Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2dunjZtBzyCnYRLBFdjZ6hGKG64.roa
File: 2dunjZtBzyCnYRLBFdjZ6hGKG64.roa (raw, json)
Hash identifier: f8UsSFlUt9htCQaAq6Le2m7CIeK4EUJ7L3ZofdXSL2I=
Subject key identifier: D9:DB:A7:8D:9B:41:CF:20:A7:61:12:C1:15:D8:D9:EA:11:8A:1B:AE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E4964B73F91BA8C4297FEF20D24113B63
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2dunjZtBzyCnYRLBFdjZ6hGKG64.roa
Signing time: Thu 21 May 2026 07:16:37 +0000
ROA not before: Thu 21 May 2026 07:16:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63150
IP address blocks: 213.210.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:64:b7:3f:91:ba:8c:42:97:fe:f2:0d:24:11:3b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 21 07:16:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9dba78d9b41cf20a76112c115d8d9ea118a1bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:d5:16:fb:45:91:5f:da:2a:85:66:6c:d7:
90:c2:8a:2e:5d:88:cb:a2:e9:5a:00:ba:dc:ef:88:
c4:7a:02:19:c7:c5:90:03:aa:75:a0:3b:13:f5:0f:
41:47:f1:f7:45:6b:08:8b:74:fb:da:b5:24:30:cb:
38:9e:27:a2:de:71:26:ce:13:e2:a8:b6:e4:bc:dd:
2b:f2:39:c6:b1:5b:55:d3:5e:78:36:40:1f:4a:dd:
71:b3:32:19:b2:ba:64:ae:8b:ed:38:2d:62:55:a3:
d1:78:0e:b7:15:c9:fa:3f:31:31:2b:e8:c6:2a:d8:
79:f7:14:e7:57:88:af:51:55:0f:f6:9e:fa:06:63:
16:c7:cc:69:6f:64:94:99:0c:78:c5:c2:16:f4:d7:
0a:68:0a:80:c1:7b:88:10:95:d5:10:bf:09:b0:ca:
5f:f2:68:ff:6c:bb:54:f6:93:f7:bd:ed:ff:bf:43:
a2:05:4f:73:02:fd:2c:79:11:a8:ed:0e:7a:c1:1b:
28:bc:0f:ce:5f:1b:8d:e3:8c:30:51:6a:f2:2e:15:
30:11:e8:89:c1:b3:8a:1f:55:ee:eb:dc:19:6e:0b:
66:83:d7:f4:91:61:82:50:63:56:0f:c7:00:37:8a:
bc:9a:56:0c:de:68:76:df:bf:4c:7a:1e:69:30:f8:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DB:A7:8D:9B:41:CF:20:A7:61:12:C1:15:D8:D9:EA:11:8A:1B:AE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2dunjZtBzyCnYRLBFdjZ6hGKG64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.55.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0a:6c:61:fb:06:a8:da:e2:34:04:f8:e2:9e:08:96:f4:e7:
e8:e2:f5:36:a8:1f:3f:27:a5:90:79:63:52:4f:e5:aa:26:61:
44:8a:d3:94:15:09:c6:4a:46:d9:8d:f4:05:d9:0e:58:de:9e:
02:d1:10:62:d5:ae:94:e9:de:84:23:e2:f1:76:35:a3:ac:b9:
df:3d:58:b6:23:06:88:ae:f4:ea:1d:dd:f6:6d:7a:73:65:63:
70:b3:d8:6f:8f:da:ff:9c:0c:51:d7:63:34:14:17:16:75:c8:
8e:44:dd:fc:54:55:6a:7a:dc:b2:f8:d3:e6:ff:38:44:32:ff:
92:3f:e5:01:ab:42:1e:6c:5f:3b:a8:c1:e0:d3:5c:a0:ab:53:
51:76:3c:d2:1b:c0:00:fe:cf:09:42:23:f8:b9:53:bf:05:6c:
e3:da:da:c2:0a:4d:e3:a0:34:a9:6e:94:8d:b4:b4:c8:18:86:
7f:bf:e9:d7:d8:1f:5a:f7:8b:d5:6e:ac:98:b2:76:90:cd:34:
74:da:cd:a7:03:c7:04:70:29:5a:d1:da:4b:ee:d3:e2:09:54:
df:42:10:53:7e:b6:f8:cb:fa:46:44:6c:d7:cd:0a:cb:44:bf:
13:c1:c3:83:cf:c2:51:92:74:c0:a3:1f:a0:d6:7a:20:59:d8:
dc:6d:3b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:37:19 2026 by rpki-client