c0:32:ba:ca:f1:e1:f5:3a:
b0:f6:d6:93:b0:00:9d:e9:7c:a9:f3:2f:48:b4:2f:
45:38:6a:d9:b3:f5:7a:44:36:6f:52:09:97:7a:90:
df:66:dc:c7:14:e0:52:8b:62:da:6f:7f:85:cf:ff:
25:4c:bb:b1:de:3a:b7:10:77:a7:34:a9:3c:04:71:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:85:02:02:64:3F:24:12:CB:CC:AF:65:36:D3:DE:A9:25:3F:C4:C9
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/2oUCAmQ_JBLLzK9lNtPeqSU_xMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.77.0/24
IPv6:
2a14:db80:6::/48
2a14:db80:16::/48
Signature Algorithm: sha256WithRSAEncryption
58:9d:17:8d:48:5c:e4:fc:6e:76:38:5d:d8:95:c7:d9:f8:52:
2e:ed:02:08:87:8b:5d:20:e9:7b:14:fb:81:d9:8c:f8:bd:63:
c5:68:dc:b4:87:bb:cb:df:5a:9e:b9:15:fd:55:a1:7e:f8:5e:
a8:03:18:a1:cd:a5:5d:db:06:de:77:2a:0b:2d:00:89:05:bb:
fc:74:39:0a:d5:6a:85:c0:c5:a5:9c:14:8f:ed:2f:cf:6e:a0:
b9:69:86:0b:6d:7c:94:df:a9:c5:80:f3:6b:e6:81:f9:c1:0a:
ac:59:1f:8d:ea:17:b3:cc:4f:6a:7e:97:3f:ca:4d:9f:63:f7:
f9:81:7d:e9:4b:a3:e8:57:37:83:c1:7e:ea:ce:f2:d6:89:80:
b5:cc:f8:5b:0f:92:64:af:23:85:7a:fc:c0:b3:e2:8d:cd:b2:
79:fc:01:52:83:74:37:da:b0:8f:50:cd:4f:a1:5f:08:d5:75:
da:2e:ab:e4:1c:5e:b8:78:42:f1:03:7b:be:b8:84:a2:00:f4:
f3:ab:cb:79:13:79:4f:fe:2e:5d:99:f9:04:e4:19:cd:e4:e9:
af:98:8c:6f:ab:86:e7:ce:bf:f1:b0:7b:5d:ee:d2:31:1f:30:
a7:73:4e:d1:c5:f3:16:b9:cf:38:18:0a:53:e1:25:26:f3:c4:
7a:f7:16:2a
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAaDx+KfBB/dkFrdvnglWrXTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx
ZDMzMjEwHhcNMjYwOTMwMTA1OTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTg1MDIwMjY0M2YyNDEyY2JjY2FmNjUzNmQzZGVhOTI1M2ZjNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3G1Xho0/2D/XbQUpEk3RGHuQ8gQ
hFRvicZGgV4zgd3d+lrIiL3KPHUIZMBpX0Bxh4oFsyD6yB8zUb0PfRiU6dW9dfDp
lfl5d0+ZgTyvbPkMQtOXmtcL5izynGxt/VkeYn1snbaGOkRR8I+tXSv4Fkqg7Z39
WsbhYJAUx9G7L9m3oQ0m2tfFDscHsciEJjoMzZkYWBtkF4rBBbTdmtxSYRFNH9pu
76SzxYqPiFhqgpUnMF3K2Dg/S8f8wDK6yvHh9Tqw9taTsACd6Xyp8y9ItC9FOGrZ
s/V6RDZvUgmXepDfZtzHFOBSi2Lab3+Fz/8lTLux3jq3EHenNKk8BHHt9wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFNqFAgJkPyQSy8yvZTbT3qklP8TJMB8GA1UdIwQY
MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt
NDNkZjQ3ZDVhMWU3LzEvMm9VQ0FtUV9KQkxMeks5bE50UGVxU1VfeE1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3
LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuaVNMBgE
AgACMBIDBwAqFNuAAAYDBwAqFNuAABYwDQYJKoZIhvcNAQELBQADggEBAFidF41I
XOT8bnY4XdiVx9n4Ui7tAgiHi10g6XsU+4HZjPi9Y8Vo3LSHu8vfWp65Ff1VoX74
XqgDGKHNpV3bBt53KgstAIkFu/x0OQrVaoXAxaWcFI/tL89uoLlphgttfJTfqcWA
82vmgfnBCqxZH43qF7PMT2p+lz/KTZ9j9/mBfelLo+hXN4PBfurO8taJgLXM+FsP
kmSvI4V6/MCz4o3Nsnn8AVKDdDfasI9QzU+hXwjVddouq+QcXrh4QvEDe764hKIA
9POry3kTeU/+Ll2Z+QTkGc3k6a+YjG+rhufOv/Gwe13u0jEfMKdzTtHF8xa5zzgY
ClPhJSbzxHr3Fio=
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:37:12 2026 by rpki-client