Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/2uNDbwtfUg0oqPlUc8lhDDpx6yk.roa
File: 2uNDbwtfUg0oqPlUc8lhDDpx6yk.roa (raw, json)
Hash identifier: hfi/j4EWgLwjWUSsCuefjRfa/BssALMFARKPvD55F/k=
Subject key identifier: DA:E3:43:6F:0B:5F:52:0D:28:A8:F9:54:73:C9:61:0C:3A:71:EB:29
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 01A1963EE14812D37208469EC7F06DF6F5E8
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/2uNDbwtfUg0oqPlUc8lhDDpx6yk.roa
Signing time: Sun 01 Nov 2026 08:34:25 +0000
ROA not before: Sun 01 Nov 2026 08:34:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59588
IP address blocks: 185.117.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:3e:e1:48:12:d3:72:08:46:9e:c7:f0:6d:f6:f5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Nov 1 08:34:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dae3436f0b5f520d28a8f95473c9610c3a71eb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:ff:28:f3:5b:06:f5:e7:32:34:af:73:ba:
7b:56:4a:21:42:4a:82:d9:6d:0a:6e:b5:ae:28:af:
d2:02:fd:89:9a:a2:16:8c:32:cf:be:a0:d8:df:c7:
dd:90:73:dc:80:42:7a:b6:60:a1:6e:36:1a:3e:45:
f4:63:de:b9:27:87:16:5e:71:aa:b4:67:c0:79:c6:
6d:a0:af:8d:24:82:18:00:f5:6a:c6:10:d8:b0:ff:
80:52:f0:a0:48:02:d5:36:53:81:c1:e5:98:cb:46:
5b:0c:0a:f0:b6:81:c7:64:79:57:4a:eb:f4:83:94:
4e:16:c5:ce:36:22:50:ed:16:e7:7e:c6:36:ee:87:
4c:16:e6:80:52:8f:51:15:ff:16:8d:f4:9e:fa:7b:
7d:8d:b1:64:63:f6:28:5c:cb:05:6a:a1:d1:c3:fc:
15:f9:8f:56:49:1e:4e:44:a4:fc:fc:64:73:5b:5b:
04:10:1f:99:9d:c8:49:a9:35:34:28:eb:76:f0:5f:
4b:6d:1f:6c:13:b1:ad:37:91:52:e9:00:e6:0c:5a:
93:1a:41:8c:76:c7:bc:19:1c:cb:ac:71:e1:57:19:
31:a5:71:82:90:6e:6d:dc:0e:59:b9:d5:1b:e6:72:
5b:93:4b:bb:19:81:f9:44:e6:65:18:5a:55:53:53:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E3:43:6F:0B:5F:52:0D:28:A8:F9:54:73:C9:61:0C:3A:71:EB:29
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/2uNDbwtfUg0oqPlUc8lhDDpx6yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:fe:02:f5:9c:f5:f5:ab:a0:1d:d3:7b:6a:13:e4:64:90:93:
76:aa:b9:57:31:74:57:97:a7:62:33:44:ae:33:da:b5:6c:4d:
1e:f0:7e:59:6e:84:33:e8:97:e1:e3:9b:2d:df:e2:f5:44:d4:
e4:cf:20:58:55:26:6b:3c:3e:39:8e:46:e5:1f:2c:3e:01:8a:
e3:99:ea:6f:3f:f1:6d:e6:e6:a5:44:17:c2:c7:76:1e:d7:00:
87:5a:e7:70:ae:94:a0:09:4d:83:02:89:23:72:d4:35:71:a4:
6c:97:48:ea:57:51:75:3e:33:43:bb:a8:5d:ac:88:c2:e5:6b:
10:86:68:66:59:8b:eb:7a:4c:e8:72:8a:51:31:48:2b:14:10:
e2:98:c6:f5:a9:08:52:d2:f2:4b:ad:b3:af:a4:1a:93:fa:6d:
f1:20:28:c8:d6:37:b1:5c:9d:93:b2:d4:b7:d6:89:c1:e4:31:
3d:de:f1:8b:d6:48:b3:c5:ea:4a:3a:99:2c:f7:0a:a8:ce:35:
73:c7:46:71:0b:06:7d:4c:f7:9a:8f:b5:e7:d9:ac:fc:fa:d2:
ab:69:2a:90:0a:b5:e3:88:8d:dc:88:62:d4:f1:bd:e7:37:fc:
64:25:db:e5:7a:6c:15:b6:00:25:74:7b:23:6a:31:09:34:79:
d0:09:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:28:47 2026 by rpki-client