Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/2RHf-9fOIvKsA2VNSiC87nFbCOs.roa
File: 2RHf-9fOIvKsA2VNSiC87nFbCOs.roa (raw, json)
Hash identifier: dgDZc/LxnLIjKHM4eGdgAhe4w7g3MVLAoMHC9X1LCgI=
Subject key identifier: D9:11:DF:FB:D7:CE:22:F2:AC:03:65:4D:4A:20:BC:EE:71:5B:08:EB
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019EF937A697094B05EFF0AF7C4DE0D45EEE
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/2RHf-9fOIvKsA2VNSiC87nFbCOs.roa
Signing time: Wed 24 Jun 2026 10:40:34 +0000
ROA not before: Wed 24 Jun 2026 10:40:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 2001:4c68:201::/48 maxlen: 48
2001:4c68:202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:37:a6:97:09:4b:05:ef:f0:af:7c:4d:e0:d4:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jun 24 10:40:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d911dffbd7ce22f2ac03654d4a20bcee715b08eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:a3:ab:10:72:ae:fb:f7:a2:90:c7:24:a3:
27:b7:fd:e2:5b:65:91:0b:ba:fb:6f:52:f9:93:ed:
32:e9:e8:e7:48:64:0e:95:87:ab:7d:f8:4c:1d:f2:
dc:ca:b8:04:4a:0b:a2:09:50:c9:43:15:16:0f:95:
71:ef:d9:ef:b0:e6:85:de:db:42:eb:72:51:cc:6f:
5f:7e:de:df:7f:de:9f:7c:54:f2:b3:63:04:fe:64:
7a:8f:3f:7b:dd:77:c4:2d:5f:ce:4c:87:a0:a4:93:
97:62:fe:bc:f6:28:8b:8d:9f:b5:46:0b:d2:8e:fd:
08:c5:a3:c6:ae:1c:4a:eb:91:92:47:40:89:5c:97:
55:e9:b2:be:01:cd:cd:ae:4c:5b:71:1b:f2:1d:e1:
df:08:be:9e:76:d5:61:37:47:91:f3:94:8f:22:65:
e7:9b:83:dc:4d:70:71:b6:94:78:72:4c:c5:79:59:
bf:20:74:e6:57:c3:7c:6b:ff:4d:1b:f1:6d:fc:d6:
2b:43:bf:51:78:06:31:b2:46:ae:8c:99:ac:a3:0e:
98:0d:7d:b1:c7:60:02:09:26:20:7d:71:59:ad:b9:
07:e9:16:25:b3:13:dd:be:98:ec:a9:88:01:26:5f:
4b:a5:69:dc:89:67:40:fe:f2:7a:26:c3:cb:b7:9c:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:11:DF:FB:D7:CE:22:F2:AC:03:65:4D:4A:20:BC:EE:71:5B:08:EB
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/2RHf-9fOIvKsA2VNSiC87nFbCOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4c68:201::-2001:4c68:202:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
83:c0:58:04:ad:a0:91:f2:d5:40:2e:dc:fe:d5:f6:12:e6:bf:
3d:7d:36:dc:a8:75:52:86:72:16:1d:3f:de:1e:4c:fd:fd:8c:
06:43:1a:1f:8d:cf:1b:c5:f3:78:ff:04:1a:f4:37:26:89:92:
fe:86:7f:91:d7:d8:1c:1d:7c:76:35:2b:aa:06:09:51:25:ad:
e5:f7:04:d8:ac:ca:7c:69:3c:3b:1a:b4:6a:ff:d5:4c:0e:1a:
9b:b0:6e:51:64:45:90:52:41:1b:ec:6f:5a:6c:5f:42:99:55:
85:22:32:42:ec:6f:d9:87:42:0a:12:50:e3:3d:f6:c5:9a:fe:
0f:a7:b5:f0:bb:6e:f2:80:0b:66:e1:f6:6a:2f:11:06:f7:01:
c1:6e:98:aa:72:9c:86:43:32:2f:9d:90:a7:07:62:17:7c:01:
ad:9c:37:2e:64:c2:f2:60:70:01:a6:8b:77:56:08:3c:d6:70:
a2:49:16:7e:bf:9c:0e:9d:e5:f1:f5:0d:e7:61:3b:e9:51:d9:
9c:d4:05:fd:97:12:ca:12:10:fd:c5:eb:e1:22:2d:80:40:b3:
64:e4:2a:c5:bc:26:75:da:49:70:e1:e2:e9:64:6a:32:20:9b:
f0:00:9f:c3:f9:cc:cd:08:61:b8:06:2b:da:0d:0e:a3:b9:b2:
ed:b7:9e:4b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ75N6aXCUsF7/CvfE3g1F7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTc3YzcwOGFmMGJhMWY4MTU0OWM5Zjg3MDg5NTU5Mzkw
MTY3YTUwHhcNMjYwNjI0MTA0MDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTExZGZmYmQ3Y2UyMmYyYWMwMzY1NGQ0YTIwYmNlZTcxNWIwOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EyjqxByrvv3opDHJKMnt/3iW2WR
C7r7b1L5k+0y6ejnSGQOlYerffhMHfLcyrgESguiCVDJQxUWD5Vx79nvsOaF3ttC
63JRzG9fft7ff96ffFTys2ME/mR6jz973XfELV/OTIegpJOXYv689iiLjZ+1RgvS
jv0IxaPGrhxK65GSR0CJXJdV6bK+Ac3NrkxbcRvyHeHfCL6edtVhN0eR85SPImXn
m4PcTXBxtpR4ckzFeVm/IHTmV8N8a/9NG/Ft/NYrQ79ReAYxskaujJmsow6YDX2x
x2ACCSYgfXFZrbkH6RYlsxPdvpjsqYgBJl9LpWnciWdA/vJ6JsPLt5yBJQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNkR3/vXziLyrANlTUogvO5xWwjrMB8GA1UdIwQY
MBaAFKynfHCK8LofgVScn4cIlVk5AWelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYt
MjhiMTllM2ZkNGE2LzEvMlJIZi05Zk9JdktzQTJWTlNpQzg3bkZiQ09zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYtMjhiMTllM2ZkNGE2
LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAgAUxo
AgEDBwAgAUxoAgIwDQYJKoZIhvcNAQELBQADggEBAIPAWAStoJHy1UAu3P7V9hLm
vz19NtyodVKGchYdP94eTP39jAZDGh+NzxvF83j/BBr0NyaJkv6Gf5HX2BwdfHY1
K6oGCVElreX3BNisynxpPDsatGr/1UwOGpuwblFkRZBSQRvsb1psX0KZVYUiMkLs
b9mHQgoSUOM99sWa/g+ntfC7bvKAC2bh9movEQb3AcFumKpynIZDMi+dkKcHYhd8
Aa2cNy5kwvJgcAGmi3dWCDzWcKJJFn6/nA6d5fH1DedhO+lR2ZzUBf2XEsoSEP3F
6+EiLYBAs2TkKsW8JnXaSXDh4ulkajIgm/AAn8P5zM0IYbgGK9oNDqO5su23nks=
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:46 2026 by rpki-client