Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/2CbQxQdIR56oI33mXsNPJysh2OI.roa
File: 2CbQxQdIR56oI33mXsNPJysh2OI.roa (raw, json)
Hash identifier: joXS8xA5s2yEiWLT1AkcUqDIoaCDRVGH7P/aChB2ymU=
Subject key identifier: D8:26:D0:C5:07:48:47:9E:A8:23:7D:E6:5E:C3:4F:27:2B:21:D8:E2
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 019FF083B5137F51E0614583A1D44A9D46E1
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/2CbQxQdIR56oI33mXsNPJysh2OI.roa
Signing time: Tue 11 Aug 2026 11:09:51 +0000
ROA not before: Tue 11 Aug 2026 11:09:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 5.157.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:83:b5:13:7f:51:e0:61:45:83:a1:d4:4a:9d:46:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Aug 11 11:09:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d826d0c50748479ea8237de65ec34f272b21d8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:79:0f:fd:60:be:96:5e:03:be:ab:00:a3:
1a:66:1f:10:f3:af:ee:5a:0d:69:65:ea:10:99:28:
bb:3a:18:7f:3b:49:d8:c2:52:93:3a:06:a7:63:ea:
6e:ce:89:01:06:7d:ff:2c:00:18:d5:27:db:f9:a0:
8d:75:21:62:ae:d7:cb:9c:a4:43:c4:f5:21:b0:47:
9a:aa:98:21:4f:6c:e1:bf:c0:87:23:79:cd:01:78:
b9:c5:0c:be:42:e9:b7:c8:aa:2e:30:22:54:24:5c:
ab:55:10:7c:c4:85:30:ff:1c:98:5b:b5:da:c2:d7:
ba:f4:af:2d:38:47:03:2b:59:c1:b5:e1:62:d7:f5:
7a:da:9a:cf:ab:9d:00:a4:08:d2:d6:97:1d:8d:ab:
21:8e:05:d4:17:cb:a1:c9:49:2a:b9:9e:f0:3f:0b:
a3:02:7d:64:44:7e:81:9a:30:60:c1:95:45:6a:ed:
d6:1e:b4:4e:d0:3b:91:86:42:93:ad:83:9f:77:c7:
68:37:19:6c:ad:ec:7c:a1:a9:40:e8:38:1c:b7:b8:
f4:55:a3:02:d3:b9:9c:b6:eb:cc:8f:e5:07:5f:31:
c2:08:8d:e3:2e:19:de:3c:ce:e3:f3:18:d4:d4:f3:
56:3f:a2:08:44:78:a2:60:9a:75:c3:f7:3a:00:dc:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:26:D0:C5:07:48:47:9E:A8:23:7D:E6:5E:C3:4F:27:2B:21:D8:E2
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/2CbQxQdIR56oI33mXsNPJysh2OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.128.0/24
Signature Algorithm: sha256WithRSAEncryption
78:6b:a1:84:c0:71:af:33:40:36:5e:52:e2:4f:2a:7b:e2:ad:
e6:90:2a:6b:0f:d6:a9:9b:87:26:51:f2:64:23:b5:8f:06:27:
62:31:8c:c1:35:16:ca:83:c2:4a:94:1e:ff:9a:55:84:8f:66:
1a:ee:72:35:bf:f2:93:f7:0e:e6:8d:1e:58:e2:ac:ca:b6:08:
37:9f:f9:9c:0a:5b:b4:02:cf:3c:a3:f8:23:95:73:85:4c:80:
f4:03:c7:6f:20:4a:f2:55:6e:4c:b7:2b:57:d0:aa:92:94:d9:
f6:14:dc:b5:06:34:81:52:6e:2a:4a:b6:76:19:ac:45:a4:bf:
8a:ee:93:09:b4:05:3a:82:cb:67:75:8d:82:8c:59:e4:31:a2:
cb:e2:62:ef:da:30:95:a9:00:4e:b3:cf:e2:a8:8e:6c:8f:4d:
8d:84:7f:db:73:23:2a:1b:4a:0d:34:81:2e:87:0f:84:27:ba:
73:0c:66:8b:6b:3f:74:07:57:52:2d:fe:d9:ca:3c:4a:55:9b:
3e:ac:cd:62:25:9c:fb:ad:5c:b2:87:99:81:dc:64:2c:72:70:
4d:39:f6:1e:43:a4:21:af:d8:24:89:0a:34:6f:54:4d:88:e4:
b0:12:5e:ab:3d:1d:15:8b:4c:e5:44:41:48:82:fc:03:ea:d0:
0d:9e:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:33:39 2026 by rpki-client