Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/2QBmwvC_Xu9zRPYUQ2laq2mKYco.roa
File: 2QBmwvC_Xu9zRPYUQ2laq2mKYco.roa (raw, json)
Hash identifier: 86VoVG5xisD/zC7oESTivnN1oBV8l66WmkJKuTrECTs=
Subject key identifier: D9:00:66:C2:F0:BF:5E:EF:73:44:F6:14:43:69:5A:AB:69:8A:61:CA
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A084EBE75DA133FD911FDB8679D2B9B841
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/2QBmwvC_Xu9zRPYUQ2laq2mKYco.roa
Signing time: Wed 09 Sep 2026 06:47:27 +0000
ROA not before: Wed 09 Sep 2026 06:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138997
IP address blocks: 64.118.128.0/19 maxlen: 24
191.40.0.0/18 maxlen: 24
191.40.0.0/21 maxlen: 21
191.40.2.0/23 maxlen: 23
191.40.8.0/22 maxlen: 22
216.195.192.0/19 maxlen: 24
216.195.221.0/24 maxlen: 24
216.236.0.0/18 maxlen: 24
216.236.3.0/24 maxlen: 24
216.236.8.0/22 maxlen: 24
216.236.28.0/22 maxlen: 22
216.236.28.0/24 maxlen: 24
216.236.29.0/24 maxlen: 24
216.236.30.0/24 maxlen: 24
216.236.31.0/24 maxlen: 24
2a01:4240::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:eb:e7:5d:a1:33:fd:91:1f:db:86:79:d2:b9:b8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Sep 9 06:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d90066c2f0bf5eef7344f61443695aab698a61ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:6b:1d:35:58:33:ef:fe:28:c7:9e:82:01:
d0:7a:c4:61:63:ca:e7:78:77:df:cc:57:f8:3f:0b:
84:50:16:d3:13:be:f5:96:75:30:2a:83:b2:8c:5a:
99:bf:90:00:3b:37:cb:60:c2:93:3a:d7:af:6b:90:
0a:eb:82:55:49:2a:26:c0:68:2b:6b:bd:e8:3a:62:
30:62:1e:9a:0a:9d:62:36:1c:29:79:c4:58:b0:36:
21:c6:85:69:2b:14:40:e8:4c:04:9c:cf:97:4b:c6:
87:95:81:c3:ae:b6:97:f4:8b:9e:bd:89:b1:c6:7a:
b7:c2:9b:a9:a6:4b:86:96:4f:a0:27:6f:bd:68:06:
2c:d6:9b:da:c0:9f:a0:ca:8c:41:15:01:3d:54:68:
24:27:28:84:ab:f5:d7:99:64:38:7c:a4:ee:90:23:
a3:b2:1c:f8:04:c7:4b:20:83:40:6e:4f:9d:2c:aa:
08:90:9e:33:1f:12:7a:d7:ab:47:2e:12:78:c8:ac:
52:d2:42:cd:c4:09:49:27:2b:d4:b2:10:0b:26:f1:
f7:f3:df:01:ba:29:f0:1a:b8:90:e2:b3:47:4f:0b:
85:72:00:96:87:52:b4:a6:bd:18:08:43:8d:30:de:
68:ba:2e:2b:b6:ac:25:11:13:26:8d:6e:03:04:d6:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:00:66:C2:F0:BF:5E:EF:73:44:F6:14:43:69:5A:AB:69:8A:61:CA
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/2QBmwvC_Xu9zRPYUQ2laq2mKYco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.118.128.0/19
191.40.0.0/18
216.195.192.0/19
216.236.0.0/18
IPv6:
2a01:4240::/30
Signature Algorithm: sha256WithRSAEncryption
5e:6f:72:37:69:55:aa:c6:e0:0e:9c:46:9c:b7:54:8e:37:09:
50:45:89:fd:08:88:01:91:d0:61:79:84:0d:66:c5:c9:b6:0b:
56:49:28:5a:b0:59:fb:ce:de:60:99:ee:05:2b:1c:16:84:f0:
45:c7:8e:d5:87:10:e8:fe:cb:5f:8d:e9:67:ca:43:88:01:38:
12:f6:2a:61:61:62:f4:7c:02:58:11:d3:b5:2a:47:5d:b7:24:
53:c4:ca:f9:43:83:24:8f:a5:b0:c4:5e:ea:f9:aa:a0:65:7a:
49:8a:41:33:6b:32:ed:f5:3d:fa:0a:f4:1c:87:5a:6e:93:2e:
1c:cd:61:12:d1:b9:c8:28:ca:b7:22:69:91:ec:58:42:6a:0f:
50:9f:fa:03:b6:c0:57:0f:ff:0e:57:81:c6:da:11:f0:f2:6e:
d1:f8:3f:66:d1:ca:35:c4:8a:4d:57:a7:f0:39:e2:b1:16:f4:
81:fb:22:c6:7e:c2:a8:85:ea:fb:f1:0b:0e:bd:a6:39:53:2b:
38:84:3a:5d:d1:84:4e:d9:b4:1c:e0:c2:45:74:bb:bf:6f:85:
81:b7:88:8e:8c:b4:1c:89:e9:5a:f1:d9:7c:68:87:8d:c6:c2:
f6:89:d8:58:c9:3a:c0:51:70:67:f7:a4:80:d6:4e:f5:db:00:
3b:15:95:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:18 2026 by rpki-client