Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/2XhKt2LNvViUfl3CfxvkBvd5EQ0.roa
File: 2XhKt2LNvViUfl3CfxvkBvd5EQ0.roa (raw, json)
Hash identifier: pvE2PtElk442DLYEKZCHkOsuZUjrau+pa9+tdrDPOa8=
Subject key identifier: D9:78:4A:B7:62:CD:BD:58:94:7E:5D:C2:7F:1B:E4:06:F7:79:11:0D
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01A1BC16BA7BFE14CAA83D2D0A802789B28E
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/2XhKt2LNvViUfl3CfxvkBvd5EQ0.roa
Signing time: Sun 08 Nov 2026 16:56:08 +0000
ROA not before: Sun 08 Nov 2026 16:56:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
185.179.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bc:16:ba:7b:fe:14:ca:a8:3d:2d:0a:80:27:89:b2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Nov 8 16:56:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9784ab762cdbd58947e5dc27f1be406f779110d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:ee:7d:a5:d1:4c:4e:a0:7c:e0:3a:f5:69:
6e:56:4f:1e:4b:d7:44:a7:a5:b6:61:fa:cb:08:f5:
c4:a9:64:c2:e4:e9:cf:83:f0:41:00:24:3f:f9:21:
b4:0c:69:fb:30:a1:ca:45:97:41:9a:e5:0f:e2:77:
14:6a:57:40:3c:2d:25:5f:36:91:a6:fc:c0:cc:95:
d5:d0:80:9f:43:29:9b:2d:5b:75:5f:69:a0:3f:b1:
38:f3:47:53:6c:78:01:1d:c6:96:fd:2b:b2:ba:e1:
8b:34:1e:57:b7:4f:87:7c:57:58:04:ff:06:2b:23:
86:8a:3a:03:1e:76:e2:56:55:c8:b0:1c:75:9a:ef:
ac:e5:72:8a:cc:ff:ba:af:d9:94:80:da:32:e6:9b:
b4:49:76:a8:cd:d3:8d:23:83:99:d7:a5:db:b9:e0:
7c:6d:07:4f:02:a3:24:38:bf:9e:44:07:86:d8:96:
48:a2:e8:30:4b:91:9e:ec:f9:be:c8:06:48:89:c4:
d1:8c:50:a0:87:5b:f2:d2:29:f1:de:ce:2c:90:1a:
f5:98:75:92:ea:b3:97:fd:53:98:d9:59:16:1d:ed:
b3:aa:28:6d:84:1b:10:59:6f:88:df:f1:ea:62:cd:
2a:3e:dd:50:cf:5a:70:af:84:73:9b:fb:aa:72:22:
25:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:78:4A:B7:62:CD:BD:58:94:7E:5D:C2:7F:1B:E4:06:F7:79:11:0D
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/2XhKt2LNvViUfl3CfxvkBvd5EQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
185.179.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:89:c3:a4:17:eb:55:c3:8d:cc:db:c6:b7:99:64:4f:a7:76:
52:14:f9:15:85:a3:47:e3:a8:2e:ea:e5:52:c2:54:7c:8b:3c:
b4:33:79:02:bc:2d:ea:66:27:f5:fd:23:0c:5e:bc:db:3f:9a:
93:c5:4b:ea:d3:25:9e:fe:37:5c:26:93:1b:89:b3:f2:31:72:
3a:27:39:8d:b1:e8:d2:d2:b5:97:78:65:8e:6b:34:12:f2:69:
70:21:9f:5c:80:e3:11:1c:49:b7:f3:81:08:58:20:92:2e:db:
b6:a0:12:9f:3f:ae:0c:5b:4a:79:3b:92:14:7e:af:d7:41:30:
9f:39:3a:27:60:bd:b9:f4:f2:88:2a:eb:44:43:48:36:56:65:
8c:be:22:ab:fa:36:bb:74:98:66:43:81:8f:0f:49:1a:29:bf:
0c:bd:8b:19:3d:ce:82:73:8b:6a:df:3a:c3:ef:49:da:61:ed:
8b:ad:5e:00:90:a5:a6:3e:06:49:dc:95:91:57:97:f9:cc:e4:
84:d7:0e:94:29:50:78:90:cb:21:77:51:dc:61:7c:83:09:44:
bb:4f:7c:53:54:62:ad:9e:4f:87:a5:fe:9c:03:2b:21:f2:31:
0a:97:de:ea:14:40:18:5f:e7:ad:44:d2:8a:ee:c0:61:26:86:
2f:8b:22:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:22:01 2026 by rpki-client