Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_2CcoiIQLWgQ9TYsDXLZXd5IbCs.roa
File: _2CcoiIQLWgQ9TYsDXLZXd5IbCs.roa (raw, json)
Hash identifier: KfRLyW5g8Jk5//twGbmFdkRmBsnkYakJxMfUvA18BZc=
Subject key identifier: FF:60:9C:A2:22:10:2D:68:10:F5:36:2C:0D:72:D9:5D:DE:48:6C:2B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01A0861748492EE262122B25E330C82EB211
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_2CcoiIQLWgQ9TYsDXLZXd5IbCs.roa
Signing time: Wed 09 Sep 2026 12:14:27 +0000
ROA not before: Wed 09 Sep 2026 12:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210881
IP address blocks: 2a12:bec4:1dd0:cafe::/64 maxlen: 64
2a12:bec4:1ea0::/44 maxlen: 44
2a12:bec4:1eb0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:17:48:49:2e:e2:62:12:2b:25:e3:30:c8:2e:b2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 9 12:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff609ca222102d6810f5362c0d72d95dde486c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:2c:d3:66:cd:23:ea:ec:90:1e:bd:a4:58:
36:46:44:13:e3:78:4f:88:f8:f4:cb:7c:9b:e3:db:
02:60:bd:77:f3:d7:7e:97:8b:12:26:06:b3:af:97:
72:be:c7:34:db:e3:a3:29:20:16:53:44:f7:2d:16:
53:81:f8:9f:58:f7:e8:49:96:80:9d:8b:bf:92:bf:
e7:c9:2d:b4:cc:15:5a:cf:22:05:16:93:90:32:22:
af:33:39:00:5f:07:97:6e:bd:05:b1:55:9f:6a:e8:
f0:10:1d:1f:8e:ed:30:a4:46:b9:ac:2e:f0:b6:6f:
f0:30:a7:d4:ab:8d:d5:05:0e:da:a1:fa:00:bf:17:
a7:cf:8d:0b:36:80:7c:5f:53:e0:64:c4:f6:00:9b:
ef:e8:77:99:a2:e9:0e:fc:2a:8e:52:46:f5:a5:94:
a0:76:ff:db:43:7d:5a:11:fb:a5:45:17:3d:44:82:
e6:e1:a9:ab:4e:18:5a:93:b5:08:f3:f5:2b:34:a0:
21:19:48:75:59:e8:df:e1:2f:f8:2a:4a:ec:2f:31:
26:e7:3d:80:09:2d:59:16:24:85:7d:ae:93:cb:b6:
d4:00:e7:d1:39:0d:74:05:1e:14:ae:c3:35:da:82:
a7:b4:ad:4e:d4:25:7e:15:ab:57:f4:8c:ef:89:f0:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:60:9C:A2:22:10:2D:68:10:F5:36:2C:0D:72:D9:5D:DE:48:6C:2B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_2CcoiIQLWgQ9TYsDXLZXd5IbCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1dd0:cafe::/64
2a12:bec4:1ea0::/43
Signature Algorithm: sha256WithRSAEncryption
32:4e:82:1d:51:4a:e1:54:81:07:8f:57:ca:d9:a2:4b:41:6d:
5b:4c:7f:df:1e:6d:1c:2d:21:bf:24:98:9b:7a:b4:b8:cd:40:
ae:e0:8a:ec:8d:bd:19:d8:fc:8e:2a:15:61:c7:5f:e0:f0:ae:
65:15:fa:aa:18:96:55:db:c9:52:b0:d4:1a:3b:e5:12:14:a6:
d8:83:ce:77:4c:0b:6f:83:96:58:df:e5:91:62:c6:22:6b:68:
b7:d1:ec:c1:3a:f8:a0:5f:5c:15:20:d8:69:57:3f:25:97:0d:
e6:6a:df:f4:59:ad:f0:0c:5c:c1:14:6b:a2:0c:30:67:c6:98:
74:e9:9c:43:42:12:ea:b5:e2:9a:98:dd:d9:b0:ac:29:7e:58:
24:09:24:04:72:fa:5f:80:4b:a3:36:c4:65:fd:e0:dd:cd:0f:
b6:02:65:f2:6c:2a:08:2c:15:82:83:e9:09:5d:65:b6:19:52:
42:45:d4:ff:01:5d:cc:49:96:b8:9d:00:ce:8d:cc:76:2c:82:
ee:07:e1:30:8d:04:99:e4:06:e9:8d:cd:17:27:9b:cb:ce:44:
ab:51:09:e0:5a:dd:37:ea:75:a5:a6:98:e9:eb:30:9c:f2:03:
fe:2d:a6:94:75:9a:34:00:a4:9e:ef:44:5e:b7:58:07:2c:0e:
df:70:c5:a5
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaCGF0hJLuJiEisl4zDILrIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjYwOTA5MTIxNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjYwOWNhMjIyMTAyZDY4MTBmNTM2MmMwZDcyZDk1ZGRlNDg2YzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNws02bNI+rskB69pFg2RkQT43hP
iPj0y3yb49sCYL1389d+l4sSJgazr5dyvsc02+OjKSAWU0T3LRZTgfifWPfoSZaA
nYu/kr/nyS20zBVazyIFFpOQMiKvMzkAXweXbr0FsVWfaujwEB0fju0wpEa5rC7w
tm/wMKfUq43VBQ7aofoAvxenz40LNoB8X1PgZMT2AJvv6HeZoukO/CqOUkb1pZSg
dv/bQ31aEfulRRc9RILm4amrThhak7UI8/UrNKAhGUh1Wejf4S/4KkrsLzEm5z2A
CS1ZFiSFfa6Ty7bUAOfROQ10BR4UrsM12oKntK1O1CV+FatX9IzvifB5QQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFP9gnKIiEC1oEPU2LA1y2V3eSGwrMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvXzJDY29pSVFMV2dROVRZc0RYTFpYZDVJYkNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUAwkAKhK+xB3Q
yv4DBwUqEr7EHqAwDQYJKoZIhvcNAQELBQADggEBADJOgh1RSuFUgQePV8rZoktB
bVtMf98ebRwtIb8kmJt6tLjNQK7giuyNvRnY/I4qFWHHX+DwrmUV+qoYllXbyVKw
1Bo75RIUptiDzndMC2+Dlljf5ZFixiJraLfR7ME6+KBfXBUg2GlXPyWXDeZq3/RZ
rfAMXMEUa6IMMGfGmHTpnENCEuq14pqY3dmwrCl+WCQJJARy+l+AS6M2xGX94N3N
D7YCZfJsKggsFYKD6QldZbYZUkJF1P8BXcxJlridAM6NzHYsgu4H4TCNBJnkBumN
zRcnm8vORKtRCeBa3TfqdaWmmOnrMJzyA/4tppR1mjQApJ7vRF63WAcsDt9wxaU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:22 2026 by rpki-client