Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2RIFDkeSVI9ybQekYQiwy7SruQM.roa
File: 2RIFDkeSVI9ybQekYQiwy7SruQM.roa (raw, json)
Hash identifier: QWTKi2+ojhKOK8Cj2RCPOV5kI5+ZHLBpJE24c1/kKNg=
Subject key identifier: D9:12:05:0E:47:92:54:8F:72:6D:07:A4:61:08:B0:CB:B4:AB:B9:03
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019EC9DCD23C774A8400943E629841EBE422
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2RIFDkeSVI9ybQekYQiwy7SruQM.roa
Signing time: Mon 15 Jun 2026 05:59:12 +0000
ROA not before: Mon 15 Jun 2026 05:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153508
IP address blocks: 91.205.228.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 14:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c9:dc:d2:3c:77:4a:84:00:94:3e:62:98:41:eb:e4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 15 05:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d912050e4792548f726d07a46108b0cbb4abb903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:e0:39:1b:82:1f:41:31:4a:f1:7a:87:41:
b3:39:ba:da:28:f9:c1:b4:e8:de:f1:b0:8d:78:7b:
5c:b3:c6:3b:b8:56:2f:4e:18:12:41:ea:6e:de:78:
57:69:5c:20:4f:42:b8:e4:b1:51:c9:bc:91:01:32:
43:5f:8f:c2:f3:3e:f1:0b:57:83:1f:76:7f:79:bf:
38:cb:e7:bd:43:a1:09:64:ba:ec:2c:05:c3:60:3c:
c6:70:e3:4c:f0:d9:33:5a:e3:de:73:fd:e4:0f:2e:
21:57:91:10:89:bc:79:b2:b4:9f:4f:73:22:91:f6:
6a:ce:38:b8:40:92:87:9d:26:8d:09:8d:b4:df:e5:
08:e7:a4:e5:b8:03:93:cb:e7:8f:7e:9a:22:8c:b5:
ae:82:d7:35:59:73:09:13:9a:bd:f1:4e:a9:b3:eb:
16:ba:e7:14:0c:8e:84:c5:ed:1a:de:2b:99:24:05:
e5:69:c9:9f:99:5f:7f:91:fd:02:10:23:6c:c8:83:
44:b3:c6:f3:50:3d:86:ab:16:b4:74:ce:80:28:75:
d3:ff:0d:6a:5a:ec:cf:db:a9:40:0f:c1:1e:de:a3:
01:ea:b0:82:e6:42:5f:af:89:20:11:ed:af:83:91:
c7:ff:bf:fd:71:aa:21:3e:b7:aa:12:58:16:7a:9f:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:12:05:0E:47:92:54:8F:72:6D:07:A4:61:08:B0:CB:B4:AB:B9:03
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2RIFDkeSVI9ybQekYQiwy7SruQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.228.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2a:1b:ee:33:68:09:3f:85:19:23:f6:71:53:a9:3d:4f:c5:
22:cf:40:c9:33:fa:a1:8e:f0:47:99:62:cf:0e:b0:97:d1:d3:
5a:d2:54:1e:fa:d5:23:85:40:d6:8c:7f:eb:3b:c4:e3:a0:27:
ef:97:4d:19:84:82:0f:e8:4f:8d:e2:08:40:8e:a8:9e:78:e4:
4f:0a:61:7a:71:c5:20:36:3f:a7:27:bd:7a:97:7c:09:d6:84:
a8:8b:54:01:51:49:4e:05:12:ab:3a:e0:ef:b0:48:4c:12:a9:
98:50:c5:82:1c:76:86:b7:8a:e0:24:62:de:eb:97:39:3c:5b:
5b:2a:88:17:06:03:42:5a:e2:c3:fe:13:26:a6:be:cc:a4:91:
a6:02:c3:d0:45:19:a7:ff:89:97:d5:7b:64:1d:93:b4:58:37:
f3:8d:b6:f8:7e:c5:35:09:7c:7f:c5:64:4b:61:56:a3:df:01:
f7:88:d9:0b:38:9e:9c:bb:ba:55:f1:ae:43:d0:e8:c2:fa:4c:
d5:f7:4d:70:6b:37:e1:22:a1:69:f1:8d:43:f0:0d:28:53:d3:
a2:d5:e1:ab:d1:59:e1:82:b4:9b:13:3f:cf:7b:ff:f8:d3:40:
fc:3e:03:72:bf:bf:27:01:4a:8d:f4:98:71:48:88:02:dd:f6:
f1:79:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 22:30:34 2026 by rpki-client