Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/2yu0ObbMzefwvoYMAE7hgfoDBu8.roa
File: 2yu0ObbMzefwvoYMAE7hgfoDBu8.roa (raw, json)
Hash identifier: 7IliMuEfTd77oAXdQXi1jLMCuSMXg0z01MPP8W+nMCE=
Subject key identifier: DB:2B:B4:39:B6:CC:CD:E7:F0:BE:86:0C:00:4E:E1:81:FA:03:06:EF
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F2368628A0B09AA09E2726DF515C95857
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/2yu0ObbMzefwvoYMAE7hgfoDBu8.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 189.74.120.0/24 maxlen: 24
189.74.121.0/24 maxlen: 24
191.44.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:62:8a:0b:09:aa:09:e2:72:6d:f5:15:c9:58:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db2bb439b6cccde7f0be860c004ee181fa0306ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:57:9c:de:16:1d:ce:0a:92:35:bc:78:3e:
0e:06:68:3c:91:36:ea:ee:98:d6:89:80:7b:3c:72:
63:30:30:8c:00:b7:37:bf:d5:fb:0c:49:22:90:70:
00:31:2a:89:c2:4b:2f:07:a0:65:5e:e7:c2:cd:84:
59:b9:37:86:ea:b2:da:44:63:9f:36:01:53:ff:90:
a3:1f:5d:0c:07:f8:f9:1b:b3:83:82:11:1c:de:dd:
cc:65:17:c8:2f:c8:29:4f:80:bf:e4:3f:94:82:2e:
70:fb:59:54:fe:d5:c8:a6:32:69:6b:de:c5:11:d2:
49:0c:71:69:f0:71:53:21:34:91:06:77:32:f3:26:
32:6e:88:a2:0a:9d:e8:c2:8d:28:7b:ed:ed:ac:9c:
1b:27:0c:f7:f1:47:45:9c:d9:a1:b4:aa:98:e4:13:
e8:d0:d9:4d:93:94:53:e1:c9:0a:af:33:11:8d:f1:
e8:06:45:e8:43:f2:cb:18:fb:1c:b9:86:75:23:1b:
71:08:39:8a:a7:5b:5d:65:37:da:99:a3:ba:c2:ad:
de:27:01:e0:79:ee:19:29:91:81:f8:8f:c6:11:92:
fe:9e:fc:fe:a9:c1:47:92:45:7a:67:5f:a2:da:9f:
1c:21:49:bf:15:19:ec:a1:5d:59:42:9c:6b:9f:a1:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2B:B4:39:B6:CC:CD:E7:F0:BE:86:0C:00:4E:E1:81:FA:03:06:EF
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/2yu0ObbMzefwvoYMAE7hgfoDBu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.120.0/23
191.44.40.0/22
Signature Algorithm: sha256WithRSAEncryption
62:92:1a:d4:23:1d:0f:dc:e8:9f:d8:68:9a:8e:af:3d:00:c5:
85:5f:91:4e:93:91:1a:1c:ec:24:9a:be:5d:76:9a:2d:4d:a5:
19:e0:0d:f0:fe:68:9b:f5:3d:6b:b0:f3:29:8a:f0:bb:48:a7:
83:15:14:e9:f0:30:75:47:e6:b4:23:cf:a9:fd:43:48:66:c1:
ad:cc:a6:41:d4:c6:93:15:f5:07:d0:44:11:94:8c:43:ba:71:
98:b5:c0:19:40:d1:f2:e4:82:e6:c6:b4:8b:88:46:8b:6e:a9:
9e:af:ac:33:d8:57:1c:a2:72:0b:ad:62:f2:4c:ec:40:c3:1b:
8e:23:80:a3:fe:bd:50:e4:86:ce:6c:5c:ec:57:11:95:90:89:
3f:39:94:1e:b1:a5:b8:05:61:cf:07:17:37:ae:73:9d:7d:9d:
0a:e5:92:2d:f4:68:3d:09:1a:7d:86:e6:b0:72:51:1b:98:6e:
6c:96:2e:ba:04:7f:34:90:c1:d5:7c:dc:fc:e3:c2:5e:86:f7:
e2:33:dc:fa:98:a4:cf:f3:0d:bb:c7:60:0e:c0:41:cd:de:de:
67:75:b4:08:97:c8:7a:95:2b:88:67:2d:dd:29:89:8c:31:00:
a5:42:16:15:e7:ac:af:db:3c:53:28:e1:0a:9b:f8:0c:b9:b2:
51:21:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:46 2026 by rpki-client