Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/2LoT2nrVlGDvI7EseBkOr3_7wVY.roa
File: 2LoT2nrVlGDvI7EseBkOr3_7wVY.roa (raw, json)
Hash identifier: 7+63WNUU13OcBl37nLL9L5zZ/r9ns+DAn2hcpdAeQJE=
Subject key identifier: D8:BA:13:DA:7A:D5:94:60:EF:23:B1:2C:78:19:0E:AF:7F:FB:C1:56
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 019EA81B1EEF1D085F24EC57396CE6E9CC8F
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/2LoT2nrVlGDvI7EseBkOr3_7wVY.roa
Signing time: Mon 08 Jun 2026 16:40:10 +0000
ROA not before: Mon 08 Jun 2026 16:40:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 176.98.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:1b:1e:ef:1d:08:5f:24:ec:57:39:6c:e6:e9:cc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jun 8 16:40:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8ba13da7ad59460ef23b12c78190eaf7ffbc156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:52:fa:44:ab:f2:95:78:52:de:88:04:d1:
a7:7e:6f:e6:09:ea:bb:44:2b:79:98:42:7c:df:22:
98:8b:26:0f:8d:55:63:38:e2:e7:c4:d4:59:e6:20:
c1:4c:71:0a:db:e1:66:48:27:5e:ea:35:12:dc:bc:
95:13:9a:db:ec:3a:4e:99:ff:97:9e:90:d7:eb:b5:
ea:b8:88:7d:70:42:38:c9:57:31:ae:aa:68:ea:5c:
5e:b7:1c:43:98:a0:9e:d3:5e:f9:24:6f:24:47:30:
50:d6:63:e3:6b:a2:74:ea:e0:5c:35:cb:94:b1:36:
fd:34:79:d7:d7:7d:6b:3f:32:4c:68:7f:ce:1c:d8:
92:1a:f6:ff:b2:39:a9:19:a5:8a:f3:e4:e8:77:fe:
06:30:1b:7f:98:91:04:db:5a:53:81:d6:9c:a5:8c:
8f:00:89:17:88:d4:ed:14:83:1b:3a:39:05:e8:25:
a3:c6:f0:33:6a:8b:78:27:27:00:c2:1a:c3:3b:f9:
fc:8f:a3:ff:43:b0:6c:d6:f9:36:5c:01:29:89:35:
d1:35:ef:f0:fe:d1:b2:0f:2c:6e:05:23:fb:06:88:
9a:b9:75:b5:28:c8:ce:94:bf:f5:8d:8f:e2:eb:20:
99:2e:62:9f:22:97:01:5a:de:6c:0d:23:79:1e:c5:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BA:13:DA:7A:D5:94:60:EF:23:B1:2C:78:19:0E:AF:7F:FB:C1:56
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/2LoT2nrVlGDvI7EseBkOr3_7wVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.185.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e5:b1:8b:aa:f3:db:38:6b:b5:66:96:b2:63:f4:95:1b:18:
a2:02:d2:de:0f:51:47:ee:7f:0f:74:86:5c:0a:57:96:f7:eb:
0b:4e:f3:dd:5c:ad:dc:74:ee:eb:fc:4a:56:02:79:f3:7b:31:
cb:85:6e:dc:21:32:8e:e4:97:34:3f:0b:23:bd:d0:fa:9e:6c:
27:06:6b:bd:6c:0d:b9:d4:41:2b:0e:28:99:b6:51:91:09:10:
96:d5:74:95:8d:4b:f7:e0:06:52:9c:4b:17:0e:ee:cb:44:40:
9e:26:5e:fe:92:7f:e8:b2:8a:ed:38:f9:fc:b2:1a:aa:00:54:
b4:ee:50:58:a4:cd:b8:2c:b6:50:c1:06:94:32:fd:9f:37:30:
ed:0b:a8:20:1e:90:56:c7:c8:aa:ca:33:1c:d1:62:4b:25:70:
c1:8b:48:4a:74:11:21:0f:13:b2:07:b3:26:ac:cf:1a:95:c0:
5d:8f:b9:d5:a6:2b:f8:f2:2b:0b:0e:7b:19:b3:fa:bd:2d:6f:
8a:7f:fb:29:0d:27:fb:6e:22:e5:26:06:7d:db:7e:14:9a:1e:
74:11:a0:1c:70:76:b4:d8:6e:00:b4:c3:20:56:bc:de:41:c5:
76:f8:a1:12:58:da:08:64:78:c5:7a:5a:69:66:4a:42:bc:e0:
04:c1:91:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:06:15 2026 by rpki-client