Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/2lXY_qeZRcpO46ZcHfuQKKoyAn8.roa
File: 2lXY_qeZRcpO46ZcHfuQKKoyAn8.roa (raw, json)
Hash identifier: Z1X0os2IrvXKJzAG1sBc8JrvoiI8+K00WkhMp4FiuOg=
Subject key identifier: DA:55:D8:FE:A7:99:45:CA:4E:E3:A6:5C:1D:FB:90:28:AA:32:02:7F
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 01A015577304477D2E20962547DBCA7D3A8D
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/2lXY_qeZRcpO46ZcHfuQKKoyAn8.roa
Signing time: Tue 18 Aug 2026 14:47:27 +0000
ROA not before: Tue 18 Aug 2026 14:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213892
IP address blocks: 86.106.75.0/24 maxlen: 24
193.201.47.0/24 maxlen: 24
2a05:cbc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:57:73:04:47:7d:2e:20:96:25:47:db:ca:7d:3a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Aug 18 14:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da55d8fea79945ca4ee3a65c1dfb9028aa32027f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6c:7c:0f:a3:3d:c1:1c:31:dd:d6:67:2b:6d:
2a:60:bb:38:91:9b:55:3c:df:ef:86:ec:f0:23:30:
ef:bd:c5:36:fd:f1:48:fc:a1:8e:22:c3:c4:6c:ab:
89:07:79:7e:8e:c3:72:9e:a8:b7:e1:bb:54:9c:90:
fc:3e:ec:16:e5:0d:a4:6f:e4:c9:9f:df:ae:23:fb:
01:7a:e6:a6:0b:34:67:62:2b:be:90:fa:ad:13:73:
ce:aa:cc:d0:15:df:bb:c0:6f:58:6f:b0:c2:d2:60:
05:e1:0a:66:1f:94:20:b1:8b:58:49:c1:78:24:ef:
80:ee:6f:63:0b:f0:66:a4:c4:eb:7e:37:ba:d4:71:
e1:b0:a2:8b:c4:5c:f6:31:c4:55:0f:71:ee:70:05:
3f:4d:86:77:19:4d:a9:74:3f:81:78:1d:f4:53:f3:
78:da:96:86:9f:d5:e3:d5:7a:82:1c:a1:82:68:25:
60:d1:75:a1:35:a4:15:94:1c:26:39:a0:64:2f:46:
e4:39:e9:02:5e:c0:4c:cc:51:df:cd:cc:e0:90:3c:
0a:04:f4:a8:e8:10:02:7b:51:13:f1:07:f9:bc:dc:
d1:c7:7a:84:68:6d:e8:72:c8:09:b6:cc:e8:ea:f3:
b7:12:5f:1a:b7:6a:2a:75:55:5d:ec:3f:2d:4d:fe:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:55:D8:FE:A7:99:45:CA:4E:E3:A6:5C:1D:FB:90:28:AA:32:02:7F
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/2lXY_qeZRcpO46ZcHfuQKKoyAn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.75.0/24
193.201.47.0/24
IPv6:
2a05:cbc0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:85:23:24:67:b0:71:e0:ff:73:b1:02:96:d5:d2:e1:d5:09:
3b:2d:cb:2d:1c:d9:2f:67:0d:89:39:1e:75:97:f2:af:b5:97:
09:d0:6a:ed:bd:1a:3a:ea:49:2c:03:52:94:99:1b:ef:56:dd:
0a:f3:28:f8:e8:ef:f7:e8:b8:f5:06:32:86:16:b7:26:a1:e0:
1a:a5:7a:96:70:09:7b:c7:e8:ff:f8:c1:19:ac:22:e6:14:0e:
2f:b7:f8:1d:cb:f8:6a:14:f2:0b:8c:0c:d2:f6:5c:c6:61:8e:
ba:fb:e1:79:b2:07:da:8f:38:f3:fd:b8:b9:17:92:dd:94:4f:
4a:a5:d7:fe:b1:f8:98:03:0e:47:1f:bf:39:12:f7:d6:5d:3b:
e8:32:44:93:26:71:56:48:cb:fc:5c:ce:22:c9:80:c1:54:3f:
63:bf:92:cb:13:d9:b6:77:c6:f9:5a:fd:b4:e2:73:81:fc:7f:
46:cd:9a:8d:b8:f0:63:5b:65:c0:fb:9b:42:ad:ae:cf:bc:0e:
d5:4d:42:06:15:4e:b8:ea:52:b0:77:be:7e:b0:67:af:b3:b4:
e6:99:74:1f:cf:34:6d:2d:b1:7e:40:13:4f:f6:bd:e7:64:5d:
32:44:85:cf:9e:2d:44:9f:90:0c:06:8c:6a:e3:ab:82:e6:1c:
28:82:29:66
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAaAVV3MER30uIJYlR9vKfTqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDc3YWQyMWNiNzg5MTQzMzEzYzQwYjE5ZjhjYzAwMjNk
ZTg4YTYwHhcNMjYwODE4MTQ0NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTU1ZDhmZWE3OTk0NWNhNGVlM2E2NWMxZGZiOTAyOGFhMzIwMjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42x8D6M9wRwx3dZnK20qYLs4kZtV
PN/vhuzwIzDvvcU2/fFI/KGOIsPEbKuJB3l+jsNynqi34btUnJD8PuwW5Q2kb+TJ
n9+uI/sBeuamCzRnYiu+kPqtE3POqszQFd+7wG9Yb7DC0mAF4QpmH5QgsYtYScF4
JO+A7m9jC/BmpMTrfje61HHhsKKLxFz2McRVD3HucAU/TYZ3GU2pdD+BeB30U/N4
2paGn9Xj1XqCHKGCaCVg0XWhNaQVlBwmOaBkL0bkOekCXsBMzFHfzczgkDwKBPSo
6BACe1ET8Qf5vNzRx3qEaG3ocsgJtszo6vO3El8at2oqdVVd7D8tTf5J8wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNpV2P6nmUXKTuOmXB37kCiqMgJ/MB8GA1UdIwQY
MBaAFOhHetIct4kUMxPECxn4zAAj3oimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAt
NjA0NTg0ODk1OTI1LzEvMmxYWV9xZVpSY3BPNDZaY0hmdVFLS295QW44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAtNjA0NTg0ODk1OTI1
LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAVmpLAwQA
wckvMA0EAgACMAcDBQAqBcvAMA0GCSqGSIb3DQEBCwUAA4IBAQCuhSMkZ7Bx4P9z
sQKW1dLh1Qk7LcstHNkvZw2JOR51l/KvtZcJ0GrtvRo66kksA1KUmRvvVt0K8yj4
6O/36Lj1BjKGFrcmoeAapXqWcAl7x+j/+MEZrCLmFA4vt/gdy/hqFPILjAzS9lzG
YY66++F5sgfajzjz/bi5F5LdlE9Kpdf+sfiYAw5HH785EvfWXTvoMkSTJnFWSMv8
XM4iyYDBVD9jv5LLE9m2d8b5Wv204nOB/H9GzZqNuPBjW2XA+5tCra7PvA7VTUIG
FU646lKwd75+sGevs7TmmXQfzzRtLbF+QBNP9r3nZF0yRIXPni1En5AMBoxq46uC
5hwogilm
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:04 2026 by rpki-client