Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/2Hs9aa1I0dVAskh3I_aeTMJXodA.roa
File: 2Hs9aa1I0dVAskh3I_aeTMJXodA.roa (raw, json)
Hash identifier: JzxtpS1vvjv40uhd6+QibW7QaKJAzvJMXoecvkNc+LA=
Subject key identifier: D8:7B:3D:69:AD:48:D1:D5:40:B2:48:77:23:F6:9E:4C:C2:57:A1:D0
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 019FAD5A74BE48238E816555657A70E2B9F4
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/2Hs9aa1I0dVAskh3I_aeTMJXodA.roa
Signing time: Wed 29 Jul 2026 10:10:14 +0000
ROA not before: Wed 29 Jul 2026 10:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209925
IP address blocks: 85.8.239.0/24 maxlen: 32
185.116.232.0/24 maxlen: 32
2a14:fa80::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:5a:74:be:48:23:8e:81:65:55:65:7a:70:e2:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: Jul 29 10:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d87b3d69ad48d1d540b2487723f69e4cc257a1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:90:72:a1:01:04:0f:61:06:57:7f:94:77:
1c:ca:ef:85:2c:6d:f6:1e:b9:83:04:ef:e9:2a:49:
e5:8a:1f:c3:88:60:8f:8b:a7:45:41:c6:69:08:6f:
e7:d9:a6:fe:f5:ab:63:30:74:12:f2:d8:ea:4a:db:
75:1f:1a:a3:d2:2c:ed:54:57:7e:2b:a6:9c:09:9d:
1e:c3:8a:43:d5:f4:9e:77:7a:2a:78:26:e0:f2:36:
e4:29:09:65:48:e3:9f:85:3f:aa:fd:2b:19:01:f1:
34:80:a8:38:97:74:41:bd:79:33:c9:a2:2f:f6:72:
c1:19:3c:35:f5:28:36:c1:a4:0c:f9:62:f2:68:a1:
eb:65:0d:c2:c1:f1:0a:8d:9b:fd:48:71:7d:0a:5e:
3a:89:32:cf:7d:8c:b7:65:77:5c:ce:b9:1e:61:08:
cd:54:d1:15:5c:62:a9:ce:02:68:f3:e8:96:f7:07:
81:f8:19:c8:0f:c5:e4:80:76:87:90:88:a0:f5:d8:
5a:43:ba:6b:97:33:c4:2e:55:da:34:35:15:94:5e:
d3:fb:c3:76:88:38:e1:36:64:91:a8:2d:1a:a6:9e:
50:a1:d5:8e:79:1c:3b:53:f7:0a:da:75:3b:9b:2f:
1b:fa:61:26:e1:78:c8:68:54:fc:77:a7:7c:38:ae:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7B:3D:69:AD:48:D1:D5:40:B2:48:77:23:F6:9E:4C:C2:57:A1:D0
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/2Hs9aa1I0dVAskh3I_aeTMJXodA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.239.0/24
185.116.232.0/24
IPv6:
2a14:fa80::/32
Signature Algorithm: sha256WithRSAEncryption
0f:fe:81:c0:e8:a7:15:d6:7e:e6:35:ea:c1:96:2a:4b:81:81:
b4:c0:8e:b7:2e:01:09:81:62:3f:cf:9a:e8:e9:48:58:4e:ff:
e8:ea:51:58:39:66:51:26:cb:ea:41:9e:ef:18:50:b1:16:6f:
91:c3:ac:f1:2a:09:7a:69:de:74:ae:1f:a1:0f:8a:03:fd:02:
ef:8d:96:aa:e3:a8:b5:9b:88:77:c8:21:cc:c7:cc:5a:40:32:
62:3d:2d:02:3e:7d:b3:b3:ce:40:1e:d5:b6:20:09:97:b1:60:
cc:91:85:ea:da:29:cc:e4:93:91:0d:81:ad:b4:e2:9c:9b:32:
c0:f5:b6:b2:73:91:cd:2e:34:09:1e:56:0a:64:db:0c:9d:8f:
11:84:72:10:ec:76:27:fd:65:15:66:68:f5:e7:69:51:2b:74:
9b:ff:4a:e6:fa:5d:1d:01:77:fb:4b:4f:27:b7:4c:9a:df:f2:
59:89:9d:da:a9:0d:87:3a:89:26:80:1c:49:40:b9:a6:9f:2d:
b3:82:75:1c:a1:98:b9:e2:a7:cc:fd:31:16:b2:6c:c4:05:91:
eb:22:cf:96:db:cc:8b:01:42:b1:d0:3c:4f:f4:78:bf:76:a7:
9d:5e:ed:d3:6a:8b:50:44:78:1e:38:07:6d:90:b5:02:24:33:
10:8e:6b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:24:15 2026 by rpki-client