Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2BoUvh_GbNXWKhjcWBS_yTXM_no.roa
File: 2BoUvh_GbNXWKhjcWBS_yTXM_no.roa (raw, json)
Hash identifier: MtuK0RhBI+g+mJx4Xe5+O3ZgD8e9nOn294SgFs9tufQ=
Subject key identifier: D8:1A:14:BE:1F:C6:6C:D5:D6:2A:18:DC:58:14:BF:C9:35:CC:FE:7A
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 0198E69F1DDA69BBC0682C146DD7B215AF33
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2BoUvh_GbNXWKhjcWBS_yTXM_no.roa
Signing time: Tue 26 Aug 2025 13:44:04 +0000
ROA not before: Tue 26 Aug 2025 13:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.247.113.0/24 maxlen: 24
89.149.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:9f:1d:da:69:bb:c0:68:2c:14:6d:d7:b2:15:af:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Aug 26 13:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d81a14be1fc66cd5d62a18dc5814bfc935ccfe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:b0:99:12:93:d3:6f:e9:6a:40:33:73:0f:
bb:c9:2e:3c:02:ca:c9:d0:98:cb:8e:10:f5:62:44:
71:c2:c5:1a:2c:18:8d:04:a1:91:d4:80:05:1b:c8:
b2:2d:53:48:04:10:32:8e:c7:d0:f3:0b:2f:5b:dc:
0b:0f:ea:c6:4c:51:05:38:73:6a:2f:1f:5e:c5:8e:
57:50:4f:b8:da:b2:6f:4a:9d:16:7f:a5:94:0c:23:
5a:2b:fc:d4:16:bd:c7:0b:75:dc:c0:50:06:a0:26:
1b:47:ee:ad:9e:2a:a8:c9:a7:27:a9:96:48:04:26:
9d:8b:bb:db:c7:20:28:7c:31:aa:45:cc:55:e0:ce:
55:93:b5:10:85:d4:6d:e5:49:d9:9c:41:d5:cb:0c:
1b:a4:64:eb:57:3f:da:33:9a:cd:52:86:a4:0b:7d:
6e:90:72:ec:46:db:66:f7:22:a5:bb:56:1e:03:ff:
a0:e1:cd:44:5d:fc:cb:7c:dc:0e:3e:29:0f:d4:9c:
36:8e:0d:01:54:58:e5:ed:f4:4d:4b:dd:c1:f6:7e:
70:c7:41:0f:b0:c7:13:99:15:b2:b5:9b:2c:3c:94:
8a:51:4c:bc:63:57:b0:71:38:57:8a:0b:7b:16:bf:
82:1e:9b:a9:5a:08:da:da:20:46:20:5b:57:04:c2:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1A:14:BE:1F:C6:6C:D5:D6:2A:18:DC:58:14:BF:C9:35:CC:FE:7A
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2BoUvh_GbNXWKhjcWBS_yTXM_no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.113.0/24
89.149.18.0/24
Signature Algorithm: sha256WithRSAEncryption
38:70:44:e8:4c:26:5d:b3:0c:04:dd:8a:46:54:87:44:8e:bd:
07:7c:f0:7a:71:11:10:2a:95:ee:38:b4:06:4f:71:65:57:c8:
8d:71:21:42:e6:79:85:76:86:2a:ea:af:83:08:d0:44:5a:e0:
1f:96:5e:73:66:51:9c:ab:5a:85:61:0e:a7:b9:fa:2d:40:7a:
45:4b:e1:9c:42:e4:d9:6d:e6:ef:70:73:2a:33:b2:16:2e:69:
bc:2c:57:fe:3f:a5:bc:c1:2b:dc:e6:e1:00:00:73:ad:90:b7:
ea:27:28:83:6c:28:84:d2:4f:cc:fb:d6:2e:4e:58:cb:7d:d0:
c6:ca:20:6a:f8:1a:a1:1f:f4:d9:e1:08:1f:d0:f7:7d:d5:79:
3b:b5:3e:62:52:11:59:21:e6:a5:b7:f8:9c:57:c0:c6:7a:5d:
32:49:ba:9b:b5:8c:06:2c:e2:0b:b2:ab:f1:dd:cc:f5:df:75:
0e:2f:19:a8:ae:69:3a:ce:71:bc:9e:b6:1e:ee:6a:f5:dc:9a:
66:85:eb:a3:48:d0:5d:10:b8:cb:ac:33:1f:fa:e2:fb:9d:5c:
93:7b:27:3d:15:e7:af:d1:da:4c:e9:67:11:52:4d:06:8f:de:
2b:28:9b:9a:a8:f3:9a:34:c0:86:fc:8e:c1:44:ea:8f:4c:ea:
9f:17:5d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:40:27 2025 by rpki-client