Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/DdeGusYUXF2HxeIl4KxAYXCkAx0.roa
File: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (raw, json)
Hash identifier: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=
Subject key identifier: 0D:D7:86:BA:C6:14:5C:5D:87:C5:E2:25:E0:AC:40:61:70:A4:03:1D
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 019DAFEF44B1EA9D6F1CE4A081EB2F77E852
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/DdeGusYUXF2HxeIl4KxAYXCkAx0.roa
Signing time: Tue 21 Apr 2026 12:06:26 +0000
ROA not before: Tue 21 Apr 2026 12:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62610
IP address blocks: 2a01:f2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 12:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:ef:44:b1:ea:9d:6f:1c:e4:a0:81:eb:2f:77:e8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Apr 21 12:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dd786bac6145c5d87c5e225e0ac406170a4031d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:38:98:a5:12:bb:29:3d:58:5f:c4:0b:cf:
6a:6f:be:e8:36:77:d3:22:5d:54:6c:f3:f6:af:a2:
01:9a:f9:0a:f1:a3:ae:b0:a8:a6:d4:56:34:35:2f:
32:0f:24:b3:61:7e:d8:3e:50:72:b6:ce:53:eb:3d:
45:54:2d:c6:b7:1e:20:dd:25:95:0c:09:a3:47:36:
90:48:6a:c2:84:14:88:90:d6:e2:a5:51:6d:c3:23:
eb:c9:78:71:06:34:42:51:6f:82:f3:71:61:17:82:
12:62:76:5d:73:de:f1:07:55:15:b9:c1:23:f7:9e:
65:33:e2:ca:5f:8c:85:a6:a7:7c:e6:3c:88:f3:39:
9d:06:20:7c:57:26:b6:0c:5b:f2:ec:a5:95:ab:89:
73:ad:30:2a:2c:b1:04:90:b7:58:75:33:6d:8a:2a:
8f:0f:cd:66:ae:17:fb:61:3f:15:25:d7:49:aa:ec:
b3:52:5f:37:ce:7e:df:af:09:95:48:0e:c4:99:d1:
2d:72:d8:e5:f4:e1:62:b1:1d:f8:46:df:95:9e:2e:
a4:d4:d6:a2:db:1f:1a:61:21:f3:82:aa:fa:20:12:
f5:f0:e9:bc:de:79:aa:41:8c:43:cd:18:74:4b:1a:
da:1d:a9:15:a2:e3:87:83:50:87:7a:08:e2:f2:0a:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:86:BA:C6:14:5C:5D:87:C5:E2:25:E0:AC:40:61:70:A4:03:1D
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/DdeGusYUXF2HxeIl4KxAYXCkAx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:42:e0:03:7f:da:d8:eb:e8:fd:73:f6:b5:ef:5b:e7:49:2c:
be:03:54:41:f4:d5:c4:6f:f1:87:ba:78:db:bb:8d:5d:71:2a:
83:1c:20:e2:60:60:6b:87:e7:f5:35:f3:4a:fa:41:7a:da:88:
c7:1a:a7:81:c5:10:d0:71:6c:c0:07:39:f1:b9:6e:ca:43:13:
35:70:60:a6:52:84:37:00:76:18:ee:a9:4d:6d:a0:1f:88:84:
f3:0d:d4:5d:ba:96:7a:f7:7e:94:0b:b9:35:4e:bc:53:fb:9e:
43:c0:b7:b0:9e:58:f3:bd:fe:e6:32:82:ca:d3:86:31:8b:13:
5a:e7:ec:a6:48:98:d0:1c:46:9c:2f:b5:5c:fd:05:e9:2c:1c:
41:10:75:83:9e:5d:7a:d8:d6:15:a2:20:74:f9:ac:ff:e2:b4:
2f:e8:10:16:29:7f:61:99:eb:e6:14:be:c2:64:fe:9c:9a:1f:
22:10:e5:2d:0c:d4:07:72:96:12:57:b3:64:2b:0a:29:c8:38:
e5:a5:66:4d:29:36:76:8e:8e:90:82:f4:5b:00:40:25:73:37:
e3:e5:ca:e2:67:4d:d9:6f:0e:ca:7f:cc:3c:46:a2:75:30:26:
39:cf:fa:39:b4:ba:8d:52:c9:f1:69:75:ee:e1:09:3e:2e:2c:
6a:fa:bd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 18:01:04 2026 by rpki-client