Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/2X_XjpttEK3bQl4j7fYCt-RHzpw.roa
File: 2X_XjpttEK3bQl4j7fYCt-RHzpw.roa (raw, json)
Hash identifier: OM88Dl+zMgq/IWSZxnAbfPWT5FWybTTu1Ob3xUFojgk=
Subject key identifier: D9:7F:D7:8E:9B:6D:10:AD:DB:42:5E:23:ED:F6:02:B7:E4:47:CE:9C
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 01A0F78AB9EE3718E1A5E8D8BC7B063EE946
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/2X_XjpttEK3bQl4j7fYCt-RHzpw.roa
Signing time: Thu 01 Oct 2026 12:57:38 +0000
ROA not before: Thu 01 Oct 2026 12:57:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39134
IP address blocks: 23.105.224.0/19 maxlen: 24
23.111.32.0/19 maxlen: 24
23.111.96.0/19 maxlen: 24
23.111.192.0/19 maxlen: 24
88.212.192.0/18 maxlen: 24
88.212.192.0/20 maxlen: 24
88.212.192.0/24 maxlen: 24
88.212.196.0/24 maxlen: 24
88.212.204.0/24 maxlen: 24
88.212.208.0/22 maxlen: 24
88.212.220.0/22 maxlen: 24
88.212.224.0/22 maxlen: 24
88.212.228.0/22 maxlen: 24
88.212.229.0/24 maxlen: 24
88.212.230.0/23 maxlen: 23
185.206.100.0/22 maxlen: 24
185.206.100.0/24 maxlen: 24
2a02:2100::/32 maxlen: 48
2a02:2101::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:8a:b9:ee:37:18:e1:a5:e8:d8:bc:7b:06:3e:e9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Oct 1 12:57:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d97fd78e9b6d10addb425e23edf602b7e447ce9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:55:fb:73:f7:6f:2c:90:37:90:28:b7:05:
ab:87:c5:33:d0:18:5c:97:40:14:c9:e3:1d:cc:f2:
59:7d:ae:25:55:a6:a0:f6:e7:96:93:3c:61:1f:f2:
b7:2b:8b:24:f3:6f:ba:d4:bf:16:03:7b:e4:7b:33:
ac:9a:47:53:a8:5f:72:71:14:06:b8:54:86:69:ed:
ea:d5:6b:40:62:da:89:36:bf:d5:cf:64:16:a2:55:
4a:ff:dd:ef:27:f2:c1:7d:e1:55:d7:53:46:29:9f:
7f:b9:2c:7e:44:7c:0d:48:f9:41:c7:5b:36:2d:2e:
36:ae:81:be:4f:ab:93:86:f9:5c:93:d3:63:0d:93:
b3:ba:96:29:82:0b:35:4e:92:3a:20:09:85:bd:64:
f7:1a:66:33:75:d1:fb:0b:c6:be:6a:4b:cd:ea:3b:
54:83:75:2b:0b:27:d0:df:37:8f:f1:cf:71:03:a4:
c4:1c:53:20:c0:9c:12:2b:50:ac:e8:97:5c:bb:4f:
9b:ad:c6:c3:db:85:f0:52:6c:40:45:97:1b:d9:21:
3b:7e:cd:3c:d8:1b:ef:42:2a:66:e0:74:ca:c6:9a:
1b:ae:af:e7:20:a9:8d:7e:92:08:af:97:56:8d:92:
06:78:a3:df:05:5b:4e:7b:e1:1e:3e:54:4a:23:16:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7F:D7:8E:9B:6D:10:AD:DB:42:5E:23:ED:F6:02:B7:E4:47:CE:9C
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/2X_XjpttEK3bQl4j7fYCt-RHzpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.105.224.0/19
23.111.32.0/19
23.111.96.0/19
23.111.192.0/19
88.212.192.0/18
185.206.100.0/22
IPv6:
2a02:2100::/31
Signature Algorithm: sha256WithRSAEncryption
3d:4d:0d:be:3d:6d:c1:9a:2b:16:26:b2:95:3b:cf:03:ed:03:
53:8e:c1:ad:cf:70:5b:da:aa:7b:bf:06:8f:7f:e3:32:43:8c:
d0:4c:8c:98:2b:91:12:21:85:c5:68:6b:19:4a:5c:f2:a6:fc:
12:10:20:89:49:db:14:c3:24:12:2b:0b:93:86:e0:9c:d3:ab:
2d:7e:2b:8a:f9:61:b7:31:d8:c0:9f:00:f3:3a:c1:5d:4b:cb:
37:f5:be:14:82:97:72:e8:c1:12:7e:37:6c:7d:4a:da:e3:14:
3e:dd:84:29:61:3e:4d:9c:e8:1e:30:7c:98:a1:b8:94:66:d2:
03:55:d2:88:35:7d:bc:c5:ee:5d:3e:f0:fc:5a:66:a5:44:ab:
22:0f:01:02:89:8f:74:21:38:ed:52:87:00:fa:1e:49:63:8d:
b7:3f:f6:ee:e2:ff:d9:79:8d:4d:42:c2:64:e9:6a:94:ae:fa:
d6:7b:44:9a:f5:2b:f7:3a:b1:f7:87:9b:25:96:87:57:33:27:
ea:38:ed:5a:9a:3a:6c:5b:d8:80:39:45:65:b7:30:31:dc:a3:
f0:6d:ad:73:3f:6b:67:4e:c2:ab:aa:4e:bf:b9:04:b7:5b:ef:
da:95:d5:ee:ed:1f:2e:97:93:93:5e:0a:dd:da:b6:7b:54:df:
dc:5f:cd:cb
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAaD3irnuNxjhpejYvHsGPulGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMzM1NDQyNTE0ZDUyNDliNTE0M2NmZGY4MjEyMTZiYjVj
NTI5NDAwHhcNMjYxMDAxMTI1NzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTdmZDc4ZTliNmQxMGFkZGI0MjVlMjNlZGY2MDJiN2U0NDdjZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD5V+3P3byyQN5AotwWrh8Uz0Bhc
l0AUyeMdzPJZfa4lVaag9ueWkzxhH/K3K4sk82+61L8WA3vkezOsmkdTqF9ycRQG
uFSGae3q1WtAYtqJNr/Vz2QWolVK/93vJ/LBfeFV11NGKZ9/uSx+RHwNSPlBx1s2
LS42roG+T6uThvlck9NjDZOzupYpggs1TpI6IAmFvWT3GmYzddH7C8a+akvN6jtU
g3UrCyfQ3zeP8c9xA6TEHFMgwJwSK1Cs6Jdcu0+brcbD24XwUmxARZcb2SE7fs08
2BvvQipm4HTKxpobrq/nIKmNfpIIr5dWjZIGeKPfBVtOe+EePlRKIxYYxQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFNl/146bbRCt20JeI+32ArfkR86cMB8GA1UdIwQY
MBaAFAEzVEJRTVJJtRQ8/fghIWu1xSlAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVROVVFsRk5Va20xRkR6OS1DRWhhN1hGS1VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jN2E2OGYtN2JmOC00ZjgwLWE5YTIt
ODE1ZDJjMDI2NjQ2LzEvMlhfWGpwdHRFSzNiUWw0ajdmWUN0LVJIenB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jN2E2OGYtN2JmOC00ZjgwLWE5YTItODE1ZDJjMDI2NjQ2
LzEvQVROVVFsRk5Va20xRkR6OS1DRWhhN1hGS1VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFF2ngAwQF
F28gAwQFF29gAwQFF2/AAwQGWNTAAwQCuc5kMA0EAgACMAcDBQEqAiEAMA0GCSqG
SIb3DQEBCwUAA4IBAQA9TQ2+PW3BmisWJrKVO88D7QNTjsGtz3Bb2qp7vwaPf+My
Q4zQTIyYK5ESIYXFaGsZSlzypvwSECCJSdsUwyQSKwuThuCc06stfiuK+WG3MdjA
nwDzOsFdS8s39b4Ugpdy6MESfjdsfUra4xQ+3YQpYT5NnOgeMHyYobiUZtIDVdKI
NX28xe5dPvD8WmalRKsiDwECiY90ITjtUocA+h5JY423P/bu4v/ZeY1NQsJk6WqU
rvrWe0Sa9Sv3OrH3h5sllodXMyfqOO1amjpsW9iAOUVltzAx3KPwba1zP2tnTsKr
qk6/uQS3W+/aldXu7R8ul5OTXgrd2rZ7VN/cX83L
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:48:16 2026 by rpki-client