Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nP2t3ktCtxmXvJfQm70RczMv8go.roa
File: nP2t3ktCtxmXvJfQm70RczMv8go.roa (raw, json)
Hash identifier: X/RDZwcgP5StNkfUGKSyti4zr1ll+jsvxVTWJNRuwLk=
Subject key identifier: 9C:FD:AD:DE:4B:42:B7:19:97:BC:97:D0:9B:BD:11:73:33:2F:F2:0A
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A0330CBD7A85EE862D07CC928EECB988B0
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nP2t3ktCtxmXvJfQm70RczMv8go.roa
Signing time: Mon 24 Aug 2026 09:14:27 +0000
ROA not before: Mon 24 Aug 2026 09:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 2.58.232.0/24 maxlen: 24
2.58.234.0/24 maxlen: 24
147.78.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:0c:bd:7a:85:ee:86:2d:07:cc:92:8e:ec:b9:88:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Aug 24 09:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cfdadde4b42b71997bc97d09bbd1173332ff20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:1c:8c:36:c9:a3:29:bb:cb:81:00:af:18:
6d:0d:ee:1e:d0:bb:1a:8a:ad:a2:68:86:9b:d6:f0:
c3:50:0b:14:a1:ab:5c:a9:db:fb:eb:43:10:24:58:
da:a4:27:4e:f0:44:1d:7d:f5:4d:31:85:5f:62:b6:
27:47:b5:26:8f:ae:f6:56:b0:6a:b1:c2:73:00:04:
40:61:10:7b:e4:4c:0e:d8:5b:a7:fb:f3:5b:4f:cd:
e8:7d:93:14:65:80:9c:42:b5:0b:69:70:9a:af:f3:
b6:a7:de:9c:25:32:2b:7e:dd:9c:60:89:a0:25:80:
65:57:d1:92:29:21:31:c6:1d:e8:ad:68:0e:a9:7c:
bd:89:30:89:d0:5b:1b:2b:65:e1:ca:46:72:6a:f0:
3a:91:1f:bd:d5:05:30:33:27:58:21:ca:d1:f5:3b:
2b:05:85:cc:f3:25:29:2f:e4:42:60:e1:a9:96:01:
51:a0:84:0f:8a:9f:57:02:95:c3:ad:42:56:18:34:
be:cc:83:fe:ef:1e:43:3f:55:1a:5a:a1:c5:db:c0:
b3:75:f4:c0:66:61:3e:21:e9:80:24:5b:46:de:62:
41:32:71:78:b0:b4:00:5b:06:8d:21:c9:eb:96:8a:
0f:9a:ce:9d:16:90:d0:63:d6:79:18:df:54:6d:f1:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FD:AD:DE:4B:42:B7:19:97:BC:97:D0:9B:BD:11:73:33:2F:F2:0A
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nP2t3ktCtxmXvJfQm70RczMv8go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.232.0/24
2.58.234.0/24
147.78.198.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6e:03:a0:f2:2e:52:a3:18:89:de:51:4f:a8:3a:96:08:d5:
09:35:f7:58:42:99:2a:74:76:3c:41:e4:75:43:70:0f:ea:ab:
c4:34:2d:28:dc:0a:45:99:8e:f9:de:f4:27:44:71:95:60:57:
ec:9f:2c:c9:71:b2:2a:74:f8:52:08:4b:98:19:65:af:19:9e:
2e:3a:74:12:0a:40:27:f3:94:65:96:66:00:a7:17:d0:0e:17:
ab:7f:c4:c2:d3:8e:00:ba:4c:66:92:d2:f3:92:7e:1d:66:e0:
68:cc:ad:d0:4d:7e:bb:17:08:5d:e4:33:f1:e3:b6:40:f5:0c:
67:02:06:40:7a:fa:d9:7c:3c:6f:21:35:09:62:22:27:5d:95:
1f:13:c7:1b:87:8b:e6:17:d7:d1:65:cb:bd:09:3a:68:25:f6:
13:83:fe:c4:81:ca:87:9b:da:db:de:a0:78:bb:c6:26:22:e8:
1a:49:b9:7d:e1:7b:f8:4c:b9:44:1f:00:89:d6:69:ce:a7:db:
bc:24:66:df:d7:d0:16:94:79:c3:8f:95:94:1e:0e:b8:50:91:
87:f2:25:a5:0f:31:e9:98:33:43:32:78:77:c0:68:73:b5:bd:
92:b2:a0:f7:81:9d:7f:5b:cf:98:40:5f:b2:51:e0:3f:dc:0d:
88:03:0c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:00 2026 by rpki-client