Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/2dWzKyzngiwkIBcxPosHIQsoQPc.roa
File: 2dWzKyzngiwkIBcxPosHIQsoQPc.roa (raw, json)
Hash identifier: he07KV6503D/jJKaEYJd8E8I45wHOxTelHt08w/1sd0=
Subject key identifier: D9:D5:B3:2B:2C:E7:82:2C:24:20:17:31:3E:8B:07:21:0B:28:40:F7
Certificate issuer: /CN=73d55c1b7e92e6853994fdb5760f68dcdfda6b2e
Certificate serial: 01A080D7BAED1101EE406A0006D16EDD1442
Authority key identifier: 73:D5:5C:1B:7E:92:E6:85:39:94:FD:B5:76:0F:68:DC:DF:DA:6B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9VcG36S5oU5lP21dg9o3N_aay4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/2dWzKyzngiwkIBcxPosHIQsoQPc.roa
Signing time: Tue 08 Sep 2026 11:46:56 +0000
ROA not before: Tue 08 Sep 2026 11:46:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218791
IP address blocks: 149.170.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9VcG36S5oU5lP21dg9o3N_aay4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:d7:ba:ed:11:01:ee:40:6a:00:06:d1:6e:dd:14:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d55c1b7e92e6853994fdb5760f68dcdfda6b2e
Validity
Not Before: Sep 8 11:46:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9d5b32b2ce7822c242017313e8b07210b2840f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:a7:82:c6:50:bd:b7:af:55:04:a5:39:46:
df:46:40:9f:b6:50:b2:d1:7e:17:d6:d3:bb:5e:c0:
10:f7:8d:ff:ab:6c:90:87:aa:1a:65:e2:ab:d6:b0:
bb:5c:5d:60:ed:ea:c2:fd:1b:56:1c:21:f2:d5:3e:
01:df:72:50:a3:e7:29:0c:d9:62:95:8c:9c:be:f9:
39:ec:e5:68:ba:de:6e:a3:df:e8:d3:e5:a3:41:a4:
cb:f0:de:b0:9a:7f:be:e7:b1:a4:fd:19:6b:99:88:
b1:e7:3f:56:73:57:9d:29:84:91:6c:86:d8:7f:98:
b9:ee:c1:a3:ae:3f:10:77:da:96:bc:12:55:0d:b0:
b3:1c:70:2c:ed:4c:77:07:70:da:38:e2:58:03:0f:
35:43:12:ea:d5:c1:49:fb:1f:f5:34:a4:d4:04:de:
73:19:3c:bc:93:b3:82:dc:4b:89:8b:7b:26:4f:3e:
57:cd:78:92:c9:94:33:60:ab:e5:9f:b7:2b:30:44:
cd:ef:f9:d9:40:7a:d9:43:be:12:af:69:5d:6e:3a:
13:75:a0:f7:eb:80:f2:55:bc:92:f6:56:6e:2f:0e:
f9:56:d4:fb:bf:cb:bf:af:55:64:40:bc:38:3e:17:
8f:51:5f:0d:a7:52:61:dd:03:f3:45:52:1d:46:9b:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D5:B3:2B:2C:E7:82:2C:24:20:17:31:3E:8B:07:21:0B:28:40:F7
X509v3 Authority Key Identifier:
keyid:73:D5:5C:1B:7E:92:E6:85:39:94:FD:B5:76:0F:68:DC:DF:DA:6B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9VcG36S5oU5lP21dg9o3N_aay4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/2dWzKyzngiwkIBcxPosHIQsoQPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3471b2-d1d8-47db-8d2b-f869e19b3d21/1/c9VcG36S5oU5lP21dg9o3N_aay4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.170.176.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:39:eb:bd:69:3a:67:16:37:fc:bc:f2:ed:69:c3:5a:9e:23:
11:47:4a:c1:f7:6f:1a:05:ad:89:56:d3:1a:9d:46:29:4c:50:
ec:69:b2:78:58:36:33:f0:b9:50:98:dd:01:31:36:70:37:fa:
1c:1c:13:c3:fa:84:61:6d:f0:3d:cc:ae:97:7b:59:05:ee:4a:
92:95:43:36:90:7c:7f:64:38:41:ff:6c:03:62:e3:2e:d5:e9:
a9:6c:0c:29:b8:ad:cc:d3:79:a1:ed:a5:1a:95:8e:7e:5b:6b:
c7:74:37:e0:34:73:08:85:06:36:a2:74:1d:57:1b:14:94:a6:
07:ca:c1:17:13:90:62:aa:cd:3c:80:67:4a:16:63:19:5d:60:
b6:43:3a:b7:1c:81:b2:df:cf:0f:a4:8d:a3:fb:ae:ea:ef:c4:
96:6a:ba:3e:30:48:74:12:0e:80:fb:51:54:a1:19:7a:79:d0:
10:a5:a9:56:a9:7b:69:13:93:de:93:75:7d:1b:c4:95:5d:2b:
79:31:6b:a2:b5:5f:61:4e:cf:92:10:eb:83:3d:d4:89:5b:5e:
dc:5c:e8:11:7e:18:e2:c2:74:f4:a7:b7:4a:c1:bf:2a:75:92:
b9:d5:12:76:db:35:ff:d4:77:69:6c:ad:69:2b:91:5c:4b:23:
38:dc:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:25:23 2026 by rpki-client