Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/2EDW-s-ud7-nCTr1Sgos54mN1mM.roa
File: 2EDW-s-ud7-nCTr1Sgos54mN1mM.roa (raw, json)
Hash identifier: YCcPBkAYBuUswz1BVwdFoQLrC8n9zW+jV/kRYtdf2D0=
Subject key identifier: D8:40:D6:FA:CF:AE:77:BF:A7:09:3A:F5:4A:0A:2C:E7:89:8D:D6:63
Certificate issuer: /CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
Certificate serial: 019F23688128ED771D694C712D0520AE8FD0
Authority key identifier: FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/2EDW-s-ud7-nCTr1Sgos54mN1mM.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200023
IP address blocks: 45.82.184.0/22 maxlen: 22
194.176.127.0/24 maxlen: 24
2a0e:7180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:81:28:ed:77:1d:69:4c:71:2d:05:20:ae:8f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d840d6facfae77bfa7093af54a0a2ce7898dd663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:03:44:0c:01:8c:a4:33:19:91:ae:b7:b2:
7c:f4:9f:0b:c2:51:17:11:09:aa:c7:4a:62:b3:15:
98:61:b3:43:d4:a4:17:80:07:60:76:b4:df:1c:9d:
b5:6c:65:56:02:f4:cb:19:88:40:9c:68:44:0d:d3:
c7:6e:3f:30:48:98:ae:29:bc:97:ab:c2:51:98:76:
a6:8c:a8:64:d6:0e:00:26:4d:c3:2b:aa:33:06:02:
87:5b:7d:3e:28:3c:73:8d:ec:26:18:72:9c:67:78:
db:1f:46:ee:3c:df:17:7d:fa:e9:15:29:19:f2:a2:
f6:f1:63:6f:de:a3:f5:96:44:69:39:12:40:db:77:
a1:c4:06:71:7c:a5:51:bc:f3:35:1c:8a:45:bb:ba:
68:e4:60:bb:34:07:f1:64:b1:ea:76:19:00:6e:4a:
61:b7:56:97:4b:8e:af:a6:13:36:7c:55:53:ea:c8:
89:7d:90:83:0a:e2:e5:05:78:48:af:a8:80:16:a0:
6a:56:87:23:c9:b2:dc:a1:4a:c5:01:29:75:f4:44:
9a:63:a3:26:73:2c:72:cc:7a:53:ad:c1:1c:e5:0c:
46:bc:54:da:59:b0:fb:85:79:d7:b5:a4:7e:8b:97:
02:b9:20:85:8a:39:24:e4:5c:32:7e:34:b4:c8:1a:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:40:D6:FA:CF:AE:77:BF:A7:09:3A:F5:4A:0A:2C:E7:89:8D:D6:63
X509v3 Authority Key Identifier:
keyid:FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/2EDW-s-ud7-nCTr1Sgos54mN1mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.184.0/22
194.176.127.0/24
IPv6:
2a0e:7180::/29
Signature Algorithm: sha256WithRSAEncryption
ad:33:c3:3c:0c:95:c9:3a:e0:63:6a:15:fd:17:79:ad:5f:31:
55:67:02:86:82:b1:a6:57:f1:48:f8:cb:9b:71:a9:83:35:7f:
ee:fc:14:be:71:9e:fe:e0:05:16:88:a7:d0:4a:26:d6:fd:be:
1b:db:07:61:df:01:95:c5:34:9f:9a:2e:36:82:fc:f0:98:3d:
37:90:f4:fa:8b:bd:64:b1:34:0e:53:3e:64:9c:00:8e:dc:37:
13:30:76:a3:43:3e:a8:9b:4e:6a:26:20:75:48:df:e9:bb:95:
54:f8:76:49:05:f3:a5:d0:8c:00:52:a7:c2:a1:07:c5:75:83:
32:c6:4b:73:3f:04:ac:63:76:93:c3:18:53:6d:15:e7:b6:61:
de:0d:8f:66:6f:c0:5c:b3:63:33:b4:f1:d8:37:5c:d5:bb:c8:
a5:92:0b:2b:99:be:af:7f:f0:8f:26:c0:89:57:3b:5e:99:33:
8f:05:18:68:c0:57:02:38:d1:28:0b:3f:cf:bb:37:58:90:31:
f1:4d:d8:7b:1e:af:09:47:2c:13:5c:0c:02:7b:43:b1:52:fd:
8a:1b:5d:11:cd:90:b7:4c:27:7b:a6:be:ab:26:bb:93:5e:26:
f1:52:67:3a:a1:95:34:42:b5:6b:be:17:c7:80:a2:e6:b6:0b:
4d:36:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:52 2026 by rpki-client