Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/2DdvN_iUNqmYcEBq-ZCFq6-CizQ.roa
File: 2DdvN_iUNqmYcEBq-ZCFq6-CizQ.roa (raw, json)
Hash identifier: LqeaKg62lpX0ChDrc0EwkogKrlU38oKoyGWR5W51V/g=
Subject key identifier: D8:37:6F:37:F8:94:36:A9:98:70:40:6A:F9:90:85:AB:AF:82:8B:34
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019FB3B5FA4FFD5682FACAA81A86E0AC259B
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/2DdvN_iUNqmYcEBq-ZCFq6-CizQ.roa
Signing time: Thu 30 Jul 2026 15:47:55 +0000
ROA not before: Thu 30 Jul 2026 15:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42473
IP address blocks: 159.195.0.0/24 maxlen: 24
159.195.90.0/24 maxlen: 24
159.195.155.0/24 maxlen: 24
159.195.160.0/19 maxlen: 19
159.195.220.0/24 maxlen: 24
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:b5:fa:4f:fd:56:82:fa:ca:a8:1a:86:e0:ac:25:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jul 30 15:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8376f37f89436a99870406af99085abaf828b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:74:ec:15:1b:ea:d6:8d:af:94:63:58:f1:
7a:6c:9f:52:4e:19:88:de:5b:99:b7:91:db:9a:e6:
88:ca:64:2d:c8:36:b4:6a:4c:66:44:c1:3d:3f:7a:
1e:ae:71:c6:81:f3:e3:a2:27:ab:85:68:08:0a:7c:
51:c7:64:a6:94:02:f1:c9:c5:a8:5a:62:64:3a:39:
bd:14:51:94:ac:72:5b:03:92:19:78:a3:2d:4f:42:
b2:ce:e0:98:9f:cf:16:2d:da:58:7e:74:06:1e:01:
1a:fa:9c:57:6d:a1:94:5b:11:01:c2:00:df:59:ed:
d9:66:cd:80:52:9f:8d:89:20:7e:cd:ac:c1:de:c5:
94:0c:90:80:c9:56:1e:ad:28:ea:8b:39:11:a7:52:
88:46:00:c9:0d:30:56:0d:7d:93:e3:1f:ae:9a:3e:
de:37:32:b2:e7:41:be:b2:ee:4c:40:ab:06:d2:2b:
26:92:b9:07:6b:fc:54:15:06:b6:03:d9:f7:b9:11:
15:81:b3:d4:85:e6:37:d2:46:0d:6c:07:2a:82:41:
d9:5b:7d:9e:99:64:c8:92:94:c3:87:52:63:1a:be:
84:e0:6d:3a:3c:72:91:97:16:d4:ca:17:80:db:d6:
a4:f6:a0:3c:b7:27:87:80:e3:4c:3f:39:42:9e:09:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:37:6F:37:F8:94:36:A9:98:70:40:6A:F9:90:85:AB:AF:82:8B:34
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/2DdvN_iUNqmYcEBq-ZCFq6-CizQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.195.0.0/24
159.195.90.0/24
159.195.155.0/24
159.195.160.0/19
159.195.220.0/24
IPv6:
2a0a:4cc0::/43
2a0a:4cc0:40::/43
2a0a:4cc0:80::/43
2a0a:4cc0:c0::/43
2a0a:4cc0:2000::/48
Signature Algorithm: sha256WithRSAEncryption
0e:29:6b:b3:33:13:65:de:31:a0:06:d5:05:2f:52:8c:86:eb:
f9:14:c0:0a:cb:7c:c9:41:e0:8b:7a:8c:05:c1:ff:8d:0b:dc:
df:a6:cd:e5:48:5d:0a:8b:f4:da:64:e1:5e:29:48:82:8a:1d:
7e:7e:25:e2:18:1d:fa:45:99:3f:ef:a3:4f:65:fb:a4:32:6a:
b6:d7:93:c6:99:0b:33:e5:7c:8b:d1:e3:9e:ed:41:88:11:91:
2d:d2:3f:3d:03:f1:1f:a3:99:ab:28:2b:12:31:62:4e:35:8c:
35:e9:87:67:8b:d3:24:65:bd:d6:71:02:e9:34:c8:c0:ba:8a:
e7:c2:ab:55:f6:0a:1b:b1:e3:dc:b3:d3:37:8e:59:73:71:1f:
83:d1:75:68:79:f1:93:c3:85:be:a7:33:1a:f5:ff:2a:c5:af:
8c:f0:a9:13:c4:6f:f2:05:6d:ae:a0:46:ed:ea:f4:3f:77:30:
25:d5:70:65:b2:45:bd:b8:2d:1f:4a:cb:b3:c9:9b:a5:7e:d3:
64:4f:88:33:c5:4a:20:a1:45:42:1b:98:1a:7a:94:01:88:90:
51:98:eb:75:c4:b3:f6:5d:66:9b:ef:f7:62:c7:9e:a4:b4:e3:
7c:a4:8f:75:35:00:48:b6:76:a1:16:e5:f9:a5:0d:dd:8f:82:
26:a8:42:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:35 2026 by rpki-client