Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/2AD88r0V-sPnIFkoVtY1Vz1-xto.roa
File: 2AD88r0V-sPnIFkoVtY1Vz1-xto.roa (raw, json)
Hash identifier: zIM2AaPfHJC6B6zXhXel8ktXA+t+zTVgveI41tZmcC0=
Subject key identifier: D8:00:FC:F2:BD:15:FA:C3:E7:20:59:28:56:D6:35:57:3D:7E:C6:DA
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 019FED1039429B992A25B85521170A3518AB
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/2AD88r0V-sPnIFkoVtY1Vz1-xto.roa
Signing time: Mon 10 Aug 2026 19:04:51 +0000
ROA not before: Mon 10 Aug 2026 19:04:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209183
IP address blocks: 81.19.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ed:10:39:42:9b:99:2a:25:b8:55:21:17:0a:35:18:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Aug 10 19:04:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d800fcf2bd15fac3e720592856d635573d7ec6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a6:c7:0b:fb:6a:e2:10:89:38:7b:d4:ad:a9:
0b:f1:b4:0f:af:43:a3:e2:fa:c7:c0:0c:db:cf:8b:
5d:27:e4:a9:07:16:93:db:a6:e7:9e:c8:86:2e:7b:
eb:5f:e8:e5:3f:16:5a:e6:87:54:5d:28:28:0b:48:
e6:6d:78:08:24:22:f5:f1:e9:e7:e3:8c:ff:88:cd:
23:c8:9a:f7:b0:e5:f4:08:0d:b1:4a:6a:42:b7:2c:
a8:95:d6:a3:30:6a:dc:32:56:e2:6e:88:c1:af:6e:
5a:0b:ba:63:31:d7:c5:56:cd:83:e6:64:e5:be:9f:
b3:03:75:bc:d5:08:3b:a9:d5:29:9b:73:17:ad:95:
ad:cf:64:09:1c:0b:b9:cb:53:c2:77:55:14:55:7c:
06:57:3f:35:5e:2e:96:55:a8:da:93:1e:43:f9:54:
96:fa:e8:13:72:bc:74:09:f6:bd:fd:ed:5c:da:88:
a3:fe:69:11:dc:1e:ae:6a:e4:3c:94:1c:7f:c3:e4:
1a:8c:e2:ac:d9:78:a4:55:e1:a9:21:4d:3b:0f:fc:
83:80:da:84:e6:d0:17:35:f3:f0:8c:db:94:ba:ec:
94:a2:54:6f:3c:ba:ff:06:69:17:14:69:4f:13:3e:
67:37:19:ac:48:c3:92:25:85:10:49:22:14:06:61:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:FC:F2:BD:15:FA:C3:E7:20:59:28:56:D6:35:57:3D:7E:C6:DA
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/2AD88r0V-sPnIFkoVtY1Vz1-xto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b4:72:aa:89:49:f3:c3:ea:a1:33:f8:0a:d9:01:c8:4e:66:
5a:a9:50:40:68:77:9d:c2:38:f3:be:16:6d:d0:43:91:a7:e1:
44:61:ce:25:53:85:3d:46:e8:81:39:77:4c:81:f9:59:74:17:
4a:09:10:a0:95:44:55:09:c3:82:32:bd:b6:75:fd:d2:48:e8:
bc:89:b5:6c:db:7d:0f:89:b5:70:d3:74:75:16:18:17:ad:3c:
d9:ce:5f:c7:84:2d:5c:47:72:38:fb:26:aa:44:c7:02:5f:32:
f9:c0:9c:52:19:f2:2f:03:f1:ce:63:46:3d:9d:e4:c7:1f:60:
98:f5:0f:4b:fe:d0:17:96:67:bf:3d:4d:94:10:0a:d8:15:be:
4e:21:9e:00:d4:3a:4c:95:11:9d:3e:82:1d:aa:7d:e8:0f:a9:
90:7c:3d:52:32:5c:14:8e:8c:fa:11:7e:c9:a3:29:06:bb:af:
0e:1b:f0:f7:ae:16:99:fb:7d:94:bd:92:67:d7:ef:e8:6b:90:
1a:18:b3:c8:5d:59:a5:04:35:e6:28:d9:16:79:de:eb:2b:11:
44:08:af:cd:f9:53:c4:3b:82:66:55:92:d4:9c:c3:6e:6c:fc:
47:0b:e4:bd:11:62:ca:c4:bd:e3:1f:e8:09:77:7e:88:96:11:
7f:40:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 16:48:40 2026 by rpki-client