Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/2bqMh3zh3RMelkk-rBQrB41LTWE.roa
File: 2bqMh3zh3RMelkk-rBQrB41LTWE.roa (raw, json)
Hash identifier: blAJOiksKE/Qdij1yqoH9hI9PosYnUGMXIxTtQT9ffw=
Subject key identifier: D9:BA:8C:87:7C:E1:DD:13:1E:96:49:3E:AC:14:2B:07:8D:4B:4D:61
Certificate issuer: /CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Certificate serial: 019F23682FE3F5B4D6C7D4596BFAA64AE7C6
Authority key identifier: 2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/2bqMh3zh3RMelkk-rBQrB41LTWE.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201265
IP address blocks: 185.32.160.0/22 maxlen: 24
185.32.161.0/24 maxlen: 24
185.32.162.0/23 maxlen: 23
2a00:a5a1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2f:e3:f5:b4:d6:c7:d4:59:6b:fa:a6:4a:e7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9ba8c877ce1dd131e96493eac142b078d4b4d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:e7:0d:4c:75:74:46:91:12:72:2c:f1:f6:
61:44:f0:7b:95:7b:3f:fe:21:32:31:ca:da:34:68:
71:25:be:f6:74:1b:5f:42:e3:95:a0:32:97:26:d3:
8c:08:77:fd:f0:d4:83:86:37:1c:88:5b:a6:60:c1:
7b:3c:1a:3c:27:eb:cb:3a:86:2d:0d:c4:66:f4:b4:
4b:11:57:60:a9:d6:82:d6:28:0a:01:60:c8:dc:52:
52:65:69:2a:2e:4f:3f:10:cb:9f:fe:ba:a3:7e:07:
53:86:f9:50:ed:dd:26:b5:bb:6b:ef:07:a2:59:70:
28:d6:ed:e8:9e:3d:42:00:76:c6:12:55:ca:4f:c5:
3c:01:51:6f:71:66:5f:88:58:8b:47:c2:32:d1:ad:
5e:af:c6:3b:81:49:ac:82:32:5f:e2:59:c3:27:59:
a5:b8:4c:dc:67:0b:9f:1d:f1:62:a4:9e:c4:65:61:
3f:63:7a:5a:b7:4e:5b:d9:72:62:17:05:65:16:ce:
53:cc:fb:66:c6:be:5d:9e:85:27:69:77:fd:c6:b5:
41:7b:a3:cf:35:de:f3:82:ec:30:48:ff:d5:4a:0a:
5c:7d:9c:ec:ba:3c:7e:52:20:b1:5a:bf:2c:ca:3f:
31:03:1d:c4:c5:6c:c0:f5:aa:ce:56:b1:e4:6b:d4:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BA:8C:87:7C:E1:DD:13:1E:96:49:3E:AC:14:2B:07:8D:4B:4D:61
X509v3 Authority Key Identifier:
keyid:2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/2bqMh3zh3RMelkk-rBQrB41LTWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.160.0/22
IPv6:
2a00:a5a1::/32
Signature Algorithm: sha256WithRSAEncryption
2a:0a:72:d3:a5:6a:86:90:92:f8:8c:0e:14:9e:84:0b:2a:64:
10:46:a9:50:82:c3:9f:b8:80:16:b7:f1:8a:ba:be:be:0d:fa:
ab:e8:6b:a3:c8:17:22:a8:ed:7a:53:c3:b5:46:3e:c3:40:9e:
79:4d:0b:fe:fb:b5:e7:e3:e6:d7:69:08:19:de:7f:79:6d:b8:
04:83:94:63:fc:61:79:36:13:1b:3e:b9:5f:8b:ff:69:98:c0:
74:99:d4:71:84:04:e6:74:31:05:6e:46:4f:ef:30:b0:96:66:
14:0d:92:bb:13:5d:9e:f8:eb:3e:51:cc:10:e1:b0:ed:7a:54:
a4:8b:69:dc:56:92:17:6d:f8:f6:34:80:37:b3:25:cb:cf:40:
2b:76:4f:54:dd:35:c7:9b:b2:f4:61:b1:ca:78:40:c8:7f:88:
87:af:a8:06:db:45:d4:a0:36:20:20:1a:aa:44:04:88:36:cf:
d0:eb:e9:08:23:7e:63:61:44:e5:3c:94:63:c5:e2:e4:ad:41:
48:0d:4e:dc:1a:f0:4d:2f:31:de:d0:0c:48:74:71:a8:78:3d:
1e:8e:81:58:27:a9:c0:f6:3f:20:f8:15:40:3f:73:f3:e9:b9:
42:6d:ab:38:fc:9b:07:fc:6d:73:02:c0:28:94:b1:35:98:ff:
a2:2d:7e:45
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaC/j9bTWx9RZa/qmSufGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmUxMmY0NmI1ZTZiOTYwYzVjZTgxMzFiMWQzZTUzMmYw
NWE4YWQwHhcNMjYwNzAyMTUxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWJhOGM4NzdjZTFkZDEzMWU5NjQ5M2VhYzE0MmIwNzhkNGI0ZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAombnDUx1dEaREnIs8fZhRPB7lXs/
/iEyMcraNGhxJb72dBtfQuOVoDKXJtOMCHf98NSDhjcciFumYMF7PBo8J+vLOoYt
DcRm9LRLEVdgqdaC1igKAWDI3FJSZWkqLk8/EMuf/rqjfgdThvlQ7d0mtbtr7wei
WXAo1u3onj1CAHbGElXKT8U8AVFvcWZfiFiLR8Iy0a1er8Y7gUmsgjJf4lnDJ1ml
uEzcZwufHfFipJ7EZWE/Y3pat05b2XJiFwVlFs5TzPtmxr5dnoUnaXf9xrVBe6PP
Nd7zguwwSP/VSgpcfZzsujx+UiCxWr8syj8xAx3ExWzA9arOVrHka9Sg5QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNm6jId84d0THpZJPqwUKweNS01hMB8GA1UdIwQY
MBaAFC6+EvRrXmuWDFzoExsdPlMvBaitMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHI0UzlHdGVhNVlNWE9nVEd4MC1VeThGcUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYt
MTE5OTQyZjNkN2E3LzEvMmJxTWgzemgzUk1lbGtrLXJCUXJCNDFMVFdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYtMTE5OTQyZjNkN2E3
LzEvTHI0UzlHdGVhNVlNWE9nVEd4MC1VeThGcUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSCgMA0E
AgACMAcDBQAqAKWhMA0GCSqGSIb3DQEBCwUAA4IBAQAqCnLTpWqGkJL4jA4UnoQL
KmQQRqlQgsOfuIAWt/GKur6+Dfqr6GujyBciqO16U8O1Rj7DQJ55TQv++7Xn4+bX
aQgZ3n95bbgEg5Rj/GF5NhMbPrlfi/9pmMB0mdRxhATmdDEFbkZP7zCwlmYUDZK7
E12e+Os+UcwQ4bDtelSki2ncVpIXbfj2NIA3syXLz0Ardk9U3TXHm7L0YbHKeEDI
f4iHr6gG20XUoDYgIBqqRASINs/Q6+kII35jYUTlPJRjxeLkrUFIDU7cGvBNLzHe
0AxIdHGoeD0ejoFYJ6nA9j8g+BVAP3Pz6blCbas4/JsH/G1zAsAolLE1mP+iLX5F
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:58:21 2026 by rpki-client