Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/2zlKB2FmqzSnVerKeenYffIq4Ww.roa
File: 2zlKB2FmqzSnVerKeenYffIq4Ww.roa (raw, json)
Hash identifier: AromkeG9Ku6U1AGMbOjCq8GwJmgJayRG3XjiVCT4Cck=
Subject key identifier: DB:39:4A:07:61:66:AB:34:A7:55:EA:CA:79:E9:D8:7D:F2:2A:E1:6C
Certificate issuer: /CN=3892e35ed6d9a93aaebaa06f736d2ecc6a0089b8
Certificate serial: 019F236898E2C639C81611BFA62369D6850E
Authority key identifier: 38:92:E3:5E:D6:D9:A9:3A:AE:BA:A0:6F:73:6D:2E:CC:6A:00:89:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJLjXtbZqTquuqBvc20uzGoAibg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/2zlKB2FmqzSnVerKeenYffIq4Ww.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47549
IP address blocks: 93.159.200.0/24 maxlen: 24
93.159.201.0/24 maxlen: 24
93.159.202.0/24 maxlen: 24
93.159.205.0/24 maxlen: 24
93.159.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/OJLjXtbZqTquuqBvc20uzGoAibg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/OJLjXtbZqTquuqBvc20uzGoAibg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJLjXtbZqTquuqBvc20uzGoAibg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:98:e2:c6:39:c8:16:11:bf:a6:23:69:d6:85:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3892e35ed6d9a93aaebaa06f736d2ecc6a0089b8
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db394a076166ab34a755eaca79e9d87df22ae16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:f3:3e:fc:42:ab:92:ca:2a:72:21:13:42:
c6:34:2b:79:2e:e8:a5:99:52:54:d6:ed:d5:88:e2:
8f:8a:43:ba:b5:05:06:23:a1:de:e1:56:31:1e:f0:
30:ed:1d:0d:2a:91:d7:1f:3a:21:55:74:31:58:21:
e7:0d:8c:e7:a9:76:15:77:13:24:94:64:1b:05:58:
39:03:44:e5:f2:a8:c3:c9:d3:1f:9c:0c:70:85:93:
32:aa:40:55:4c:07:0d:32:e9:7f:04:92:21:5a:87:
0b:1a:cd:dd:d5:4f:99:e9:ff:bb:9e:5e:a9:11:8a:
da:ad:d0:cf:8f:03:15:ce:f4:23:a1:d2:90:8b:68:
53:3c:2a:8f:30:fb:11:d5:5d:ef:90:ff:82:e9:86:
85:66:c0:38:dc:42:ec:20:08:7b:3c:46:4d:a3:bc:
a5:8a:6e:91:e2:3b:7e:eb:bc:eb:ac:09:12:18:76:
70:d5:ab:91:78:2b:f8:34:61:82:f0:44:e1:b1:6b:
56:a1:e2:d2:47:ae:2e:5b:77:a7:ea:e7:54:bc:4c:
d9:6e:dd:2c:37:de:0c:7b:4d:8e:49:0e:24:6c:64:
9c:6d:67:5f:0f:35:81:72:02:ff:74:9b:27:af:79:
5b:c7:13:b6:e4:37:30:e8:dc:30:02:e5:f5:5d:a1:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:39:4A:07:61:66:AB:34:A7:55:EA:CA:79:E9:D8:7D:F2:2A:E1:6C
X509v3 Authority Key Identifier:
keyid:38:92:E3:5E:D6:D9:A9:3A:AE:BA:A0:6F:73:6D:2E:CC:6A:00:89:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJLjXtbZqTquuqBvc20uzGoAibg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/2zlKB2FmqzSnVerKeenYffIq4Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/OJLjXtbZqTquuqBvc20uzGoAibg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.200.0-93.159.202.255
93.159.205.0-93.159.206.255
Signature Algorithm: sha256WithRSAEncryption
7b:0f:bb:2b:aa:53:e8:57:41:77:72:36:20:d4:80:17:47:03:
2a:35:ef:e5:66:86:9c:d6:b0:2e:9d:68:f9:2e:a4:be:f5:4f:
ff:eb:20:4d:eb:5d:f4:fa:3f:6b:4a:3d:72:d6:f6:4c:ed:3a:
e1:47:98:b9:d8:7b:d4:22:da:15:04:b1:a1:2e:6f:09:a5:ca:
d4:4c:7e:22:60:98:8b:48:a3:4e:b9:57:1e:09:87:02:61:e3:
57:90:79:58:97:e4:d6:53:fa:70:d6:4d:5e:4a:84:03:c7:e6:
e4:82:88:cd:58:86:06:6f:60:a1:8a:7e:37:c0:e7:48:06:2a:
fd:cf:fd:2f:17:8e:43:a7:99:47:f3:24:08:2c:9b:63:49:19:
98:c1:6b:8b:d8:39:8d:5a:bc:ad:8f:e4:84:5c:18:06:40:f6:
7d:a9:78:c8:24:bc:da:51:9b:aa:91:70:b6:a2:76:d7:80:aa:
86:04:e3:34:ec:dc:b8:a0:0a:03:ff:9b:be:0d:f2:5d:2f:49:
6e:e4:db:c1:68:1f:30:1f:59:93:22:06:7f:36:c2:6a:04:f4:
49:e7:0d:12:bc:50:aa:ee:85:c4:a8:f0:e5:25:51:2d:83:31:
b3:9a:c4:16:8a:9e:82:2f:31:c8:34:7c:70:03:e2:81:7d:fe:
b5:f8:2b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:40:06 2026 by rpki-client