Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2hne4XtuxCbeW48JTebMCE2oyiM.roa
File: 2hne4XtuxCbeW48JTebMCE2oyiM.roa (raw, json)
Hash identifier: guX9D5Nz6Xr3zKRhR6b5/D/GCh4mW/JmvuVuqEvzQtc=
Subject key identifier: DA:19:DE:E1:7B:6E:C4:26:DE:5B:8F:09:4D:E6:CC:08:4D:A8:CA:23
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A1685C7D9EFD9AE4566D29F73DE227F308
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2hne4XtuxCbeW48JTebMCE2oyiM.roa
Signing time: Fri 23 Oct 2026 10:44:14 +0000
ROA not before: Fri 23 Oct 2026 10:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47966
IP address blocks: 95.47.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:5c:7d:9e:fd:9a:e4:56:6d:29:f7:3d:e2:27:f3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 23 10:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da19dee17b6ec426de5b8f094de6cc084da8ca23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:1e:a2:f7:8f:01:55:57:46:99:0b:05:79:
2d:f2:ae:41:ac:86:03:1f:52:f0:47:b7:7c:02:7c:
4c:34:15:d5:a8:1e:56:0f:19:a2:ab:67:56:fe:9c:
19:4f:ad:2a:31:ec:22:17:4e:6e:6b:d8:c3:cf:17:
3c:a2:98:2e:e5:e4:fb:95:72:88:b9:15:6e:60:7f:
7e:69:de:6d:19:cd:75:2f:c7:41:73:67:03:af:12:
ba:0d:dc:30:aa:2b:f7:b6:3b:e2:b1:bb:e1:03:b1:
ed:3c:20:34:1d:18:94:46:03:ee:dd:bf:f5:e8:3b:
04:47:32:9c:17:50:38:5c:38:de:34:0a:92:21:c3:
ea:fd:16:59:4d:26:bf:00:03:6a:46:2d:8a:3f:75:
da:77:20:b6:99:c6:cb:3b:81:99:91:c3:57:37:a7:
f1:b1:d5:9e:1d:44:8e:59:9f:06:47:50:bb:0e:c0:
09:30:2d:79:ec:2f:5f:16:05:a4:d7:3f:1d:8e:2e:
11:ea:9d:31:41:10:ce:65:df:8b:64:9c:38:e9:d9:
ac:9a:5a:8c:63:06:28:34:36:80:5a:a4:c2:30:32:
9e:51:9c:d7:ea:fd:92:fa:03:58:35:a4:6a:eb:ca:
84:4a:5c:02:fe:00:68:d3:6f:23:7d:ff:aa:15:c3:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:DE:E1:7B:6E:C4:26:DE:5B:8F:09:4D:E6:CC:08:4D:A8:CA:23
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2hne4XtuxCbeW48JTebMCE2oyiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.237.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8a:ed:90:83:f0:32:33:6b:60:21:36:6d:f2:2d:bb:85:1d:
ce:c7:35:22:85:8f:b6:67:6b:b4:4b:91:95:c0:1d:d6:96:22:
b6:e5:38:46:4a:e9:f4:db:c0:ac:27:fc:fe:cf:7e:2b:53:59:
a7:0b:5b:fa:03:15:b8:c4:2d:4a:46:e7:b6:a6:ca:20:8b:0e:
67:84:db:e5:9d:a8:6b:54:48:31:82:34:71:2d:e3:08:f3:06:
d6:6a:8d:9c:60:33:d6:93:ca:eb:ae:8a:97:96:82:cd:57:27:
c7:4a:38:96:ce:7b:c5:c9:c4:e6:d9:57:e0:fa:12:46:17:56:
13:cd:44:40:6a:d5:1f:56:24:e0:d6:b9:7d:71:d1:02:50:f2:
9d:4e:35:d8:f2:37:46:00:5a:52:58:fe:94:fa:98:51:9a:f0:
2d:22:72:90:a3:07:d5:83:8b:29:d5:c9:b4:7b:b8:b2:9b:0e:
09:df:ca:31:44:18:ee:e9:c0:93:57:fa:7c:dd:a7:29:0d:58:
08:b5:2f:63:10:3d:7f:07:bf:11:aa:9c:33:f5:db:0f:df:22:
d9:27:a3:d4:1d:d2:9a:17:a0:74:3c:79:3c:5b:68:c2:f0:f9:
2c:37:75:bd:85:73:60:e4:0d:73:40:45:69:c7:9a:bd:47:e3:
49:98:93:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:31 2026 by rpki-client