Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2TYRDr2pySCMtYew5__1_7bLb3g.roa
File: 2TYRDr2pySCMtYew5__1_7bLb3g.roa (raw, json)
Hash identifier: VUHOwjKSCIiQY6rT6HOWQYIPz6JCd/WPBcORbiGknvI=
Subject key identifier: D9:36:11:0E:BD:A9:C9:20:8C:B5:87:B0:E7:FF:F5:FF:B6:CB:6F:78
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019DDEB76B58A4D6E8F4F151234F2C69570B
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2TYRDr2pySCMtYew5__1_7bLb3g.roa
Signing time: Thu 30 Apr 2026 14:07:35 +0000
ROA not before: Thu 30 Apr 2026 14:07:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199467
IP address blocks: 45.11.184.0/24 maxlen: 24
45.159.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:b7:6b:58:a4:d6:e8:f4:f1:51:23:4f:2c:69:57:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Apr 30 14:07:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d936110ebda9c9208cb587b0e7fff5ffb6cb6f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:7e:8a:62:41:a4:76:81:65:3f:57:63:8c:
9b:77:a7:63:87:48:e4:b0:f1:39:bb:ec:37:a8:9b:
f4:82:72:9c:29:7a:f5:9d:74:94:58:45:f1:1d:82:
1c:5b:dc:c8:59:5b:8f:29:6c:32:b9:25:7a:e8:4d:
7d:33:a4:02:ae:73:01:92:d7:91:ac:b7:6d:86:e6:
67:30:b9:77:80:74:85:02:d4:b1:4b:98:c7:46:21:
9b:13:36:bd:e4:e5:6a:83:85:b8:fc:52:ca:fa:0a:
fc:12:db:1f:4e:46:63:ae:fd:cb:ec:2d:8a:7d:64:
01:02:61:cd:f6:2a:5f:56:53:bd:0c:0b:84:49:81:
5b:72:15:ff:1f:f8:4f:15:3f:34:37:dc:a9:e2:89:
20:cc:cc:b9:30:f2:dc:88:46:71:28:54:35:85:f3:
90:fa:52:a6:46:9e:79:35:60:bf:31:2f:35:e2:e6:
2b:68:be:c6:a6:2b:04:b4:24:20:c2:88:85:51:1f:
2b:a0:db:9d:b4:2d:d0:34:8f:73:41:7d:b2:85:ab:
e7:b7:4b:3f:2c:37:75:2f:de:07:57:d6:1c:71:54:
90:e1:6c:77:03:31:cc:4c:69:e2:2e:cd:2c:37:82:
b5:34:b0:b2:43:5d:89:22:36:c5:12:6e:1c:79:8a:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:36:11:0E:BD:A9:C9:20:8C:B5:87:B0:E7:FF:F5:FF:B6:CB:6F:78
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/2TYRDr2pySCMtYew5__1_7bLb3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/24
45.159.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:72:30:ff:89:3a:6a:28:c9:02:93:ee:a4:be:d8:b5:aa:76:
4c:c0:59:5b:7f:51:3a:6e:9a:24:c2:f6:ff:85:4c:fc:b0:07:
3a:df:72:59:7b:cc:d6:5b:9b:46:98:0a:dd:a1:4c:85:4d:58:
79:08:06:83:05:35:5a:73:99:b0:f0:f9:c1:23:34:a0:2a:da:
d5:69:70:a4:e0:fe:8c:5c:4c:31:41:6b:df:87:bd:0f:7e:c8:
50:82:31:2b:24:00:09:dc:13:31:81:d0:02:a5:da:7a:7d:4e:
d0:4d:8e:27:d9:b7:8a:60:2c:70:fb:79:87:90:7b:7c:3b:bf:
7a:62:37:df:84:78:dc:d4:6b:4e:9f:9a:85:5c:42:2d:08:b3:
2e:9a:6f:06:4a:5e:b3:f0:d5:ce:99:d3:2c:0f:56:44:8b:ea:
47:f9:2b:ff:43:13:ff:2e:8c:d4:87:4f:3c:ae:af:06:17:03:
ed:e5:dd:f4:ca:d9:6a:01:01:24:43:b7:ad:64:c8:67:c2:73:
63:9a:f4:af:9d:5f:c7:07:ce:d0:15:07:83:aa:9b:15:96:b2:
8f:f8:9b:1a:23:35:b4:01:b0:58:e9:89:3c:9a:75:16:79:95:
39:0d:00:eb:dd:8d:52:c7:d3:97:fc:98:0a:c2:18:d4:7a:07:
7e:5a:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 01:23:53 2026 by rpki-client