Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Sh2PEP2-MbPB0IM3ViP0tnARGnw.roa
File: Sh2PEP2-MbPB0IM3ViP0tnARGnw.roa (raw, json)
Hash identifier: aLTyx16ru8CGVowWY4gCMQ3X+iZjRgCKx74BRuePAjI=
Subject key identifier: 4A:1D:8F:10:FD:BE:31:B3:C1:D0:83:37:56:23:F4:B6:70:11:1A:7C
Certificate issuer: /CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Certificate serial: 019F2368C4410E778C06816106B3E8B96E9B
Authority key identifier: 0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Sh2PEP2-MbPB0IM3ViP0tnARGnw.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47447
IP address blocks: 92.42.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c4:41:0e:77:8c:06:81:61:06:b3:e8:b9:6e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a1d8f10fdbe31b3c1d083375623f4b670111a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:7c:65:29:ec:f8:fb:6d:fa:fe:40:c7:f2:
bf:74:30:a0:72:10:39:c5:c0:24:56:24:c2:69:bd:
2f:89:2d:ee:2e:3f:1e:e1:b9:00:93:c2:49:3e:a5:
51:42:ab:64:2a:37:38:34:08:dd:b7:12:35:39:c0:
84:98:0e:0d:b1:c0:ef:24:15:97:26:82:27:2b:5f:
f9:4c:d0:e2:b6:9f:5e:68:01:05:1a:53:82:73:f7:
42:1f:c0:8f:72:c3:08:52:e3:e2:6e:fe:d0:39:de:
81:2a:6c:b9:db:14:8c:47:80:fa:d4:cb:52:ec:46:
89:46:df:d8:59:d1:37:de:bd:be:e6:b9:7e:be:43:
c1:04:ff:c6:99:77:ff:45:71:2d:88:f7:ad:a4:a3:
41:70:0c:b9:ec:32:79:08:bd:9d:de:60:fa:50:07:
80:2a:32:d0:14:ab:dd:d6:67:07:68:ed:7c:3d:0c:
5a:10:11:e8:61:2d:91:78:5f:fc:63:d1:00:86:92:
11:e8:58:2e:d2:4e:8f:be:3a:ad:57:b5:b8:2c:b6:
2c:f3:49:d9:f2:80:45:a9:ed:e0:89:a4:a5:4f:d1:
e1:f8:a2:3b:16:f5:7d:48:2c:82:96:c4:7a:4e:93:
4a:33:0d:b5:e6:72:7f:36:c9:8e:e5:fe:f9:39:7c:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1D:8F:10:FD:BE:31:B3:C1:D0:83:37:56:23:F4:B6:70:11:1A:7C
X509v3 Authority Key Identifier:
keyid:0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Sh2PEP2-MbPB0IM3ViP0tnARGnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.99.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e0:27:09:af:4b:9a:5f:c9:64:30:77:3b:95:04:dd:13:68:
4f:31:cf:70:6b:b3:53:ec:50:c9:37:af:fa:3c:a9:ff:aa:37:
aa:71:da:1c:e1:75:5e:ab:15:36:be:51:74:26:06:74:7e:f9:
bb:9a:89:8c:a8:c9:74:a9:4f:46:15:59:29:31:d8:07:5c:24:
be:f7:fc:1d:05:87:7f:4e:c4:42:5d:32:bd:51:3c:91:c7:e9:
b4:27:37:39:d8:0e:0a:67:bd:f1:bd:1c:3d:7c:03:3a:dd:3e:
fc:79:de:02:46:15:67:9e:2e:62:06:89:12:d8:08:5e:bd:12:
09:dd:9c:26:4c:d7:35:22:70:8c:2a:43:da:a8:dc:a1:e4:51:
3b:75:0d:6b:17:3d:be:ee:13:f5:d7:df:71:5e:8e:68:05:e8:
ba:da:b8:af:15:03:07:05:1d:d1:7b:bc:db:5c:b9:ba:2a:6a:
c2:bc:71:0f:2e:47:bf:27:45:6f:2f:36:83:b3:bf:2d:b1:a2:
9b:7e:9e:ec:a3:89:6a:25:e7:4b:ed:80:2f:01:29:fe:bb:07:
e9:10:e4:3e:9f:80:71:80:db:c9:8d:03:8c:ae:29:53:08:5b:
63:8e:70:1b:90:c9:60:89:e3:0a:d2:05:68:7e:84:ad:4a:40:
03:13:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:54 2026 by rpki-client