Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2wejFkvq4yHSr8zeFJiwHG6shaM.roa
File: 2wejFkvq4yHSr8zeFJiwHG6shaM.roa (raw, json)
Hash identifier: TZAGRf+nKywOqKuXySjaqZuJEorYqCRf72VkEWlP00M=
Subject key identifier: DB:07:A3:16:4B:EA:E3:21:D2:AF:CC:DE:14:98:B0:1C:6E:AC:85:A3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A05C5ADBD14699C4CE23D21D311A2BC9EA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2wejFkvq4yHSr8zeFJiwHG6shaM.roa
Signing time: Tue 01 Sep 2026 09:44:13 +0000
ROA not before: Tue 01 Sep 2026 09:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218921
IP address blocks: 192.165.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:5a:db:d1:46:99:c4:ce:23:d2:1d:31:1a:2b:c9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 1 09:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db07a3164beae321d2afccde1498b01c6eac85a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:5d:25:7d:d8:4b:4f:fe:1c:21:47:f7:3e:
84:7d:43:af:de:ea:f6:29:cb:f5:6f:ea:3c:4f:96:
53:df:29:b8:7c:f3:c6:5d:cf:f0:43:52:83:a2:22:
48:39:aa:81:22:68:70:f1:a1:7a:30:6d:50:d7:98:
cd:a3:ce:35:89:12:ab:82:cb:30:b6:35:5b:ca:b1:
01:1b:d2:28:18:b0:7b:9e:7a:61:1a:b8:8e:dd:0d:
ec:f4:16:11:9e:15:19:88:ff:82:e4:62:8c:5f:19:
02:e6:97:1b:af:f6:bb:db:3f:b4:53:b9:e2:23:8b:
ab:3e:e3:1d:81:7e:2a:22:7e:b9:a3:dc:ab:e0:4c:
bf:cf:46:2c:e5:72:2d:fc:26:57:e2:29:15:fe:90:
9d:56:4c:f2:2f:0e:db:87:39:56:67:2a:d3:3a:f5:
5a:fa:8f:f3:02:45:bb:d2:e0:a2:ef:f8:54:c2:37:
23:f5:43:f2:e2:35:80:1c:6a:62:f7:6d:ad:e0:91:
d1:7f:19:67:48:02:ac:32:20:12:43:42:91:c6:e9:
20:7c:5a:56:86:19:b0:0e:27:73:ad:2b:5c:09:e5:
40:75:d1:5e:48:0c:81:ab:97:4b:62:a1:6d:3b:c4:
bc:aa:53:75:b7:78:13:7a:13:8c:7e:82:01:c4:3d:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:07:A3:16:4B:EA:E3:21:D2:AF:CC:DE:14:98:B0:1C:6E:AC:85:A3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2wejFkvq4yHSr8zeFJiwHG6shaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.61.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e9:d9:25:53:35:02:77:a7:39:bf:ee:de:90:84:97:7c:9a:
c8:33:05:cc:af:99:48:48:58:52:ee:48:17:b7:2f:f3:5d:ae:
bc:d3:a6:a5:5b:fe:78:31:c9:39:5e:99:ed:bc:10:9b:18:84:
13:b6:47:52:77:51:66:84:69:b3:43:ab:6e:95:42:2d:03:91:
f1:fe:43:ba:f4:d3:a7:27:f1:40:74:a8:83:2a:8b:2d:54:c8:
3d:f3:cc:2d:98:3c:12:98:1a:b8:8d:a9:ab:4b:eb:9d:74:49:
ac:bc:b2:86:94:cb:db:0c:3b:06:64:44:e5:8c:f6:1f:35:2e:
b6:d1:8f:d7:99:4a:e8:d9:dd:17:8d:e4:16:19:ed:f6:e1:f0:
ee:d7:f5:83:fd:8c:c4:b4:59:82:3b:23:77:69:1b:50:77:bc:
21:a9:c4:f1:14:73:d7:65:65:6e:5f:60:4b:bb:8f:b9:c7:b8:
13:3d:74:d4:9d:40:99:83:ce:1a:95:d3:2a:4a:e8:4c:d5:eb:
cb:fd:9f:84:8b:62:9e:c8:92:9d:93:a8:79:1a:7a:cd:82:54:
ec:f3:aa:fb:fe:ea:90:6e:68:8b:a5:ab:cd:c4:c8:0e:85:71:
9a:c7:68:23:7b:b7:40:db:f6:1d:22:6d:16:e8:52:83:05:10:
94:5a:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:28 2026 by rpki-client