Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/vu3d2g5H0SQ7RSj43Hl6SM-1tWg.roa
File: vu3d2g5H0SQ7RSj43Hl6SM-1tWg.roa (raw, json)
Hash identifier: zS5n5aisTRkjXC6qenqYrZeqfMWYvPXJE6z2GM+hE5Q=
Subject key identifier: BE:ED:DD:DA:0E:47:D1:24:3B:45:28:F8:DC:79:7A:48:CF:B5:B5:68
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019FF14139886F2C9CB0B40D45ED43AA1C78
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/vu3d2g5H0SQ7RSj43Hl6SM-1tWg.roa
Signing time: Tue 11 Aug 2026 14:36:51 +0000
ROA not before: Tue 11 Aug 2026 14:36:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218987
IP address blocks: 170.168.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:41:39:88:6f:2c:9c:b0:b4:0d:45:ed:43:aa:1c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 11 14:36:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beedddda0e47d1243b4528f8dc797a48cfb5b568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:3a:27:49:81:6f:33:b0:8b:41:fc:81:69:
cf:27:d8:b0:09:61:48:50:f1:7b:19:cc:a7:2e:65:
41:38:b0:e3:5e:fa:f7:db:e9:54:04:c3:38:73:cf:
cf:09:3d:e6:d4:e2:fd:d4:e6:be:d5:39:25:1d:ab:
8b:4e:95:5b:8f:da:58:02:af:e9:04:1b:5a:f5:81:
7a:25:f0:7f:e0:9d:05:e6:d1:48:ff:7a:f2:f5:18:
a8:4d:44:a2:27:a6:f6:c7:7d:46:be:7e:02:82:d6:
c8:e8:f8:56:b7:8e:14:d6:1c:e7:d5:76:31:41:24:
a5:c1:8a:a4:60:bb:a6:18:7c:0b:40:8d:26:34:2d:
74:94:bc:8f:a0:f1:17:b2:a7:46:06:69:e2:b2:57:
c1:be:49:37:3d:3a:ac:d8:7e:ee:11:80:49:1d:90:
d7:12:ce:64:7d:69:69:d8:89:f0:d3:bb:30:b6:d5:
6d:be:be:5a:c9:25:bb:58:a2:ae:ed:f0:a1:4d:29:
3e:14:05:9a:dd:40:e1:69:e7:dc:a3:4a:27:ed:5b:
cb:9d:0f:aa:23:9a:a8:d3:c0:90:a3:14:99:80:2d:
a2:93:6f:a1:35:60:6d:8b:84:f9:00:0d:fa:91:ef:
a3:02:5e:85:00:b9:2f:c6:f6:8d:55:dd:7a:b0:f6:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:ED:DD:DA:0E:47:D1:24:3B:45:28:F8:DC:79:7A:48:CF:B5:B5:68
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/vu3d2g5H0SQ7RSj43Hl6SM-1tWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2d:68:32:c1:44:30:94:c6:26:01:a4:a8:89:6e:e3:32:7f:
3a:36:e0:de:7e:77:6a:88:80:90:4c:89:f1:b1:c0:b7:45:a2:
27:eb:5b:4d:b1:c0:dc:02:86:52:7f:d1:02:5d:78:8c:92:b0:
8c:28:08:18:4a:08:4f:bc:a3:84:38:4e:a4:64:1b:2e:99:56:
c8:7a:15:2c:07:b5:07:8c:91:3b:88:71:59:6a:57:e4:80:04:
24:99:86:8a:d0:53:54:5b:04:2a:3e:56:a2:68:03:ca:23:39:
75:a9:02:80:fb:7c:d2:9f:d4:71:c1:43:bc:10:77:c7:60:79:
79:91:1b:13:40:64:5d:ea:b5:98:3b:a0:05:7c:00:99:ef:45:
9e:f5:05:ad:13:1e:73:b1:a6:e6:09:b2:be:ca:54:6b:0e:e7:
16:52:5e:fd:bd:26:07:79:ea:7d:76:06:0f:0d:e7:dd:1d:5b:
7d:22:2e:27:a0:91:6f:46:88:93:e1:f5:c5:66:d1:35:ba:18:
68:a3:e4:eb:ad:4d:8f:8e:32:02:21:d5:86:a8:32:db:70:11:
e5:6b:1b:71:33:60:5f:c0:b4:4e:ee:4d:5d:40:5e:60:cf:c8:
a6:7e:34:98:74:1b:73:c2:31:b2:c7:48:73:8d:8e:b7:cf:82:
8c:9d:c0:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/xQTmIbyycsLQNRe1Dqhx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYwODExMTQzNjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWVkZGRkYTBlNDdkMTI0M2I0NTI4ZjhkYzc5N2E0OGNmYjViNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulM6J0mBbzOwi0H8gWnPJ9iwCWFI
UPF7GcynLmVBOLDjXvr32+lUBMM4c8/PCT3m1OL91Oa+1TklHauLTpVbj9pYAq/p
BBta9YF6JfB/4J0F5tFI/3ry9RioTUSiJ6b2x31Gvn4CgtbI6PhWt44U1hzn1XYx
QSSlwYqkYLumGHwLQI0mNC10lLyPoPEXsqdGBmnislfBvkk3PTqs2H7uEYBJHZDX
Es5kfWlp2Inw07swttVtvr5aySW7WKKu7fChTSk+FAWa3UDhaefco0on7VvLnQ+q
I5qo08CQoxSZgC2ik2+hNWBti4T5AA36ke+jAl6FALkvxvaNVd16sPZJJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL7t3doOR9EkO0Uo+Nx5ekjPtbVoMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvdnUzZDJnNUgwU1E3UlNqNDNIbDZTTS0xdFdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqgyMA0G
CSqGSIb3DQEBCwUAA4IBAQBKLWgywUQwlMYmAaSoiW7jMn86NuDefndqiICQTInx
scC3RaIn61tNscDcAoZSf9ECXXiMkrCMKAgYSghPvKOEOE6kZBsumVbIehUsB7UH
jJE7iHFZalfkgAQkmYaK0FNUWwQqPlaiaAPKIzl1qQKA+3zSn9RxwUO8EHfHYHl5
kRsTQGRd6rWYO6AFfACZ70We9QWtEx5zsabmCbK+ylRrDucWUl79vSYHeep9dgYP
DefdHVt9Ii4noJFvRoiT4fXFZtE1uhhoo+TrrU2PjjICIdWGqDLbcBHlaxtxM2Bf
wLRO7k1dQF5gz8imfjSYdBtzwjGyx0hzjY63z4KMncCg
-----END CERTIFICATE-----
Generated at Sat Sep 19 07:10:49 2026 by rpki-client