Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/v2RhzwzRYxDBxoI8x3qcoCuvcCY.roa
File: v2RhzwzRYxDBxoI8x3qcoCuvcCY.roa (raw, json)
Hash identifier: +dNdFFmraUSumCJQ+HT3ZgjMQ3xG8lfqVtX8iY6CtK8=
Subject key identifier: BF:64:61:CF:0C:D1:63:10:C1:C6:82:3C:C7:7A:9C:A0:2B:AF:70:26
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 01A06311B2F310C8A4E06245FF4F001A7AA6
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/v2RhzwzRYxDBxoI8x3qcoCuvcCY.roa
Signing time: Wed 02 Sep 2026 17:01:39 +0000
ROA not before: Wed 02 Sep 2026 17:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208122
IP address blocks: 195.254.180.0/24 maxlen: 24
2a06:78c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:11:b2:f3:10:c8:a4:e0:62:45:ff:4f:00:1a:7a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Sep 2 17:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf6461cf0cd16310c1c6823cc77a9ca02baf7026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:da:ce:69:c9:2f:13:e9:31:90:3b:77:fa:18:
b2:d7:89:fc:c8:fb:5f:f7:18:3e:1c:02:a0:de:f1:
ef:f4:56:8c:f8:e3:92:d7:13:7a:be:7e:f2:4c:ee:
32:28:5a:a0:66:16:0a:80:62:50:e4:5f:87:26:b3:
51:9b:21:87:47:7a:cd:63:90:88:02:c7:83:d2:bc:
18:61:34:69:dd:9e:b7:80:a8:82:35:6b:70:c5:b3:
61:83:9a:dd:2f:4a:d3:a6:41:78:6c:4b:64:5b:69:
ab:37:13:a5:7a:b6:d7:d1:e6:18:73:29:2f:c4:e4:
bc:e6:f9:d2:3b:ad:6f:41:6f:69:87:40:a8:c0:32:
71:47:b7:27:d1:e5:2f:fb:15:d4:f5:12:04:a8:e3:
b4:d1:32:26:3c:71:ea:79:15:aa:8c:0a:00:df:e6:
4b:fc:94:e3:92:c0:6f:07:18:c8:91:67:bb:6a:75:
10:0a:18:8b:94:20:b9:00:87:87:0e:9e:29:3c:35:
ea:57:85:c9:d5:2e:d3:13:89:bd:ca:ad:a6:44:89:
9c:01:76:34:2b:04:d1:2a:c0:c2:66:92:fd:59:3d:
2a:a9:a6:16:b7:34:c8:92:2f:ad:02:18:76:3b:70:
80:d8:b2:36:34:93:27:42:8f:ce:09:38:4b:94:27:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:64:61:CF:0C:D1:63:10:C1:C6:82:3C:C7:7A:9C:A0:2B:AF:70:26
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/v2RhzwzRYxDBxoI8x3qcoCuvcCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.180.0/24
IPv6:
2a06:78c0::/29
Signature Algorithm: sha256WithRSAEncryption
c2:82:9d:e2:42:32:6e:ee:50:dc:9f:08:b3:44:af:c5:69:8b:
c7:95:21:92:85:f6:f7:f7:1a:08:c3:29:4b:3f:5e:30:a0:70:
06:cc:19:47:95:08:35:48:f7:0d:ad:87:0d:65:9f:59:45:9e:
1b:49:4b:1e:5c:39:c5:87:a7:c2:9d:64:f6:fa:60:5c:d7:1d:
fa:95:57:3e:8d:bc:38:08:63:4a:c1:c4:64:e3:f7:17:ed:f3:
14:1e:c8:2f:65:58:dc:e3:ba:76:01:2c:57:28:01:6c:ea:0d:
d2:ca:c7:da:ba:f6:e8:6a:6b:4b:09:d7:e3:2e:ac:f8:e3:d9:
e3:e0:9e:89:25:a7:e1:a7:88:f2:e9:f1:55:e8:62:ff:ae:8e:
b3:85:93:66:75:b9:56:79:b2:9d:03:22:cf:a0:33:bf:eb:3e:
38:90:74:e3:16:45:c1:7e:c8:fc:93:75:95:ea:c6:ba:44:ce:
1f:71:46:4b:8c:7a:fa:d6:0d:d9:6c:55:29:ba:62:35:b4:97:
95:00:e3:19:f3:4b:db:76:61:db:fe:84:86:a8:1c:2b:f5:4a:
8d:66:7c:d7:9c:ef:47:86:c3:b4:f1:01:4f:8d:26:23:2b:f6:
6d:80:3e:f7:88:c3:06:1d:22:14:f3:26:a7:25:1e:77:ff:29:
d9:28:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:24:53 2026 by rpki-client