Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/2ZKwqcQ0sj6ZB2RKV_gJjH2V5RY.roa
File: 2ZKwqcQ0sj6ZB2RKV_gJjH2V5RY.roa (raw, json)
Hash identifier: CEAXX5mqYY2Wkxusm8evjr7/BwzXhUq4xYYUlmXLYkM=
Subject key identifier: D9:92:B0:A9:C4:34:B2:3E:99:07:64:4A:57:F8:09:8C:7D:95:E5:16
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F236899B43919719A91894E4C44599547
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/2ZKwqcQ0sj6ZB2RKV_gJjH2V5RY.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 69.40.207.0/24 maxlen: 24
185.219.7.0/24 maxlen: 24
193.46.217.0/24 maxlen: 24
193.46.218.0/24 maxlen: 24
195.96.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:99:b4:39:19:71:9a:91:89:4e:4c:44:59:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d992b0a9c434b23e9907644a57f8098c7d95e516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:e1:5c:38:88:11:58:48:19:f2:99:2c:63:
e1:c3:97:83:92:65:3e:bb:21:17:3a:c8:d5:29:25:
d3:c5:29:cb:45:4f:c5:20:1c:07:a9:a9:af:cf:15:
ae:4b:15:65:9c:39:bd:70:a9:47:0e:0c:69:b4:8b:
22:dd:c8:ff:e3:f3:b1:76:87:69:20:6b:17:06:42:
ba:a1:e7:c7:05:89:af:f5:4e:eb:ca:4f:75:34:be:
1b:5c:0f:e5:28:89:6c:2b:a0:c7:07:54:ee:16:0b:
43:64:7e:5b:e0:6f:eb:1b:0f:a4:2e:d9:76:74:59:
e7:87:52:32:3a:7e:2d:50:5b:b0:2b:c6:69:54:0b:
63:df:f0:4f:fd:2c:98:74:30:28:bd:cd:60:77:a9:
96:bb:03:f4:d3:8e:ff:3e:a9:f7:90:68:e3:d6:90:
8b:11:bc:c6:bd:47:08:60:35:98:0d:dc:64:d4:eb:
c6:78:14:79:90:ba:67:d5:ba:1a:37:6b:97:87:46:
d1:fd:89:97:06:7b:21:3b:06:d2:c9:7f:e9:bb:1b:
c7:60:f7:29:34:ae:a2:24:7a:95:06:c2:6a:1c:7a:
cf:bf:85:88:ed:1b:fb:b9:a8:16:78:05:2b:ee:ac:
3c:f2:58:db:ed:c6:fe:6e:88:7a:ce:63:63:e3:e9:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:B0:A9:C4:34:B2:3E:99:07:64:4A:57:F8:09:8C:7D:95:E5:16
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/2ZKwqcQ0sj6ZB2RKV_gJjH2V5RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.40.207.0/24
185.219.7.0/24
193.46.217.0-193.46.218.255
195.96.132.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b4:82:a7:b0:80:40:e1:ab:45:74:34:e2:66:7b:90:f4:8c:
c2:0d:0f:0d:25:5e:d9:5a:89:44:05:fe:7c:f5:b1:43:f3:a5:
6a:61:ee:93:33:f2:f3:bc:d2:e5:f8:6f:37:21:82:51:41:6d:
ef:64:68:ba:d3:ca:bd:77:eb:e5:30:96:30:33:0c:1e:a5:ab:
0e:c3:8a:90:6c:c1:cc:b2:a1:13:29:9a:4a:c8:02:13:21:78:
37:a7:6c:f7:77:6b:8d:ed:8e:3a:42:56:bc:70:1d:dd:16:83:
79:14:85:53:c8:0b:3d:c2:9a:e2:7c:91:b1:f6:a6:a4:7f:cc:
13:5d:1a:7f:2f:67:fc:e7:bc:93:0a:57:e8:cb:43:fc:d5:b9:
a9:20:49:25:32:66:dd:50:e9:df:07:8d:11:6f:16:49:91:1d:
c0:d9:0a:06:8d:c0:5e:b8:d4:b1:d7:19:a6:27:18:b6:d1:a0:
c0:4d:7f:e0:75:f2:2a:61:95:ef:78:a0:dd:91:e9:87:7b:e8:
c8:77:b3:a8:07:80:e3:41:96:9a:b4:db:9e:0b:80:27:b0:4c:
9c:cd:c4:30:1c:95:c0:9d:b3:d8:ce:c4:07:b2:f8:78:3a:36:
8f:15:17:ef:e8:fe:dc:d4:a5:4c:c5:c6:d0:7a:bf:07:ed:8c:
55:96:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:46:58 2026 by rpki-client