Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2k0lGHLCM5v4k4J3rW6_jtBTQJc.roa
File: 2k0lGHLCM5v4k4J3rW6_jtBTQJc.roa (raw, json)
Hash identifier: ZBeYBoNm75oq2CHUD8kpE3BNYcLjxAVf1JRaJ6E0LvU=
Subject key identifier: DA:4D:25:18:72:C2:33:9B:F8:93:82:77:AD:6E:BF:8E:D0:53:40:97
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A154938FDBF6773C591B2352CEEE4D15AD
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2k0lGHLCM5v4k4J3rW6_jtBTQJc.roa
Signing time: Mon 19 Oct 2026 14:31:59 +0000
ROA not before: Mon 19 Oct 2026 14:31:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212219
IP address blocks: 109.236.51.0/24 maxlen: 24
193.35.154.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:93:8f:db:f6:77:3c:59:1b:23:52:ce:ee:4d:15:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 19 14:31:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da4d251872c2339bf8938277ad6ebf8ed0534097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:a0:b7:ec:a2:d9:9b:26:0f:09:26:a8:bf:
73:cf:19:a6:ce:af:2d:5d:d2:72:e3:95:2d:cc:2b:
50:ea:7b:67:d5:68:2f:49:73:08:3f:d4:eb:64:58:
5f:85:5d:ce:59:7b:90:41:84:dc:63:c1:ca:1d:9e:
4b:87:58:55:5a:eb:92:a1:21:23:6c:24:2d:f8:16:
d6:4a:7d:b5:3a:25:c5:3c:93:03:62:a5:8a:50:5a:
a2:47:c5:46:6b:ec:fd:54:e6:b1:37:ae:f7:4d:6e:
a8:69:6c:b5:f7:45:af:e7:15:c4:2f:c7:4d:31:ad:
fe:94:48:92:d0:6e:5a:ca:c1:87:62:9b:be:6b:1d:
2d:9b:8a:14:d0:a0:17:10:94:7f:f9:85:5c:1d:4e:
a9:1e:c8:fa:c7:f8:5c:22:10:ef:d9:97:54:52:bb:
e6:06:59:65:e4:3b:4d:18:b8:74:8a:f6:19:d0:21:
71:5b:d3:c8:f1:7c:34:53:43:37:22:bb:b4:89:99:
b1:c9:87:22:81:df:6f:5d:bb:e0:f9:ff:ce:62:b9:
55:6b:92:c8:7d:1e:d2:bd:49:33:1f:30:23:cf:ec:
3f:b1:45:52:00:18:b7:31:51:bf:0b:0e:51:46:db:
c2:55:29:0c:c3:39:df:4e:b4:c3:df:d2:4f:2e:30:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4D:25:18:72:C2:33:9B:F8:93:82:77:AD:6E:BF:8E:D0:53:40:97
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2k0lGHLCM5v4k4J3rW6_jtBTQJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.51.0/24
193.35.154.0/24
194.62.55.0/24
Signature Algorithm: sha256WithRSAEncryption
62:87:5d:fe:e3:d9:71:75:35:f0:ea:cd:58:ea:9f:a1:c3:42:
9e:46:60:9e:b3:ca:fb:58:49:76:4c:44:9e:97:f9:ee:10:2a:
e9:be:e8:21:01:9e:65:8b:7b:48:77:55:ed:3c:76:36:d1:7e:
eb:16:f7:eb:c8:0b:17:eb:4d:d2:01:1e:f0:fe:07:b6:f6:52:
b4:d4:ef:9a:f9:66:2b:be:e3:ad:04:fe:79:ad:ad:cf:8d:38:
dd:03:f5:2f:85:16:27:9d:c5:ca:eb:5c:01:23:6e:96:2b:18:
16:2e:3e:b9:43:89:45:c0:72:27:15:ec:c1:22:2b:8c:9d:6b:
34:a1:32:e8:ab:38:36:f2:7d:13:56:1b:09:01:c0:60:64:a1:
91:ac:ad:1a:f5:bf:32:8f:a8:78:18:9a:9c:19:52:ea:62:ea:
28:55:d3:06:4f:7f:76:95:b6:86:5b:a0:aa:15:c2:cc:0c:dd:
77:85:db:f2:cf:12:9d:96:2e:b7:cc:41:f4:ac:b1:04:b9:a5:
78:2d:b7:92:7b:39:e8:0a:2f:cc:85:a4:0a:dd:2e:84:08:5d:
e6:2c:e5:9a:22:fa:54:22:06:45:ba:22:b0:b4:20:a3:9b:c6:
ce:88:ef:a5:f9:10:f9:cf:7a:07:4b:79:94:af:ae:95:cf:49:
39:31:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:53 2026 by rpki-client