Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/2jdLcJNa2rxtyqaeCiOQarFpRYI.roa
File: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (raw, json)
Hash identifier: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=
Subject key identifier: DA:37:4B:70:93:5A:DA:BC:6D:CA:A6:9E:0A:23:90:6A:B1:69:45:82
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019FA3BA5877F918434E4FFCC408F6A1B756
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/2jdLcJNa2rxtyqaeCiOQarFpRYI.roa
Signing time: Mon 27 Jul 2026 13:18:46 +0000
ROA not before: Mon 27 Jul 2026 13:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203516
IP address blocks: 2.58.152.0/23 maxlen: 24
2.58.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:ba:58:77:f9:18:43:4e:4f:fc:c4:08:f6:a1:b7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jul 27 13:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da374b70935adabc6dcaa69e0a23906ab1694582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9b:3d:9b:91:ed:0d:6c:cb:1d:ad:32:a4:4c:
c7:99:2f:4a:19:9b:73:56:99:df:ba:7d:13:b9:1e:
67:55:c5:81:12:8b:30:31:82:92:80:f8:1e:23:21:
6c:36:68:a5:f1:f3:3b:40:25:fd:b7:f8:47:9c:24:
a4:eb:61:3c:ed:ff:d5:53:d1:cd:f8:f7:aa:51:66:
55:4f:c1:48:56:e2:ef:95:aa:93:ce:63:74:cc:ce:
27:fb:41:39:2b:9d:57:aa:14:09:34:5e:87:b5:89:
23:c3:8d:7e:5f:fd:0d:34:98:e1:1b:7e:52:f0:8a:
38:4f:88:3d:ef:02:db:4e:45:c3:71:f8:14:d2:9e:
a5:cf:db:81:b2:e0:e1:01:ce:85:af:99:d0:12:07:
86:10:c0:47:cc:17:5c:f6:64:5b:d5:9c:67:b5:a4:
34:04:79:4e:13:a3:38:02:6c:72:ad:7c:b2:48:05:
1e:31:fb:12:4a:7c:c6:86:c4:83:37:b4:91:e0:0b:
92:2e:69:e2:8d:ed:57:e2:da:6b:b2:ce:8d:c7:1c:
b9:ef:9d:37:0a:43:56:05:f3:e3:73:9f:50:33:47:
f4:7d:d6:77:d5:a2:b9:98:67:09:e6:13:4c:e0:ba:
14:6a:96:37:ef:fa:98:ac:bb:c6:34:59:88:90:10:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:4B:70:93:5A:DA:BC:6D:CA:A6:9E:0A:23:90:6A:B1:69:45:82
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/2jdLcJNa2rxtyqaeCiOQarFpRYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.152.0/22
Signature Algorithm: sha256WithRSAEncryption
67:92:c2:ad:82:cd:a5:30:0d:71:e3:d3:ed:1b:61:5b:47:d1:
04:dd:b5:d4:94:5f:70:c5:40:7c:72:bf:2b:33:ae:b3:9b:39:
6a:7d:6d:b4:a9:5f:80:44:d7:11:1c:1f:4b:75:ee:52:df:9e:
fe:ef:09:1c:d6:cf:f2:fa:61:ce:f6:a7:42:31:4d:48:ed:ec:
9d:04:64:71:64:dd:89:ed:9d:e8:36:57:b2:74:ae:f5:ec:a2:
a1:e9:17:39:85:ae:c9:fc:fd:2b:93:91:b0:7d:73:ff:9e:0c:
7d:0b:3a:62:2d:f4:c9:9c:45:54:fb:ec:c9:fc:b5:04:e7:aa:
2c:06:17:51:c3:63:06:49:39:80:e8:42:21:40:f3:28:c5:29:
3e:93:6c:36:76:95:8d:31:03:f3:6e:f2:4a:3a:0e:6d:db:5c:
e1:dc:b9:5e:74:0a:75:bb:5d:d1:2e:e6:52:89:d2:28:69:8f:
dd:13:a0:b2:6c:63:ff:42:04:a2:9e:11:f0:fe:3e:23:32:3e:
f4:25:d6:35:e5:d1:56:08:08:e4:40:2e:aa:6c:99:2d:84:db:
1d:32:4d:69:5d:57:6a:a5:39:ec:1b:6b:b6:da:67:1a:15:c1:
8f:91:e1:0f:35:df:ae:1d:6c:9f:4b:35:2d:cf:32:86:32:83:
6f:69:c0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:09 2026 by rpki-client