Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n2u54e78Dbzb0tPvGCVEaxvKU7Q.roa
File: n2u54e78Dbzb0tPvGCVEaxvKU7Q.roa (raw, json)
Hash identifier: MeY/eC5JNYaeAELiUO7ooVoCdPY8uNC7ovyewZ/Vfqc=
Subject key identifier: 9F:6B:B9:E1:EE:FC:0D:BC:DB:D2:D3:EF:18:25:44:6B:1B:CA:53:B4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E7007EDD25BDDCD228486E5537AEB9086
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n2u54e78Dbzb0tPvGCVEaxvKU7Q.roa
Signing time: Thu 28 May 2026 19:20:28 +0000
ROA not before: Thu 28 May 2026 19:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55177
IP address blocks: 37.202.195.0/24 maxlen: 24
151.242.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:70:07:ed:d2:5b:dd:cd:22:84:86:e5:53:7a:eb:90:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 28 19:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f6bb9e1eefc0dbcdbd2d3ef1825446b1bca53b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:2b:c3:39:c6:6d:8a:1e:45:e0:7f:e2:b9:
8f:d9:65:69:80:c1:cc:8b:5b:08:0e:73:81:86:61:
a5:96:b1:5b:0c:43:d8:9d:1e:07:99:c9:a2:97:44:
63:32:7f:bf:10:14:6f:6b:a2:82:40:25:13:cb:cb:
3f:c9:1c:89:84:88:47:6a:7b:db:fb:40:e5:d3:52:
f8:50:50:eb:fd:5e:4c:6f:8c:c9:4c:3f:93:58:ac:
25:e8:86:7b:73:10:c6:9f:6b:1f:44:bf:96:27:93:
bf:80:3d:21:9c:09:56:21:5b:0f:25:81:40:74:05:
42:10:ac:4b:5b:bf:18:62:1b:96:cf:e8:aa:53:bc:
d2:ed:3a:77:74:13:6d:79:4a:f0:2d:09:e9:75:76:
63:7e:29:54:ee:d9:40:8d:84:10:f5:1c:b6:1b:7c:
b2:25:86:3b:22:37:50:74:20:fc:79:a6:61:b3:1a:
a1:41:09:c5:19:f0:80:99:bf:21:2b:14:a3:b1:bf:
94:fb:13:bc:6e:b3:3d:60:19:ad:e1:35:31:84:1f:
a0:34:c3:f9:a9:04:ad:77:f8:77:9b:ea:40:09:fa:
4f:0b:9d:62:6a:be:b6:d1:01:46:9c:de:59:77:f4:
09:5d:05:00:6b:c3:28:38:cc:d8:2a:ea:e8:86:7f:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:B9:E1:EE:FC:0D:BC:DB:D2:D3:EF:18:25:44:6B:1B:CA:53:B4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n2u54e78Dbzb0tPvGCVEaxvKU7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.195.0/24
151.242.123.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b8:72:07:04:17:df:db:9f:aa:ee:12:a6:b7:80:35:1f:11:
f9:52:7d:83:0a:51:cb:bc:f7:a4:f8:47:b3:be:87:08:85:7c:
20:24:1c:72:68:8c:b0:aa:f1:89:17:70:7b:1a:d4:12:a2:a1:
7b:f1:b1:e5:9e:bd:bb:74:ff:da:de:7e:fb:35:4c:79:2e:74:
33:34:5b:ce:e2:8c:9d:09:e3:d8:4b:ba:28:bb:58:e5:a9:01:
d8:f9:0a:a4:23:a6:12:94:af:0a:7e:b7:8f:9a:10:7a:c9:33:
57:c1:13:28:9c:ce:87:c3:83:e0:ef:da:4b:ea:9b:66:f0:e5:
40:7a:b1:45:0f:ad:3c:90:a4:86:77:ea:bc:75:1c:f1:0b:77:
3a:df:6f:10:6e:59:26:1b:78:0f:98:8f:68:e0:b9:23:75:b0:
9f:e9:8e:19:be:99:1e:6e:d4:b0:60:7c:c2:30:ac:53:0c:2e:
8f:00:65:da:29:ed:da:25:32:c6:86:a0:bf:a3:33:db:6e:2b:
47:d7:fe:18:89:a2:22:ba:77:86:f2:2b:97:b0:ee:fd:6c:21:
bc:c2:b3:0c:ef:a9:ac:d1:24:8b:8b:49:10:45:8a:8e:a4:26:
a5:8f:44:f8:23:d8:51:af:c0:52:86:9c:d4:4c:3e:64:cc:84:
64:9d:d8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:34 2026 by rpki-client