Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/2PolrAOhRQsrhDYmFoZ8Hf2dqko.roa
File: 2PolrAOhRQsrhDYmFoZ8Hf2dqko.roa (raw, json)
Hash identifier: Xq71zocml0mTHu8vbp5x/HrEbiwcbUVeA+bdWsQ2Clc=
Subject key identifier: D8:FA:25:AC:03:A1:45:0B:2B:84:36:26:16:86:7C:1D:FD:9D:AA:4A
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 019F7226D134BE792E916E2D7C8C4D59FDA5
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/2PolrAOhRQsrhDYmFoZ8Hf2dqko.roa
Signing time: Fri 17 Jul 2026 22:16:14 +0000
ROA not before: Fri 17 Jul 2026 22:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 217.78.40.0/21 maxlen: 24
217.118.208.0/21 maxlen: 24
217.118.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:26:d1:34:be:79:2e:91:6e:2d:7c:8c:4d:59:fd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Jul 17 22:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8fa25ac03a1450b2b84362616867c1dfd9daa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:68:b5:d6:a5:86:1f:7e:e4:ba:fa:60:87:
b9:ec:55:4b:bd:f6:8d:3e:15:65:e1:9a:97:ef:24:
9e:16:f1:cf:de:ec:dd:4f:1c:01:0d:31:03:56:de:
88:7b:b2:32:ea:78:5d:d0:22:13:85:b5:16:00:a1:
17:4b:96:9e:79:ab:68:bd:56:61:72:82:cb:79:5b:
df:f0:41:7a:1e:07:cb:a5:9a:8a:95:72:23:ca:58:
73:29:0a:ec:7c:2f:37:f7:91:1f:de:42:6f:d7:86:
72:6a:39:55:a4:32:3c:f9:2f:a7:b9:e4:46:a4:76:
f8:8a:e0:da:6f:e3:2e:68:bf:38:8c:0c:f0:51:25:
49:0e:fe:2c:c4:37:0b:7e:76:0d:37:34:56:37:34:
75:da:8b:db:77:6d:5e:f8:e2:f3:49:8f:4b:a2:e4:
88:ce:bd:c0:c8:25:0c:68:d6:ec:7b:29:6a:9e:d5:
e6:b5:37:5e:be:c8:e2:72:db:cf:94:e1:f0:02:19:
6e:15:ff:86:3f:1f:34:8e:0c:bc:e5:0a:c5:24:c7:
34:4f:df:f8:f6:28:71:4e:cd:98:26:1e:76:5d:69:
86:b9:91:b5:60:ce:e8:26:b5:5d:70:8c:f7:aa:b9:
a4:f2:c2:09:7b:d1:c8:3e:4e:60:21:b2:c4:34:9f:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FA:25:AC:03:A1:45:0B:2B:84:36:26:16:86:7C:1D:FD:9D:AA:4A
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/2PolrAOhRQsrhDYmFoZ8Hf2dqko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.78.40.0/21
217.118.208.0/20
Signature Algorithm: sha256WithRSAEncryption
34:7a:d7:0f:4e:cc:76:ad:f2:8d:02:a8:a9:31:84:f6:1b:bc:
61:dc:15:df:b4:ec:75:72:53:da:98:29:a8:9a:83:5c:7f:23:
81:17:9f:9c:62:53:9a:7b:31:af:bd:a0:28:f7:1a:49:55:f1:
38:33:cf:68:ca:66:7e:56:6a:17:13:5c:a9:d3:c3:70:b4:a1:
15:74:25:66:4c:f6:7b:f3:92:ef:ba:f0:3c:5e:4f:67:6c:1c:
2a:c7:70:08:50:52:75:e7:b0:76:c8:04:6b:94:a3:82:1e:6b:
91:d8:b0:b0:49:2c:e3:e4:4a:df:4c:da:61:64:82:6d:72:a7:
82:03:19:8a:ae:a7:aa:93:e2:7c:46:41:b2:26:6e:54:0f:97:
47:60:b9:02:29:09:fc:95:b8:95:95:f7:3a:d4:2e:34:b2:8b:
52:03:81:e2:68:dc:c9:e2:89:d2:a8:27:49:08:e9:92:33:e0:
c3:b4:51:fb:c7:fb:3e:94:2f:90:70:ff:1e:73:40:a3:e5:c6:
a9:06:e0:7a:97:e7:20:81:04:2d:4a:e6:2e:f1:70:ba:41:25:
02:99:5f:26:82:29:19:7b:19:8c:8a:e7:33:53:19:c3:57:bd:
be:66:8c:e2:31:e6:8c:74:78:e8:49:40:82:d5:2c:47:82:37:
18:db:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:09 2026 by rpki-client