Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/2q3WlaGJW1nubis1_ZK6lFbm2zM.roa
File: 2q3WlaGJW1nubis1_ZK6lFbm2zM.roa (raw, json)
Hash identifier: pUvllWIvsns7rTu0jhfapVfYDxCFmUtGqvLoyd37fL4=
Subject key identifier: DA:AD:D6:95:A1:89:5B:59:EE:6E:2B:35:FD:92:BA:94:56:E6:DB:33
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A0AAB55C90D3E0E38D8BE92F546D69A61B
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/2q3WlaGJW1nubis1_ZK6lFbm2zM.roa
Signing time: Wed 16 Sep 2026 14:53:27 +0000
ROA not before: Wed 16 Sep 2026 14:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 138.249.117.0/24 maxlen: 24
138.249.141.0/24 maxlen: 24
138.249.149.0/24 maxlen: 24
170.168.91.0/24 maxlen: 24
170.168.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:b5:5c:90:d3:e0:e3:8d:8b:e9:2f:54:6d:69:a6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 16 14:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daadd695a1895b59ee6e2b35fd92ba9456e6db33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:32:a3:31:ea:e9:0e:cd:56:8a:22:49:62:
09:6d:d2:e4:81:cf:2b:62:be:1a:c8:93:4d:74:f4:
d4:8d:cf:a7:6d:44:74:02:03:4e:a7:4c:25:9c:79:
68:6f:3f:4f:fb:4d:86:89:00:90:7e:e5:ca:94:0c:
5c:8a:0f:cf:4c:dd:1f:df:12:a2:f1:85:c2:f4:16:
6a:77:0b:b8:19:32:e2:96:71:30:10:d0:e0:b7:9d:
04:e2:0c:6e:06:26:b1:90:49:df:84:a5:fb:d5:55:
35:ce:05:e2:08:8f:2d:8a:d5:1b:bb:e3:19:28:26:
c9:2c:f3:d2:4f:50:c8:2d:72:d3:ff:c8:5f:69:17:
78:e4:b4:09:20:cc:b6:d1:99:de:fb:18:13:12:0a:
c6:f2:d7:1f:15:9d:ec:bd:7f:ed:40:f4:4f:15:7e:
fb:ae:02:74:c3:0e:49:34:1f:6c:2e:d3:11:59:84:
30:f5:10:6b:eb:34:c1:dd:b2:01:f1:61:b1:64:cb:
54:95:7a:8e:38:6d:03:5c:78:89:4e:bd:cf:de:95:
15:46:cc:3c:23:d3:47:0a:c1:43:5e:30:5a:49:ec:
b4:96:ed:f4:a3:56:a2:84:f1:7d:41:82:e4:ed:06:
24:2c:8e:93:86:b1:1d:c1:72:e7:4a:e6:ce:b0:ac:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AD:D6:95:A1:89:5B:59:EE:6E:2B:35:FD:92:BA:94:56:E6:DB:33
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/2q3WlaGJW1nubis1_ZK6lFbm2zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.117.0/24
138.249.141.0/24
138.249.149.0/24
170.168.91.0/24
170.168.118.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5a:a3:a6:94:11:fa:f0:f1:10:44:95:d6:0b:4d:9c:90:1b:
66:90:df:f6:ed:02:ac:c8:77:b4:9d:f3:28:65:d9:bc:4f:e9:
a2:91:0d:85:f4:5d:07:d3:23:85:e9:04:37:dc:34:d3:ef:e8:
f4:75:1e:f3:53:f1:b1:36:28:cf:87:f5:9b:e1:af:9c:d7:65:
06:bf:df:f0:ff:21:7e:7e:80:a0:ab:0a:e7:8d:c4:ab:66:57:
75:12:d9:65:96:c2:32:04:a7:63:2f:4f:da:6a:6a:d7:2e:c4:
fd:db:a1:58:8c:d1:8c:f0:ae:75:ba:e6:57:f7:62:39:c6:2b:
a5:c1:66:31:0a:8e:fe:56:3a:e2:13:ee:08:d2:b2:47:63:5f:
6b:3c:d6:94:ff:0a:a6:ff:42:66:30:3b:74:7d:c6:a7:e9:97:
2b:54:57:ec:a7:64:10:b0:d1:9b:84:30:90:87:b4:63:d6:7a:
9e:80:e4:2c:75:85:42:4b:f0:34:e8:5a:2a:7b:36:77:67:3a:
2c:64:4a:43:8f:44:f2:a4:89:13:49:03:8f:7d:78:f9:29:f9:
53:fd:39:f2:21:26:b8:79:29:22:a7:e4:38:3f:01:d3:37:85:
05:e0:d2:18:66:d1:9b:8a:d5:98:fb:1a:36:71:ad:cb:65:cd:
0f:e3:30:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:10:28 2026 by rpki-client