Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/2nlzAC-fmirqmeDSyK1kfGp4UDg.roa
File: 2nlzAC-fmirqmeDSyK1kfGp4UDg.roa (raw, json)
Hash identifier: xgeFe0bHapUY2NDUZjiDbeEfO1hMMeK9WqFnUNq/iMY=
Subject key identifier: DA:79:73:00:2F:9F:9A:2A:EA:99:E0:D2:C8:AD:64:7C:6A:78:50:38
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01A13E9E3C2A7C292D87B6CDAFE8A7F93EED
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/2nlzAC-fmirqmeDSyK1kfGp4UDg.roa
Signing time: Thu 15 Oct 2026 08:11:59 +0000
ROA not before: Thu 15 Oct 2026 08:11:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218852
IP address blocks: 85.28.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:9e:3c:2a:7c:29:2d:87:b6:cd:af:e8:a7:f9:3e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Oct 15 08:11:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da7973002f9f9a2aea99e0d2c8ad647c6a785038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:a3:45:5d:29:5e:09:02:54:96:1c:03:91:
49:c0:bd:b9:d1:3b:d7:83:ab:35:00:a1:c6:c9:d7:
d2:47:c1:f9:e3:61:93:15:92:e8:7b:76:52:cd:54:
fa:51:ad:9f:6d:48:7b:52:ac:c5:47:a5:cc:ba:b2:
72:2f:96:74:a9:94:66:af:c7:e1:3e:34:bf:a0:82:
4c:55:b4:5d:7f:0a:81:77:d2:8d:9a:a0:38:48:b9:
a6:8d:e0:8e:01:d6:6e:f0:02:13:c0:4a:5f:c1:13:
66:d4:ce:80:e9:d4:09:5f:e2:39:82:f7:62:f2:79:
66:18:d6:f8:e7:ff:e2:f3:f8:3b:fe:d5:30:0b:fd:
9a:7a:be:5d:b0:d3:d7:99:7e:bc:51:ca:a8:b4:a4:
7c:6e:b2:b3:ea:e4:96:88:1c:98:78:f6:55:ce:92:
37:45:c1:62:fa:39:3a:55:29:42:58:d7:b7:43:43:
25:21:f8:4f:2c:89:dc:9c:e7:09:7c:46:a9:a9:75:
a9:65:da:8a:7a:87:49:34:c1:cd:7b:d2:d2:5f:f9:
4a:6c:fc:0b:bb:54:6e:7b:99:fd:95:ae:85:ef:50:
43:6d:91:25:7a:0f:39:c8:b9:a4:8b:b9:28:30:1e:
48:f8:e9:5d:57:c7:9a:a8:23:c9:e2:90:0f:34:88:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:79:73:00:2F:9F:9A:2A:EA:99:E0:D2:C8:AD:64:7C:6A:78:50:38
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/2nlzAC-fmirqmeDSyK1kfGp4UDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fc:ac:bb:4a:f8:af:7a:7f:18:37:61:40:2c:e8:21:9d:ed:
4b:41:98:7b:aa:7f:f1:3c:84:1f:3c:60:7b:a4:6d:ad:40:b2:
a4:39:96:57:46:c4:6e:d1:d0:d2:e2:4d:2f:62:28:1e:91:ac:
c4:b5:50:11:f9:f3:4e:5e:4b:a2:64:56:8a:95:29:f1:8b:fb:
3d:5c:b9:5f:80:79:46:3f:99:b0:6f:78:d4:35:62:7d:2b:bb:
fd:5a:a5:3b:87:47:1b:f2:58:04:1e:bd:61:fa:ac:d8:a0:34:
07:b8:3e:77:cb:eb:0e:44:59:39:2a:10:5e:58:e3:c2:dc:b6:
5c:f5:a0:6a:2b:44:88:40:27:f9:86:8e:d5:e4:04:b3:b7:89:
79:e9:27:bd:16:57:01:7d:1b:4c:9e:df:f1:2e:ff:f5:17:59:
38:fd:b9:f0:f9:49:83:1b:99:e0:49:98:30:a1:46:a2:3a:15:
2e:d1:4d:ed:93:4d:94:ac:a7:8e:bf:91:b8:db:82:0e:eb:f1:
56:13:e8:95:0c:3a:46:8b:6a:9b:6e:a8:7c:51:0d:0a:59:c3:
55:a4:fd:09:b2:07:25:1c:90:ca:c1:41:b6:53:80:ab:09:ed:
c0:80:34:1c:e9:3a:70:2e:16:a1:ec:c1:95:01:ac:f1:96:44:
b5:80:d9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:31 2026 by rpki-client