Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/2PZq-APOa4tAHIFJvXCy4JHng8o.roa
File: 2PZq-APOa4tAHIFJvXCy4JHng8o.roa (raw, json)
Hash identifier: b6r1mmoSf9aa94RTVBfL7QtIRTOaJ6y4/FHqb//X4S0=
Subject key identifier: D8:F6:6A:F8:03:CE:6B:8B:40:1C:81:49:BD:70:B2:E0:91:E7:83:CA
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 019E26262DB9182BE760DA389DB4AF0A59E9
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/2PZq-APOa4tAHIFJvXCy4JHng8o.roa
Signing time: Thu 14 May 2026 11:01:36 +0000
ROA not before: Thu 14 May 2026 11:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205499
IP address blocks: 212.163.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:26:26:2d:b9:18:2b:e7:60:da:38:9d:b4:af:0a:59:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: May 14 11:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8f66af803ce6b8b401c8149bd70b2e091e783ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:99:19:3d:34:14:9e:04:c3:c0:b1:07:59:
07:d0:29:0c:dc:1a:b6:c6:23:ae:9f:74:fb:b8:ae:
8e:86:67:e3:44:71:02:f5:85:6c:0f:49:c6:6c:20:
99:67:f2:2d:35:62:b2:72:3d:2b:6b:fd:79:6a:19:
75:5a:62:36:8d:7a:2f:3d:6c:48:e5:9d:3f:d5:8b:
6b:0c:bb:5c:b5:b0:89:46:cb:ad:5a:40:0d:84:f4:
62:08:b0:91:c8:4d:a8:92:f1:ea:cc:70:7c:13:c1:
10:74:37:78:8f:f9:03:1d:8f:bc:ba:de:70:f7:3a:
7e:15:2f:e1:12:44:2e:2c:e4:ac:cb:f5:6b:43:67:
4d:e9:5f:b3:d1:18:9e:35:bd:3a:98:b7:19:78:69:
f9:ba:00:da:cd:fd:d1:f7:43:95:cf:9e:c2:e6:bd:
47:65:63:4e:73:2c:54:c6:5d:be:4a:74:de:f4:51:
83:20:4a:5c:88:12:89:9c:66:ba:4b:5b:64:40:06:
e0:bb:6a:a6:17:e0:99:e4:ab:62:be:fe:f6:7d:74:
0a:32:4d:90:41:0d:51:b4:66:cc:87:a2:fc:05:12:
43:ad:44:08:94:31:17:56:68:8d:36:40:f2:b0:01:
e3:62:15:85:3a:e8:79:a6:17:f1:66:9d:46:33:80:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F6:6A:F8:03:CE:6B:8B:40:1C:81:49:BD:70:B2:E0:91:E7:83:CA
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/2PZq-APOa4tAHIFJvXCy4JHng8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.163.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:eb:fa:09:c7:f0:63:f6:e2:9a:39:cc:31:83:66:4e:5c:04:
5b:3f:53:ec:7c:15:9e:6b:2e:bf:ef:b1:8a:df:e5:5a:c1:0b:
6f:58:95:12:fe:84:61:e1:de:bb:43:3e:10:c8:ab:53:f2:6e:
94:e6:68:97:1f:4b:9e:51:84:22:ad:ba:32:81:52:4b:21:4d:
b1:6e:d2:1a:12:db:bb:5a:de:91:82:19:a5:ad:d0:86:c4:9a:
a8:23:40:28:13:01:ab:30:62:58:10:2e:af:03:8a:77:7e:24:
ee:10:43:62:49:b9:e4:0f:10:39:b7:86:af:d7:75:d2:b5:2a:
2f:84:cf:b6:d8:ee:c3:45:a7:3c:56:19:e2:8c:f0:8f:00:eb:
b8:85:a4:18:81:11:6e:6a:e3:7d:ad:56:f4:81:c7:6b:2c:25:
13:1b:f5:98:fb:82:a9:de:ae:16:2a:5b:7d:48:87:c3:50:7b:
60:76:81:66:b3:14:94:93:a3:10:b5:6d:1b:8f:14:f5:4d:1b:
17:0e:f8:05:a9:38:63:ea:10:75:bb:50:61:67:26:37:1c:f6:
01:1d:53:a7:89:c9:aa:40:b5:0c:7e:6a:9b:ee:d6:ad:66:15:
70:db:f7:d3:01:89:1e:16:41:e9:bf:79:3c:79:03:2c:c6:9b:
84:bf:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:03 2026 by rpki-client