Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/2S_ID7M9u_dFUxvYaa-rOKZfxVo.roa
File: 2S_ID7M9u_dFUxvYaa-rOKZfxVo.roa (raw, json)
Hash identifier: azGZRtp2vi+dLaLafqy17TsgwENfpndyykRPxlFzCt8=
Subject key identifier: D9:2F:C8:0F:B3:3D:BB:F7:45:53:1B:D8:69:AF:AB:38:A6:5F:C5:5A
Certificate issuer: /CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Certificate serial: 019F2368BC233926E2D0C6A9FE60A6BCB8F6
Authority key identifier: 79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/2S_ID7M9u_dFUxvYaa-rOKZfxVo.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17782
IP address blocks: 185.192.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bc:23:39:26:e2:d0:c6:a9:fe:60:a6:bc:b8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d92fc80fb33dbbf745531bd869afab38a65fc55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:d1:27:fd:2b:7b:44:5e:e0:84:c6:1a:bf:
0d:0a:a8:04:fb:31:04:0f:06:8a:9e:b9:59:e1:6b:
83:78:33:e6:f8:71:2e:78:8e:75:75:de:31:9b:9c:
ac:76:44:c7:38:ae:36:a1:21:95:ab:88:72:a8:cf:
93:1b:73:5a:3a:ee:fe:c7:07:0f:e4:6b:ca:5d:79:
ef:87:e6:d0:08:7e:67:3f:dc:27:ef:f3:57:63:bc:
f0:c9:9e:f2:59:d0:0b:70:85:98:c3:17:06:60:17:
d3:b3:da:46:0a:f9:5b:9c:41:d6:f4:c7:21:e2:6c:
a7:be:61:7d:aa:83:63:fa:e7:f5:92:a2:87:89:47:
40:9f:5e:de:28:c4:85:7f:86:05:d5:81:31:ab:14:
3c:e7:de:e3:71:a3:39:9c:7c:ba:b4:cd:5d:fd:08:
9e:c4:7e:0e:95:b6:f5:8e:06:12:81:40:77:61:44:
21:87:3c:c9:8d:df:2d:4b:cf:39:90:77:96:99:c1:
91:82:8c:f0:60:e3:92:35:6d:44:86:05:28:ea:df:
d3:e1:04:87:b5:07:97:10:8d:73:61:9b:5d:18:ae:
87:39:d4:f9:b4:97:9d:36:78:7c:41:70:13:6b:85:
f4:59:8e:74:bc:12:93:46:d2:de:1f:96:c5:db:74:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2F:C8:0F:B3:3D:BB:F7:45:53:1B:D8:69:AF:AB:38:A6:5F:C5:5A
X509v3 Authority Key Identifier:
keyid:79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/2S_ID7M9u_dFUxvYaa-rOKZfxVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
58:c7:fa:4c:6c:6c:e9:4a:de:29:3e:9e:de:14:c5:4c:80:89:
79:ff:1c:dc:3d:0e:61:91:ee:05:22:86:a1:0d:bb:bf:7b:80:
d1:35:5f:61:1d:f6:2c:e9:e0:db:41:e8:aa:f2:c6:f5:66:5e:
5d:46:48:c7:03:ac:a7:7d:05:7c:5a:11:df:d0:25:b8:03:7d:
bf:1a:d9:b7:d9:1a:4e:f5:5f:65:cb:04:7e:95:e9:87:90:f2:
3d:00:74:39:b3:ba:29:fe:4a:0d:13:d1:9a:1c:66:d7:20:c0:
fb:52:b5:6d:78:f5:7d:7f:ea:f5:17:be:6c:76:9d:ad:89:7f:
58:8a:20:35:98:9a:9e:41:c9:76:4d:b9:92:e2:4b:31:73:6f:
5b:a2:c3:5e:ba:c2:d0:f0:1d:02:f0:fb:c9:16:f8:f6:b8:45:
89:9f:19:64:48:2d:29:06:51:dc:6b:35:d1:f2:0a:09:ee:34:
63:67:09:92:3f:39:be:db:33:0f:45:cd:52:2b:d8:66:d6:27:
5a:3d:f6:6b:e6:1c:4b:1b:92:05:f3:6d:ad:79:d0:85:56:51:
00:c7:b3:f0:ee:a4:d2:19:fb:cd:8b:aa:bd:c8:5a:9e:87:21:
fb:59:b6:18:42:cd:45:5a:0e:97:1c:b5:8a:ea:07:81:9d:4d:
42:0b:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:31:19 2026 by rpki-client