Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/2i89XVOQrjxxnOgp_kYCu_koPzo.roa
File: 2i89XVOQrjxxnOgp_kYCu_koPzo.roa (raw, json)
Hash identifier: 42jZvKNgi9HCWuxukHR05dgf7G4uDuzHK0/HnbKIwFc=
Subject key identifier: DA:2F:3D:5D:53:90:AE:3C:71:9C:E8:29:FE:46:02:BB:F9:28:3F:3A
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A03AC81BECD37D3256F789683E9B4D1ACC
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/2i89XVOQrjxxnOgp_kYCu_koPzo.roa
Signing time: Tue 25 Aug 2026 21:16:27 +0000
ROA not before: Tue 25 Aug 2026 21:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62300
IP address blocks: 170.168.18.0/24 maxlen: 24
170.168.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:c8:1b:ec:d3:7d:32:56:f7:89:68:3e:9b:4d:1a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 25 21:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da2f3d5d5390ae3c719ce829fe4602bbf9283f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:26:40:a6:a1:00:29:72:a8:94:53:20:5e:
b4:8d:9e:9b:0a:b1:93:75:8b:d1:b0:61:00:9b:7a:
a2:63:9e:08:42:6f:c9:52:a3:49:ea:a4:b7:c3:20:
2b:60:53:b6:c9:37:ed:ca:bd:4a:fd:c4:e7:a0:91:
18:1a:13:d7:70:18:6a:31:65:d5:17:c7:6e:7b:d1:
ac:e2:ab:67:48:f6:0e:a9:47:59:73:56:8f:d3:44:
35:39:8b:77:b6:93:1a:08:5b:f5:54:f0:3d:59:45:
7d:b6:24:86:1a:94:2b:bf:ea:3b:0c:d3:21:69:f9:
a5:3a:d2:99:4d:70:38:2d:42:2d:0d:f3:46:35:5e:
80:55:cc:26:76:b0:47:4b:d0:05:1e:d9:14:24:26:
4c:93:96:89:d1:7c:57:36:d3:86:cb:5c:e1:7f:fc:
77:04:24:bf:1b:8a:3f:0d:1e:ec:52:29:4f:05:9b:
2b:db:b9:d7:62:4c:9b:04:d1:ed:69:3e:57:dc:be:
53:fa:0f:7a:26:0f:b7:51:e5:22:06:56:f4:7b:4e:
dc:11:1c:ad:d6:71:19:b8:52:db:d1:10:dc:ca:de:
f3:2e:59:2c:89:1d:41:7d:21:98:e0:bd:dd:47:dc:
ad:bc:1a:94:1f:87:25:3b:d1:2c:08:ae:74:25:34:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2F:3D:5D:53:90:AE:3C:71:9C:E8:29:FE:46:02:BB:F9:28:3F:3A
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/2i89XVOQrjxxnOgp_kYCu_koPzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.18.0/24
170.168.119.0/24
Signature Algorithm: sha256WithRSAEncryption
85:49:14:4e:b4:aa:e1:fa:b9:17:6e:93:0b:9a:70:b6:de:cc:
3f:75:b0:1b:ba:37:d9:0e:9d:b4:7d:c6:73:dc:05:c7:bf:3e:
7e:1c:a2:dc:3a:8e:34:0d:0a:f4:9a:98:c3:bf:5d:3d:b7:59:
fd:61:26:c2:c6:fb:02:da:5f:a0:02:fe:4d:62:72:b0:0f:10:
5c:8b:e8:b6:aa:c1:63:8e:b5:0d:a2:dc:14:7a:d9:f6:e5:59:
27:f6:29:58:69:4e:03:98:f8:0f:c8:f6:6d:6f:b2:9e:53:0d:
6c:57:5c:b0:d4:1b:13:4a:28:0f:e7:b8:c3:26:e7:ce:96:b7:
af:87:b9:a8:c2:06:61:17:bd:a8:0f:08:f1:d7:16:6c:7f:5f:
e4:a0:3a:be:55:d0:15:a5:d2:51:5d:0c:8b:8e:7d:19:5e:a2:
66:aa:4b:c6:3e:4c:8d:83:8d:40:85:05:e4:51:ae:f0:3a:0f:
d3:ca:f1:c9:bd:37:18:90:1b:50:f9:fb:0a:92:94:d9:ff:70:
e8:d8:74:a6:2a:e1:b3:3b:a0:7d:2f:64:05:c6:64:f7:9a:41:
dd:d6:4c:6d:1b:88:4d:a8:03:1b:8b:7f:64:79:0a:06:85:61:
5d:a9:84:4e:bd:12:7e:a9:31:ee:49:8f:71:ce:22:09:02:aa:
48:8f:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:10:50 2026 by rpki-client