Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/2ptS9RtqKyQICl-FF5XAQQMG1p8.roa
File: 2ptS9RtqKyQICl-FF5XAQQMG1p8.roa (raw, json)
Hash identifier: CnIWNGibVsyJEPJ7wWfI/zOEpiDLnhOyvk0A6/tQZh0=
Subject key identifier: DA:9B:52:F5:1B:6A:2B:24:08:0A:5F:85:17:95:C0:41:03:06:D6:9F
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019FD112748D08B212DA378DE67A1EBC1D1B
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/2ptS9RtqKyQICl-FF5XAQQMG1p8.roa
Signing time: Wed 05 Aug 2026 08:37:55 +0000
ROA not before: Wed 05 Aug 2026 08:37:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31130
IP address blocks: 70.40.188.0/24 maxlen: 24
70.40.189.0/24 maxlen: 24
91.92.250.0/24 maxlen: 24
151.123.186.0/24 maxlen: 24
151.123.187.0/24 maxlen: 24
2001:3780::/32 maxlen: 32
2001:3785::/32 maxlen: 32
2a12:4044::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:12:74:8d:08:b2:12:da:37:8d:e6:7a:1e:bc:1d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Aug 5 08:37:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da9b52f51b6a2b24080a5f851795c0410306d69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:9c:11:0f:a1:34:49:c7:8a:b3:9f:c3:0f:
fc:57:c7:6b:d3:be:0e:6b:64:06:c6:bd:26:4e:4d:
0f:73:9a:93:c0:33:54:d8:54:28:67:2a:aa:0d:04:
41:bb:b9:f0:80:86:27:66:e9:47:8c:1f:11:08:4c:
5b:81:bf:a3:be:3a:ca:00:6a:44:64:e3:ba:92:03:
b7:64:77:3a:73:f4:de:e0:a9:c6:2a:ca:c3:20:21:
0c:ca:02:3e:7b:61:56:e6:18:c3:e5:8c:66:3b:a7:
e1:7d:2d:45:71:c0:6b:13:2c:44:61:fd:43:9d:49:
32:a2:1b:d3:8b:e5:b0:c5:c5:9d:09:87:3d:0f:07:
21:9c:19:a7:c3:17:8a:9d:9d:1b:e8:72:ff:bb:de:
9c:61:30:37:c3:ba:ee:ef:2e:62:0a:a0:44:c6:00:
6c:57:1b:bd:cd:11:ca:a3:30:5a:37:b5:ce:87:0c:
34:d8:15:41:7a:84:6c:c5:9a:28:fa:e4:66:77:ca:
dd:6b:d8:f8:48:75:b6:dd:3c:0e:15:ac:dc:c3:e2:
90:71:9c:78:45:7a:9b:a8:51:bf:a1:51:6b:e9:8d:
e6:41:9b:e1:cf:52:82:f2:e2:69:e6:7f:12:d2:90:
97:69:70:4a:30:75:a0:e6:a1:52:cc:ae:7c:1c:92:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9B:52:F5:1B:6A:2B:24:08:0A:5F:85:17:95:C0:41:03:06:D6:9F
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/2ptS9RtqKyQICl-FF5XAQQMG1p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.40.188.0/23
91.92.250.0/24
151.123.186.0/23
IPv6:
2001:3780::/32
2001:3785::/32
2a12:4044::/32
Signature Algorithm: sha256WithRSAEncryption
7e:02:f9:38:b2:52:91:81:15:e8:6f:a5:86:c7:e2:2a:e3:48:
4d:fa:90:3f:c1:98:90:f9:8f:24:6e:89:98:38:18:81:4a:86:
d8:f5:21:aa:04:f0:77:04:8a:7c:17:13:39:be:74:0d:97:b2:
43:48:c9:b9:74:97:8e:f4:6e:c7:ce:4a:19:a3:37:6c:0c:6f:
5b:99:45:e2:36:61:56:dd:2d:d1:9d:d7:49:89:e2:e8:bf:b5:
60:8b:ef:dd:55:6b:91:ef:50:be:4f:a0:9e:aa:80:ad:aa:96:
84:97:89:86:48:05:b9:a5:dc:46:df:3d:db:cd:31:88:ba:9b:
00:4e:a9:f9:ba:ee:1c:87:49:6c:ac:12:09:8e:75:48:97:5b:
ac:a7:40:4f:7c:d5:d3:2b:44:17:b8:f1:0a:4a:b9:6a:b4:8b:
9c:00:a1:83:f7:4d:df:07:ab:b1:74:8a:5d:ab:b4:17:f1:fc:
cc:e6:eb:98:03:a7:24:4a:44:83:88:1f:fc:e5:98:84:3d:83:
33:16:9a:d5:c5:de:39:4f:b0:48:e2:e9:b0:5b:e7:6c:e5:3f:
2b:bd:0b:77:03:9f:ae:28:0e:21:a0:de:a7:e0:04:d2:53:c5:
9b:77:b4:df:e8:a7:55:0a:60:11:92:93:4a:f4:78:44:31:0e:
f2:32:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:03:26 2026 by rpki-client