Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2dofE3VqpmV9n1OmC40b0QyiHro.roa
File: 2dofE3VqpmV9n1OmC40b0QyiHro.roa (raw, json)
Hash identifier: QvJWkkkXh+OpRdZ/4OOglytdw9a//3wNMjw0fGQ62rA=
Subject key identifier: D9:DA:1F:13:75:6A:A6:65:7D:9F:53:A6:0B:8D:1B:D1:0C:A2:1E:BA
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC6869B0420BE729DF8AAC297D9846423
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2dofE3VqpmV9n1OmC40b0QyiHro.roa
Signing time: Mon 03 Aug 2026 07:28:58 +0000
ROA not before: Mon 03 Aug 2026 07:28:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219097
IP address blocks: 89.31.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:86:9b:04:20:be:72:9d:f8:aa:c2:97:d9:84:64:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 07:28:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9da1f13756aa6657d9f53a60b8d1bd10ca21eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:93:f5:f4:fa:1f:ef:c1:83:17:1e:12:97:68:
2f:ba:76:d3:aa:ba:2e:e9:ab:33:ac:a1:66:8b:96:
35:56:1c:55:d9:d0:81:dc:62:c6:a2:63:b7:65:0e:
92:67:ef:67:95:b1:ba:99:dc:54:37:1d:76:56:51:
54:9c:4b:5e:d0:3f:22:59:e0:01:10:12:54:66:48:
a4:a4:48:66:ba:ef:f1:58:60:af:ae:78:48:3d:18:
2a:a6:66:06:3a:46:d3:c4:dd:cd:43:8d:2e:1a:2f:
fb:82:2a:74:15:8a:94:e8:39:20:b2:60:dd:1b:f2:
61:94:7e:e5:a3:b9:d0:f4:c7:8f:d6:35:b3:7d:29:
ed:bb:2e:04:b9:3f:92:25:0d:9c:34:54:59:3f:09:
30:bc:ca:26:c0:1b:ef:b0:a7:6d:ba:d6:8d:4d:4f:
0e:e9:68:1c:00:f0:96:cd:33:d2:34:3d:6a:10:83:
6d:af:f7:a6:26:8a:c3:0d:68:b0:0a:50:da:3d:ce:
30:12:ad:fc:16:7d:0f:64:e3:b3:e8:37:ba:a3:87:
e4:e6:b4:af:60:61:33:90:f9:d5:1b:e8:1c:27:32:
89:43:21:df:73:1a:9c:6a:0d:1f:fd:17:42:4c:2e:
ef:71:b7:6d:48:83:9d:0c:db:e8:60:1a:51:dc:67:
71:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DA:1F:13:75:6A:A6:65:7D:9F:53:A6:0B:8D:1B:D1:0C:A2:1E:BA
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2dofE3VqpmV9n1OmC40b0QyiHro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.236.0/24
Signature Algorithm: sha256WithRSAEncryption
65:da:6c:c8:08:0b:91:51:86:5b:49:52:99:c1:a8:14:07:24:
cc:c4:43:f3:e7:0e:53:53:fd:ae:91:91:38:0e:72:e4:fc:c6:
3b:46:c2:ab:93:b4:2e:21:e5:fd:c5:65:82:b6:ac:c2:01:fc:
b9:c5:62:ec:fc:69:1b:72:9e:cc:a3:22:5a:e0:ad:97:19:08:
1b:74:21:68:73:50:1d:10:7a:7f:20:d0:91:e3:f0:b7:94:78:
9b:28:dd:2f:99:8b:56:07:df:fa:a7:e6:0b:76:20:ae:ee:5e:
32:23:69:45:70:fb:8b:9d:76:10:1b:03:b5:10:54:22:d9:5f:
eb:44:8a:83:02:93:7c:c1:c7:4c:99:99:75:bf:e9:00:67:fc:
a8:70:fd:33:44:98:33:8b:99:88:32:3c:47:ce:8b:da:b6:c0:
92:7f:50:08:46:cc:09:f5:f7:cd:f3:97:83:29:05:fc:63:ec:
f6:46:71:25:f0:c5:5b:b7:45:b1:75:e0:da:0b:e4:60:a1:0f:
52:d7:1c:bf:ed:04:20:8b:6d:2d:3f:36:e9:9f:45:78:11:27:
da:59:77:ff:f2:7c:11:91:ff:3d:ab:3b:58:f2:0e:11:9d:55:
af:c6:ab:e6:61:fc:ba:ea:4d:eb:9d:55:05:a8:56:17:3a:41:
7c:06:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:17 2026 by rpki-client