Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2LWYmASxuBLRbzVC9LCRKSvqhJM.roa
File: 2LWYmASxuBLRbzVC9LCRKSvqhJM.roa (raw, json)
Hash identifier: 8dPo2gye6yX3KmBTpVEzeXu2YyozD5gTuof++Xq9PIQ=
Subject key identifier: D8:B5:98:98:04:B1:B8:12:D1:6F:35:42:F4:B0:91:29:2B:EA:84:93
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019F187935839B25403DBB84EA8239073B22
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2LWYmASxuBLRbzVC9LCRKSvqhJM.roa
Signing time: Tue 30 Jun 2026 12:20:24 +0000
ROA not before: Tue 30 Jun 2026 12:20:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 91.217.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:79:35:83:9b:25:40:3d:bb:84:ea:82:39:07:3b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jun 30 12:20:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8b5989804b1b812d16f3542f4b091292bea8493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:9b:ca:27:9c:32:95:c2:70:84:0e:18:65:
ad:49:91:b8:0a:f5:ef:dd:d7:59:dc:60:bd:32:34:
6a:c0:32:a2:56:7b:07:57:90:c4:48:0d:1a:2c:e4:
da:f8:cf:a7:5c:cc:e1:0f:fe:99:21:2a:e4:84:6f:
ab:3c:53:ac:8b:06:cb:6a:90:0a:64:af:77:2d:4b:
72:17:59:f7:6a:36:c9:d9:13:7f:eb:69:a2:0b:ff:
b3:b1:82:1a:9d:e3:12:58:db:fa:6e:78:59:24:66:
40:9e:c0:41:48:e6:ea:66:f1:1a:4f:83:06:ac:e9:
53:b4:97:9f:93:64:99:e8:eb:3d:a5:ee:49:9a:4c:
bd:11:42:cf:b6:e8:52:8e:7a:5b:7b:db:f2:f1:ad:
3a:c6:d7:46:fe:2e:2f:0c:3f:c1:23:36:2a:0d:83:
6a:73:e0:38:40:41:d2:f8:b3:71:7d:fa:3d:3e:2a:
3c:04:d7:b3:bd:60:dc:17:80:64:8f:91:e8:a8:dc:
d6:ca:31:10:6b:cb:6a:b2:07:b1:36:3a:9a:c6:96:
04:ac:c8:d2:5a:63:a7:4d:aa:b3:cb:74:3f:e4:08:
bd:ae:7f:05:0d:a2:47:c3:7b:af:a4:8e:a4:5b:d9:
14:fa:51:62:62:58:82:07:4c:ef:cf:4c:b8:81:9c:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B5:98:98:04:B1:B8:12:D1:6F:35:42:F4:B0:91:29:2B:EA:84:93
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2LWYmASxuBLRbzVC9LCRKSvqhJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.166.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a6:04:4a:db:bd:2b:c0:91:5d:45:84:da:3b:8b:b1:16:77:
6c:7a:df:90:ed:b0:29:2c:56:84:f2:29:16:ea:f7:e8:24:1c:
04:00:24:6c:16:08:7d:22:6e:27:28:ae:aa:33:1c:10:84:2c:
2d:47:04:8b:ce:45:5f:28:71:f2:0d:64:01:02:1b:89:98:6e:
4d:53:9c:b6:5d:bb:25:be:d5:7e:a7:a0:27:ff:76:e0:c2:3c:
57:32:52:2f:ea:48:a1:36:22:b1:05:c0:a0:a3:d2:3c:86:ac:
b0:d2:9e:4b:f0:06:a5:4a:af:83:9e:40:f0:ec:cb:c0:2e:5b:
ca:1c:e0:f5:d5:d4:0b:ff:8a:5c:8f:bd:09:2f:38:a4:44:af:
a2:5e:71:5e:e9:86:7a:be:b4:1b:af:d3:54:74:6a:0a:cc:13:
34:6f:31:97:f5:ca:0a:f4:ec:f3:0a:93:3d:84:61:93:53:37:
8e:b1:96:19:8b:ea:4f:e3:74:40:79:a1:2f:06:0f:7b:88:28:
a8:08:e1:44:14:2f:77:62:3b:8b:eb:66:b4:05:af:3d:2d:9a:
17:b7:28:c1:54:4f:f0:b3:08:56:eb:9c:92:bd:ea:1f:4c:b9:
e2:12:e4:1e:38:97:39:70:74:11:94:92:9e:46:0e:5a:39:2d:
17:db:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 06:02:31 2026 by rpki-client