Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2bWZIKlX2EoDYgrVmUghr2DHbW0.roa
File: 2bWZIKlX2EoDYgrVmUghr2DHbW0.roa (raw, json)
Hash identifier: AJLHlwFTKK6ltbx272gdumBDoDTqal3xOfSHpK/GMv4=
Subject key identifier: D9:B5:99:20:A9:57:D8:4A:03:62:0A:D5:99:48:21:AF:60:C7:6D:6D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0E57093786BF804B56BE0FC218619FB6C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2bWZIKlX2EoDYgrVmUghr2DHbW0.roa
Signing time: Mon 28 Sep 2026 00:35:55 +0000
ROA not before: Mon 28 Sep 2026 00:35:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200819
IP address blocks: 2a06:de00:f0d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:70:93:78:6b:f8:04:b5:6b:e0:fc:21:86:19:fb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 28 00:35:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9b59920a957d84a03620ad5994821af60c76d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:dd:9b:c1:b4:82:d0:67:41:41:f2:7a:55:
18:f2:4f:8f:d8:04:c8:64:27:f8:40:f4:d5:ce:cd:
20:04:d3:d4:77:3e:b8:7d:19:a3:57:90:8c:69:55:
52:c8:8d:55:05:a5:17:4f:9c:98:cd:35:3c:28:c3:
66:db:9c:e3:18:ff:fc:b3:c7:cd:d9:86:45:bc:e4:
e9:c6:5a:ea:a1:31:d1:a5:a8:4b:21:51:bc:8c:05:
bd:d7:19:1d:7f:d6:77:3b:4f:a1:ca:37:43:a0:03:
cb:a7:5b:a9:fd:3d:71:0f:dc:1e:7f:cb:af:69:77:
78:f9:2e:7c:62:30:e6:29:e7:b7:67:c6:4f:e0:e6:
ee:38:00:ad:67:44:d0:ce:d6:e7:ca:47:86:bf:41:
d1:a9:ed:08:45:65:e2:ee:bd:67:43:1c:18:09:16:
00:cd:46:71:eb:0a:ec:c5:b5:8c:91:5d:e7:9c:1e:
f1:ac:7a:aa:fc:fb:ea:e8:f2:14:be:11:c3:84:7c:
a9:41:12:9c:18:e1:d2:15:24:98:b4:9a:6e:ae:83:
e3:68:c0:bf:44:c1:f4:1e:e5:e9:99:9a:36:11:f2:
e9:a5:8d:47:a1:9b:ba:2f:c0:2e:93:13:a8:95:ca:
99:13:46:33:b3:86:f9:49:81:5a:43:0d:1c:52:30:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:99:20:A9:57:D8:4A:03:62:0A:D5:99:48:21:AF:60:C7:6D:6D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2bWZIKlX2EoDYgrVmUghr2DHbW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:f0d0::/44
Signature Algorithm: sha256WithRSAEncryption
8a:2c:2b:ac:a7:28:e1:74:f2:60:82:b9:f8:9f:df:5b:c2:78:
9f:31:77:96:16:60:c4:e9:95:b8:28:f5:a9:3b:55:7b:e4:54:
6e:7c:ba:6e:2d:27:3c:a7:c2:ea:5a:ac:99:11:28:c1:44:e1:
65:86:f9:68:9d:8e:38:f3:55:74:3a:5b:a2:4a:50:23:9a:3c:
33:f3:c0:d9:bd:b7:09:07:d0:20:f9:1c:73:e1:51:96:2d:46:
c3:5a:21:91:78:72:db:cf:45:dd:91:fa:b3:53:3f:2f:bb:49:
d5:ca:e0:28:7e:50:b0:44:14:b8:c2:f6:73:15:c4:73:2c:a3:
23:9d:56:5b:28:81:1c:7b:d9:43:1b:d9:98:fe:1a:90:38:ed:
61:ae:f3:35:f7:db:62:67:14:41:cd:19:a0:1e:7a:7f:cd:74:
2d:77:d8:d8:a4:52:8d:82:09:8f:dd:28:76:cd:6c:07:4e:44:
b6:98:35:c5:e2:2e:a0:8c:f7:6a:37:0c:b9:7b:eb:2f:41:81:
73:e6:13:ab:22:70:5b:94:ec:4b:f8:19:e0:ca:60:0c:f2:cd:
3d:2f:91:f9:c6:68:d5:51:68:d1:49:53:f7:a1:8f:63:c6:91:
44:8f:40:9a:c6:2e:91:e9:3e:87:1a:36:fe:56:7d:0e:d7:18:
6b:00:c5:3a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDlcJN4a/gEtWvg/CGGGftsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTI4MDAzNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWI1OTkyMGE5NTdkODRhMDM2MjBhZDU5OTQ4MjFhZjYwYzc2ZDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn3dm8G0gtBnQUHyelUY8k+P2ATI
ZCf4QPTVzs0gBNPUdz64fRmjV5CMaVVSyI1VBaUXT5yYzTU8KMNm25zjGP/8s8fN
2YZFvOTpxlrqoTHRpahLIVG8jAW91xkdf9Z3O0+hyjdDoAPLp1up/T1xD9wef8uv
aXd4+S58YjDmKee3Z8ZP4ObuOACtZ0TQztbnykeGv0HRqe0IRWXi7r1nQxwYCRYA
zUZx6wrsxbWMkV3nnB7xrHqq/Pvq6PIUvhHDhHypQRKcGOHSFSSYtJpuroPjaMC/
RMH0HuXpmZo2EfLppY1HoZu6L8AukxOolcqZE0Yzs4b5SYFaQw0cUjBVwwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNm1mSCpV9hKA2IK1ZlIIa9gx21tMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMmJXWklLbFgyRW9EWWdyVm1VZ2hyMkRIYlcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeAPDQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCKLCuspyjhdPJggrn4n99bwnifMXeWFmDE6ZW4
KPWpO1V75FRufLpuLSc8p8LqWqyZESjBROFlhvlonY4481V0OluiSlAjmjwz88DZ
vbcJB9Ag+Rxz4VGWLUbDWiGReHLbz0XdkfqzUz8vu0nVyuAoflCwRBS4wvZzFcRz
LKMjnVZbKIEce9lDG9mY/hqQOO1hrvM199tiZxRBzRmgHnp/zXQtd9jYpFKNggmP
3Sh2zWwHTkS2mDXF4i6gjPdqNwy5e+svQYFz5hOrInBblOxL+BngymAM8s09L5H5
xmjVUWjRSVP3oY9jxpFEj0Caxi6R6T6HGjb+Vn0O1xhrAMU6
-----END CERTIFICATE-----
Generated at Sat Oct 3 06:15:54 2026 by rpki-client