Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/N2fzBgKTc8J7wzl4NDg8YjlgFLY.roa
File: N2fzBgKTc8J7wzl4NDg8YjlgFLY.roa (raw, json)
Hash identifier: SFLlCvWq4FrSpVqcfm3+/JW7S+3Fp3msTl+3JZR4BUU=
Subject key identifier: 37:67:F3:06:02:93:73:C2:7B:C3:39:78:34:38:3C:62:39:60:14:B6
Certificate issuer: /CN=eab741acbbaffec75c0d2d423fa200ed3e53f7b5
Certificate serial: 019F2368C0CD1C31F9A0BDAB768B45967C0A
Authority key identifier: EA:B7:41:AC:BB:AF:FE:C7:5C:0D:2D:42:3F:A2:00:ED:3E:53:F7:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rdBrLuv_sdcDS1CP6IA7T5T97U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/N2fzBgKTc8J7wzl4NDg8YjlgFLY.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 178.211.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/6rdBrLuv_sdcDS1CP6IA7T5T97U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/6rdBrLuv_sdcDS1CP6IA7T5T97U.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rdBrLuv_sdcDS1CP6IA7T5T97U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 06:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c0:cd:1c:31:f9:a0:bd:ab:76:8b:45:96:7c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab741acbbaffec75c0d2d423fa200ed3e53f7b5
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3767f306029373c27bc3397834383c62396014b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:3d:e3:2f:fb:c5:13:47:c2:ca:0e:32:d1:
7a:ab:4c:34:09:48:03:35:ac:12:4b:82:c1:e4:ce:
7d:81:b8:97:0b:60:55:a0:58:75:b8:88:14:59:7b:
08:d6:f9:11:ae:78:34:e4:fc:49:a4:98:42:62:6c:
46:9f:d1:83:dd:e4:a3:e5:e5:f7:39:ea:d4:ad:02:
c5:4a:49:89:86:54:a6:f1:8c:35:60:02:43:e0:89:
d6:df:e2:75:09:a7:69:a8:0d:b6:2a:74:37:2b:26:
9a:28:05:11:df:77:cb:05:24:bd:b2:23:b0:02:9d:
76:e2:66:e3:a9:af:15:83:db:e9:c6:1b:c4:cd:7d:
94:17:71:07:de:24:74:57:3b:f7:14:04:a5:14:94:
4b:77:8b:ff:23:e6:2e:78:14:17:ec:ef:42:0f:46:
57:14:cc:e2:fe:7b:82:66:12:c8:9f:26:cb:8d:9d:
72:23:34:5c:e9:52:3c:34:bc:d4:11:28:be:40:6d:
77:60:cb:85:ce:4f:f2:d3:08:b9:d3:6c:1b:5d:b5:
ee:c1:93:f4:8f:13:20:0e:1a:73:7d:3e:49:66:1d:
10:07:36:15:d8:8e:bf:20:e5:19:11:3c:b1:af:ef:
b4:58:83:08:54:bc:08:19:43:5d:7c:ee:b0:8d:22:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:67:F3:06:02:93:73:C2:7B:C3:39:78:34:38:3C:62:39:60:14:B6
X509v3 Authority Key Identifier:
keyid:EA:B7:41:AC:BB:AF:FE:C7:5C:0D:2D:42:3F:A2:00:ED:3E:53:F7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rdBrLuv_sdcDS1CP6IA7T5T97U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/N2fzBgKTc8J7wzl4NDg8YjlgFLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/6rdBrLuv_sdcDS1CP6IA7T5T97U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:bc:37:7d:3e:e4:cf:29:5e:5f:61:88:4e:78:ff:e3:6c:9c:
5d:97:6c:65:a8:3a:77:89:70:eb:40:62:52:e4:fa:b5:a2:fb:
48:fb:14:a0:fe:c1:e8:12:2c:de:77:4a:de:31:2c:51:0b:ee:
82:41:f3:fa:74:a8:c4:eb:35:26:ea:35:c2:0e:9f:d9:3f:ab:
a4:96:18:f8:86:56:0c:cb:9a:f7:c5:53:0a:e2:55:d7:6b:f4:
d3:2d:39:6d:7d:f2:66:2d:d4:6a:fe:2e:45:96:18:83:3c:5c:
7d:3e:1a:74:10:64:75:02:84:32:2d:2a:b0:f9:bd:14:eb:d2:
9e:fb:6e:51:0d:87:fb:e8:6f:cb:a3:29:88:14:17:ef:0f:db:
88:77:0c:c3:e6:39:b8:2f:01:e8:6c:e1:e8:35:cb:29:b7:1a:
ca:73:47:dc:aa:7b:28:6f:93:82:d4:26:a2:66:5f:e3:31:e5:
3d:60:98:4c:37:c7:80:09:82:10:ee:ae:a3:2e:c9:a6:24:20:
08:34:3c:c0:b8:93:9f:b5:1e:99:14:51:78:79:bd:86:c4:84:
79:a2:ec:fc:19:c9:71:5d:3b:15:16:82:34:27:3e:f2:e1:7f:
bb:16:8e:ff:59:a8:91:05:f3:ef:8a:7d:f2:61:d7:8a:7b:f2:
5f:1b:58:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMDNHDH5oL2rdotFlnwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjc0MWFjYmJhZmZlYzc1YzBkMmQ0MjNmYTIwMGVkM2U1
M2Y3YjUwHhcNMjYwNzAyMTUxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzY3ZjMwNjAyOTM3M2MyN2JjMzM5NzgzNDM4M2M2MjM5NjAxNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QQ94y/7xRNHwsoOMtF6q0w0CUgD
NawSS4LB5M59gbiXC2BVoFh1uIgUWXsI1vkRrng05PxJpJhCYmxGn9GD3eSj5eX3
OerUrQLFSkmJhlSm8Yw1YAJD4InW3+J1CadpqA22KnQ3KyaaKAUR33fLBSS9siOw
Ap124mbjqa8Vg9vpxhvEzX2UF3EH3iR0Vzv3FASlFJRLd4v/I+YueBQX7O9CD0ZX
FMzi/nuCZhLInybLjZ1yIzRc6VI8NLzUESi+QG13YMuFzk/y0wi502wbXbXuwZP0
jxMgDhpzfT5JZh0QBzYV2I6/IOUZETyxr++0WIMIVLwIGUNdfO6wjSL7rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDdn8wYCk3PCe8M5eDQ4PGI5YBS2MB8GA1UdIwQY
MBaAFOq3Qay7r/7HXA0tQj+iAO0+U/e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJkQnJMdXZfc2RjRFMxQ1A2SUE3VDVUOTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMt
Y2IxNjhhZmRiMzQzLzEvTjJmekJnS1RjOEo3d3psNE5EZzhZamxnRkxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMtY2IxNjhhZmRiMzQz
LzEvNnJkQnJMdXZfc2RjRFMxQ1A2SUE3VDVUOTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstOOMA0G
CSqGSIb3DQEBCwUAA4IBAQAsvDd9PuTPKV5fYYhOeP/jbJxdl2xlqDp3iXDrQGJS
5Pq1ovtI+xSg/sHoEized0reMSxRC+6CQfP6dKjE6zUm6jXCDp/ZP6uklhj4hlYM
y5r3xVMK4lXXa/TTLTltffJmLdRq/i5FlhiDPFx9Php0EGR1AoQyLSqw+b0U69Ke
+25RDYf76G/LoymIFBfvD9uIdwzD5jm4LwHobOHoNcsptxrKc0fcqnsob5OC1Cai
Zl/jMeU9YJhMN8eACYIQ7q6jLsmmJCAINDzAuJOftR6ZFFF4eb2GxIR5ouz8Gclx
XTsVFoI0Jz7y4X+7Fo7/WaiRBfPvin3yYdeKe/JfG1gD
-----END CERTIFICATE-----
Generated at Sun Jul 5 13:42:19 2026 by rpki-client