Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/2Na-UB05m2JfbPVGT0da9iQmakA.roa
File: 2Na-UB05m2JfbPVGT0da9iQmakA.roa (raw, json)
Hash identifier: w2t2c5IAXMteohLNHwnbmzWNVJx1T8RkbGApW0bm8cc=
Subject key identifier: D8:D6:BE:50:1D:39:9B:62:5F:6C:F5:46:4F:47:5A:F6:24:26:6A:40
Certificate issuer: /CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Certificate serial: 019F236870A519F9535F4F2FDA904E983513
Authority key identifier: EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/2Na-UB05m2JfbPVGT0da9iQmakA.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.8.0/24 maxlen: 24
140.150.10.0/24 maxlen: 24
140.150.11.0/24 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.13.0/24 maxlen: 24
140.150.14.0/24 maxlen: 24
140.150.15.0/24 maxlen: 24
140.150.16.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.20.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.22.0/24 maxlen: 24
140.150.23.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.26.0/24 maxlen: 24
140.150.27.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
140.150.34.0/24 maxlen: 24
140.150.35.0/24 maxlen: 24
140.150.36.0/24 maxlen: 24
140.150.37.0/24 maxlen: 24
140.150.38.0/24 maxlen: 24
140.150.40.0/24 maxlen: 24
140.150.41.0/24 maxlen: 24
140.150.42.0/24 maxlen: 24
140.150.43.0/24 maxlen: 24
140.150.44.0/24 maxlen: 24
140.150.46.0/24 maxlen: 24
140.150.47.0/24 maxlen: 24
146.103.64.0/24 maxlen: 24
146.103.65.0/24 maxlen: 24
146.103.66.0/24 maxlen: 24
146.103.67.0/24 maxlen: 24
146.103.68.0/24 maxlen: 24
146.103.71.0/24 maxlen: 24
146.103.72.0/24 maxlen: 24
146.103.73.0/24 maxlen: 24
146.103.74.0/24 maxlen: 24
146.103.75.0/24 maxlen: 24
146.103.76.0/24 maxlen: 24
146.103.77.0/24 maxlen: 24
146.103.78.0/24 maxlen: 24
146.103.79.0/24 maxlen: 24
146.103.80.0/24 maxlen: 24
146.103.81.0/24 maxlen: 24
146.103.82.0/24 maxlen: 24
146.103.83.0/24 maxlen: 24
146.103.84.0/24 maxlen: 24
146.103.85.0/24 maxlen: 24
146.103.86.0/24 maxlen: 24
146.103.87.0/24 maxlen: 24
146.103.88.0/24 maxlen: 24
146.103.89.0/24 maxlen: 24
146.103.90.0/24 maxlen: 24
146.103.91.0/24 maxlen: 24
146.103.92.0/24 maxlen: 24
146.103.93.0/24 maxlen: 24
146.103.94.0/24 maxlen: 24
146.103.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:70:a5:19:f9:53:5f:4f:2f:da:90:4e:98:35:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8d6be501d399b625f6cf5464f475af624266a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:d0:f8:4f:98:27:c5:ad:c8:21:52:3d:e3:
21:db:16:34:40:5a:6d:91:2c:2b:c9:b8:ed:8a:40:
be:72:33:17:74:bf:fb:1b:93:13:17:ac:ef:91:59:
5b:40:6c:ed:e5:ab:0a:aa:3a:a8:f8:aa:2b:7d:6d:
ce:0d:8d:f3:77:d1:c6:08:67:45:b9:e2:6d:f0:38:
74:63:fb:81:05:26:d9:df:81:ac:cb:a4:1d:f7:ae:
34:f5:df:cc:ab:0f:f1:99:e5:5b:19:1f:00:b0:4d:
d3:12:8b:78:da:ba:38:6e:9b:8c:46:b7:2f:2c:f9:
d8:39:91:54:f3:e2:36:77:78:ad:88:ab:81:4e:5b:
6b:56:d9:2e:2e:e0:41:d5:f9:f2:72:3f:f0:0e:fd:
d2:57:9f:77:96:4c:5c:8c:75:18:6f:28:d5:17:9b:
5b:0c:5a:8c:15:15:64:fc:20:89:a8:8f:52:58:ee:
e8:e3:01:0b:17:13:e6:9a:f5:97:33:87:42:5f:5c:
94:e0:30:93:2b:ea:16:84:dc:c8:9d:d1:75:0f:c9:
bf:36:97:83:14:a8:d1:b5:81:a8:9e:2e:44:4a:94:
cd:e9:fd:76:f4:ba:70:e1:31:f9:2b:8b:83:56:d3:
83:de:98:76:37:91:45:46:a0:a3:07:92:ce:19:bf:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D6:BE:50:1D:39:9B:62:5F:6C:F5:46:4F:47:5A:F6:24:26:6A:40
X509v3 Authority Key Identifier:
keyid:EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/2Na-UB05m2JfbPVGT0da9iQmakA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0-140.150.8.255
140.150.10.0-140.150.16.255
140.150.18.0-140.150.38.255
140.150.40.0-140.150.44.255
140.150.46.0/23
146.103.64.0-146.103.68.255
146.103.71.0-146.103.95.255
Signature Algorithm: sha256WithRSAEncryption
74:fb:14:fe:55:6e:eb:2f:2e:01:34:3f:86:57:0c:69:66:20:
56:a9:af:ac:3f:ba:49:b1:f8:66:9b:36:c0:e5:13:42:ee:91:
6d:c0:06:46:88:70:c9:8c:6d:53:78:f4:c7:69:4c:a4:4c:f0:
60:36:8b:43:ab:ce:c7:c7:a1:3d:29:85:38:1e:db:65:80:d6:
62:51:eb:e2:4d:1e:be:4e:39:cb:3a:9e:b8:95:39:ad:1c:02:
54:9a:39:c8:18:0d:b3:f6:44:52:20:06:a4:6f:12:a3:36:52:
bb:93:ae:e2:fd:b0:94:9b:62:3a:80:3a:0e:10:cd:0f:29:21:
77:82:d9:97:fb:34:ae:c9:49:cb:a4:18:00:df:86:c8:3b:27:
e2:2a:a1:55:19:c3:13:e2:05:f3:a9:c7:d0:37:3e:8f:fe:05:
f6:75:6a:e4:68:a4:75:f2:48:a6:0d:d7:ad:a4:47:da:0a:61:
e3:86:09:33:bd:d2:e3:eb:9a:08:5e:42:ff:e1:b2:98:af:6a:
e2:e9:80:52:04:99:0b:17:52:03:fc:3b:1f:46:f4:47:0a:ce:
3e:9b:88:66:1b:9d:3f:df:cf:bb:29:4e:e9:45:40:e8:ad:0e:
79:d2:b6:ff:cc:7b:05:06:11:28:81:99:e0:00:ef:e1:ad:87:
c1:b0:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:45:32 2026 by rpki-client