Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/2rLUhnluwL6wnKGGvW337qHfa_A.roa
File: 2rLUhnluwL6wnKGGvW337qHfa_A.roa (raw, json)
Hash identifier: vOmCdy4dcO0yKPbRSBS7H0+V0LqrEgZGLIPDsfuR8RI=
Subject key identifier: DA:B2:D4:86:79:6E:C0:BE:B0:9C:A1:86:BD:6D:F7:EE:A1:DF:6B:F0
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 019EFEF42F78C6F0F4CA2E760977CE6FB5FF
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/2rLUhnluwL6wnKGGvW337qHfa_A.roa
Signing time: Thu 25 Jun 2026 13:24:36 +0000
ROA not before: Thu 25 Jun 2026 13:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14670
IP address blocks: 65.98.19.0/24 maxlen: 24
65.181.111.0/24 maxlen: 24
65.181.118.0/24 maxlen: 24
88.135.73.0/24 maxlen: 24
185.181.252.0/24 maxlen: 24
190.92.168.0/22 maxlen: 24
190.92.172.0/24 maxlen: 24
190.92.173.0/24 maxlen: 24
192.243.110.0/24 maxlen: 24
192.250.225.0/24 maxlen: 24
192.250.231.0/24 maxlen: 24
193.30.117.0/24 maxlen: 24
195.250.24.0/24 maxlen: 24
195.250.26.0/24 maxlen: 24
195.250.29.0/24 maxlen: 24
199.103.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:f4:2f:78:c6:f0:f4:ca:2e:76:09:77:ce:6f:b5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jun 25 13:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dab2d486796ec0beb09ca186bd6df7eea1df6bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:46:6e:ff:9f:08:00:59:3e:00:87:8e:b2:
c6:15:42:4f:78:8f:3f:95:6f:e4:df:ae:64:17:d1:
cd:d9:b6:6f:e6:86:2a:38:1f:8f:0b:6e:b5:80:9d:
13:89:af:ad:33:e5:54:89:44:a7:f8:92:c6:f1:dd:
c8:f3:49:cb:bb:47:60:3e:e6:cf:5b:e8:ab:63:06:
11:27:44:a5:ad:8a:02:fd:83:67:04:85:9a:b1:ee:
19:3d:96:d6:a5:b0:84:2b:03:32:21:2b:38:47:12:
d3:4e:18:27:d5:1b:3c:ca:7e:99:c0:f6:b8:83:87:
c9:e8:4a:d0:14:68:db:e7:6f:e2:69:b9:a7:5d:40:
d9:d1:aa:77:a9:6a:de:54:2d:b6:92:15:cf:ea:80:
4b:0c:f5:02:54:0c:eb:74:d5:4d:f3:ef:89:72:6f:
ad:2b:3d:25:ad:46:a1:d8:e4:16:95:b8:fc:37:69:
91:5c:6c:f3:51:f6:a8:b9:ac:9a:3c:3c:2d:56:34:
bb:37:ec:8b:b2:41:50:0e:29:b1:5f:c2:7f:c9:5c:
0b:93:c9:90:73:c8:e3:4f:91:e1:2d:77:45:8b:a5:
a6:22:1d:37:20:1e:eb:f9:a0:bd:3b:ef:d0:61:02:
49:40:da:6d:1e:f4:b4:ef:70:5a:28:de:a4:f4:41:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B2:D4:86:79:6E:C0:BE:B0:9C:A1:86:BD:6D:F7:EE:A1:DF:6B:F0
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/2rLUhnluwL6wnKGGvW337qHfa_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.98.19.0/24
65.181.111.0/24
65.181.118.0/24
88.135.73.0/24
185.181.252.0/24
190.92.168.0-190.92.173.255
192.243.110.0/24
192.250.225.0/24
192.250.231.0/24
193.30.117.0/24
195.250.24.0/24
195.250.26.0/24
195.250.29.0/24
199.103.58.0/24
Signature Algorithm: sha256WithRSAEncryption
73:45:44:e9:72:77:bf:31:24:92:50:80:18:a4:41:60:d1:2c:
0e:39:de:17:62:63:19:fd:51:cb:d6:23:42:6d:fb:25:0a:32:
73:df:c2:d2:38:ed:9c:b1:ca:e2:4c:a8:11:d5:72:52:c8:83:
88:e6:4b:d9:ba:39:cc:a4:81:14:77:33:20:11:3a:c8:a2:8d:
6b:50:21:8d:43:05:b0:f5:ab:87:1d:2f:6d:c2:f3:06:c5:b4:
ae:c0:e1:1d:eb:26:28:97:bb:35:18:91:b8:f6:a0:54:70:be:
07:ff:1f:17:e2:59:ec:03:a6:2f:37:88:c6:04:70:14:a2:49:
02:8b:a7:17:29:df:fb:d5:ba:0c:1c:2c:d2:f8:36:40:19:88:
ad:4e:cd:cc:d3:30:d3:c4:de:c0:a2:36:7a:7b:80:22:76:30:
0e:fc:fd:d6:a0:cc:4e:60:d1:bb:e2:4d:d0:af:e4:9f:2a:d6:
6e:00:61:f5:cf:c3:7d:5a:fe:cc:b5:3a:9d:74:38:59:ec:69:
e5:31:ca:20:7d:31:b0:07:9b:79:b9:49:b4:8f:0c:43:4a:07:
67:be:23:38:60:9a:5d:09:5d:32:38:52:a1:f6:7f:2f:88:82:
ac:50:f6:7c:c6:11:31:d7:c5:15:7d:0f:22:99:85:4a:73:fc:
a5:e8:a1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:22 2026 by rpki-client