Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Z2g0xESs5KQhHxSMEGi3aI8oqJE.roa
File: Z2g0xESs5KQhHxSMEGi3aI8oqJE.roa (raw, json)
Hash identifier: FX2sZsUjK8iVbyIZ+AyjLNwx/0Gl6RR9uDusUIequGs=
Subject key identifier: 67:68:34:C4:44:AC:E4:A4:21:1F:14:8C:10:68:B7:68:8F:28:A8:91
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1220BB6ACE4ADF0E2B02AC9565EB0CCF2
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Z2g0xESs5KQhHxSMEGi3aI8oqJE.roa
Signing time: Fri 09 Oct 2026 19:02:35 +0000
ROA not before: Fri 09 Oct 2026 19:02:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218438
IP address blocks: 170.168.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:0b:b6:ac:e4:ad:f0:e2:b0:2a:c9:56:5e:b0:cc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 9 19:02:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=676834c444ace4a4211f148c1068b7688f28a891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:85:72:09:af:aa:51:94:1c:4b:ec:2c:d9:
fd:d7:9f:62:51:ff:1b:00:1a:31:a5:8f:68:70:7d:
14:87:ec:63:17:4f:36:db:c1:17:b0:5f:65:98:5d:
88:b6:6f:1d:72:14:bd:2d:90:56:a5:fe:3d:08:7b:
eb:6f:ba:0f:9f:85:db:cc:e6:68:70:57:eb:b1:b8:
be:ca:54:ab:c1:a5:60:9b:ca:a6:c2:fa:a6:b6:26:
7d:8f:17:8a:5d:c7:3f:41:83:29:ae:92:db:73:85:
e7:36:4f:40:85:52:6d:9c:a6:64:34:41:c1:75:b3:
4a:c3:71:bd:0b:88:8e:94:00:ee:f8:86:af:3b:ae:
7a:fd:4c:6e:7a:0b:3c:af:77:28:50:49:25:a2:54:
ee:77:e2:f0:17:ab:0c:ef:8f:99:3d:5c:e1:49:c3:
f5:5c:aa:01:33:d3:12:f6:8d:46:7b:99:5c:2c:68:
04:94:d0:5d:3f:41:f1:e6:28:6b:1c:f1:2b:9d:fa:
41:22:fc:8d:58:39:d7:ce:a6:74:84:b4:b2:9c:b1:
c9:ee:34:c8:c3:86:e3:8a:5f:cd:c0:0a:91:62:88:
2d:f0:d3:95:d6:55:cb:ef:8e:8a:0f:7c:31:2f:bb:
28:63:2d:cf:c9:39:df:85:2c:d6:86:31:4a:ad:20:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:68:34:C4:44:AC:E4:A4:21:1F:14:8C:10:68:B7:68:8F:28:A8:91
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Z2g0xESs5KQhHxSMEGi3aI8oqJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:65:a1:66:ff:28:31:4b:de:65:34:c6:0c:db:45:5a:cb:4e:
64:9d:83:2f:86:72:2d:e6:1c:7d:ba:63:c4:b1:d7:6f:ee:0c:
8f:a3:e2:0d:b0:87:7d:cf:fd:da:68:ea:e0:86:ae:96:02:8d:
dc:da:51:cc:d3:23:1b:94:51:0b:55:23:1f:55:0d:c6:42:af:
04:11:85:19:90:f0:47:04:3d:bc:3f:e7:f0:f4:b8:f5:3e:9a:
f0:e1:e5:d8:d4:e3:9a:5f:ac:a1:f3:77:71:f0:f8:44:92:30:
52:2b:88:79:ff:4d:16:72:86:8e:bf:56:2e:28:f6:3d:ac:59:
8d:b7:fb:cd:ff:ee:43:18:b9:46:b3:26:a7:65:77:2c:c0:76:
07:4f:d9:fb:33:22:83:99:98:f8:2e:e8:28:30:95:78:fb:9e:
ec:16:d2:ad:06:30:a9:e1:9a:99:89:d4:a7:2f:80:e0:4a:14:
b1:94:a8:d4:43:bc:6b:c7:a9:70:04:eb:57:df:61:35:d9:e0:
a3:70:b5:ba:19:88:26:df:d7:62:3f:67:b4:60:e4:a1:60:39:
b5:4e:91:e7:0a:73:6e:73:51:06:15:6f:12:9b:86:1b:f9:93:
a8:52:6f:19:e5:7d:80:0a:92:24:d6:a5:fc:96:b6:66:c6:c8:
25:46:3c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:25:15 2026 by rpki-client