Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1wEtbfWme8BXobXv9R-vL_YulSU.roa
File: 1wEtbfWme8BXobXv9R-vL_YulSU.roa (raw, json)
Hash identifier: u5vccxqCIJXQyQG0b/xgYHv6Ncu4HfTHFtaMAGRf7po=
Subject key identifier: D7:01:2D:6D:F5:A6:7B:C0:57:A1:B5:EF:F5:1F:AF:2F:F6:2E:95:25
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019E6F9F8C45BD40F3E5B1B89B4F1BE23146
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1wEtbfWme8BXobXv9R-vL_YulSU.roa
Signing time: Thu 28 May 2026 17:26:27 +0000
ROA not before: Thu 28 May 2026 17:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211270
IP address blocks: 138.249.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:9f:8c:45:bd:40:f3:e5:b1:b8:9b:4f:1b:e2:31:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: May 28 17:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7012d6df5a67bc057a1b5eff51faf2ff62e9525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:f7:f0:38:c0:75:11:2f:6f:29:65:5b:c7:
21:d0:ea:2e:ca:0a:29:d2:11:74:d3:55:c7:6e:38:
98:5a:bc:40:29:26:30:cf:31:ac:f2:0e:cd:04:1a:
e1:b9:70:b6:22:f0:d4:a8:1a:2f:46:39:23:64:de:
6d:de:8a:a6:78:c2:2c:cd:98:db:c9:8a:8a:52:6e:
fd:a9:8b:3e:17:3f:11:d6:55:cd:5f:ba:45:41:b7:
9e:c9:25:28:a8:d8:04:51:87:f0:bf:ab:d1:9b:fa:
f9:f2:5f:b5:80:69:56:ad:71:ca:2c:b5:0a:dd:ff:
bf:f0:61:ca:7b:ac:06:5d:a4:7b:69:33:d5:3b:bf:
27:91:e5:12:b5:29:4e:f9:eb:6e:f0:e0:df:62:9e:
8f:63:b0:38:5b:12:ab:a8:b8:67:6a:b0:28:04:ea:
79:2a:73:bb:10:22:15:f7:b2:26:91:48:2c:04:8a:
13:da:37:78:7a:77:b2:fc:f7:8a:83:b3:94:8d:00:
4b:69:94:64:4b:7e:9f:86:73:4e:92:e0:cf:59:51:
16:22:ff:34:3a:f9:17:a8:b2:f8:7b:41:3e:7b:23:
d4:42:cf:e9:7e:1b:71:c9:13:32:a3:30:6b:e9:db:
51:87:83:eb:34:ca:a6:ae:e4:be:12:a4:a9:26:7c:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:01:2D:6D:F5:A6:7B:C0:57:A1:B5:EF:F5:1F:AF:2F:F6:2E:95:25
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1wEtbfWme8BXobXv9R-vL_YulSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.27.0/24
Signature Algorithm: sha256WithRSAEncryption
12:87:87:5b:bd:aa:16:4f:7e:59:3d:36:74:73:96:c8:f5:67:
b1:7a:e4:f2:02:1c:93:f5:8a:52:92:c3:ed:ba:43:7f:70:a3:
1d:70:54:46:f1:a4:65:b7:e2:1a:92:e3:51:86:07:85:7f:55:
4d:00:fd:6d:24:c4:2e:9a:9a:bb:2e:5c:d1:eb:42:10:ea:b4:
ea:c9:40:5c:86:59:de:df:8c:e2:b1:29:28:22:35:4d:00:13:
26:70:73:e7:d1:13:a4:03:30:a6:fb:37:0c:d3:b4:a8:ae:24:
cf:ee:03:c9:64:3f:d5:cc:92:6a:0b:b8:74:10:2b:0e:fd:65:
14:74:4a:88:f5:bc:e8:72:a1:10:fb:86:bd:20:57:99:3d:27:
6f:fd:3b:7b:6e:22:d7:fd:42:2f:ee:01:8e:b9:fe:b0:5c:91:
7d:b1:ac:3a:c9:b7:a3:f8:22:b3:93:df:73:c3:28:d3:56:61:
3d:29:c6:d5:4a:e7:dc:14:64:5a:c7:d6:e4:c2:a4:b4:9a:57:
c0:a9:ef:48:5f:fe:a9:40:e5:40:b5:83:95:02:3b:96:a7:73:
75:c9:31:5b:33:c4:d1:a8:7b:17:58:54:94:71:0e:58:4b:d4:
5e:06:01:1e:d5:32:ca:47:25:1c:e7:ff:26:b4:c9:30:ed:c9:
2e:65:98:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5vn4xFvUDz5bG4m08b4jFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYwNTI4MTcyNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzAxMmQ2ZGY1YTY3YmMwNTdhMWI1ZWZmNTFmYWYyZmY2MmU5NTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4P38DjAdREvbyllW8ch0Oouygop
0hF001XHbjiYWrxAKSYwzzGs8g7NBBrhuXC2IvDUqBovRjkjZN5t3oqmeMIszZjb
yYqKUm79qYs+Fz8R1lXNX7pFQbeeySUoqNgEUYfwv6vRm/r58l+1gGlWrXHKLLUK
3f+/8GHKe6wGXaR7aTPVO78nkeUStSlO+etu8ODfYp6PY7A4WxKrqLhnarAoBOp5
KnO7ECIV97ImkUgsBIoT2jd4eney/PeKg7OUjQBLaZRkS36fhnNOkuDPWVEWIv80
OvkXqLL4e0E+eyPUQs/pfhtxyRMyozBr6dtRh4PrNMqmruS+EqSpJnxUtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNcBLW31pnvAV6G17/Ufry/2LpUlMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvMXdFdGJmV21lOEJYb2JYdjlSLXZMX1l1bFNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivkbMA0G
CSqGSIb3DQEBCwUAA4IBAQASh4dbvaoWT35ZPTZ0c5bI9WexeuTyAhyT9YpSksPt
ukN/cKMdcFRG8aRlt+IakuNRhgeFf1VNAP1tJMQumpq7LlzR60IQ6rTqyUBchlne
34zisSkoIjVNABMmcHPn0ROkAzCm+zcM07SoriTP7gPJZD/VzJJqC7h0ECsO/WUU
dEqI9bzocqEQ+4a9IFeZPSdv/Tt7biLX/UIv7gGOuf6wXJF9saw6ybej+CKzk99z
wyjTVmE9KcbVSufcFGRax9bkwqS0mlfAqe9IX/6pQOVAtYOVAjuWp3N1yTFbM8TR
qHsXWFSUcQ5YS9ReBgEe1TLKRyUc5/8mtMkw7ckuZZhD
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:44 2026 by rpki-client