Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/2LUEnea7GMOKDdd8Xlfjzq_1ui4.roa
File: 2LUEnea7GMOKDdd8Xlfjzq_1ui4.roa (raw, json)
Hash identifier: IF7CCvUwPnFinFBxm1IsgVTLSiW2Hm0XZRPfgk9PaCs=
Subject key identifier: D8:B5:04:9D:E6:BB:18:C3:8A:0D:D7:7C:5E:57:E3:CE:AF:F5:BA:2E
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A03DC83CDF8235FE02E3FE2FD1E5CF893A
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/2LUEnea7GMOKDdd8Xlfjzq_1ui4.roa
Signing time: Wed 26 Aug 2026 11:15:27 +0000
ROA not before: Wed 26 Aug 2026 11:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21840
IP address blocks: 213.220.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:c8:3c:df:82:35:fe:02:e3:fe:2f:d1:e5:cf:89:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Aug 26 11:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8b5049de6bb18c38a0dd77c5e57e3ceaff5ba2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:61:85:e9:b1:0f:7e:1d:7f:34:19:17:f9:
8f:6a:e4:4f:5e:13:77:9c:7d:69:13:9a:dd:86:ef:
b7:c1:0e:10:a5:fe:cb:54:79:5f:06:06:10:1d:c9:
89:dc:5b:3b:02:5b:ad:b3:fa:a8:83:79:02:d4:31:
4d:09:89:1a:3d:1c:ee:09:f8:ca:eb:ff:51:29:74:
ae:af:a4:b4:2a:23:27:83:52:97:5e:34:bd:8b:0e:
8b:2b:95:a0:6b:7c:2d:cd:0f:2c:40:4a:26:4b:aa:
58:86:32:11:41:67:e0:19:de:b1:21:ac:92:b5:95:
96:e8:e1:14:56:71:2e:4a:39:0f:32:92:26:45:a6:
a4:d8:18:d6:de:42:cf:86:36:53:9d:5f:e9:7f:d4:
55:5a:e0:fa:23:15:1b:e4:1c:70:90:8c:9b:96:38:
13:6d:c6:e1:cf:ed:7e:aa:13:c4:74:6c:2f:cb:69:
d8:18:bb:7b:10:1f:69:c5:28:81:9e:1b:01:1a:c5:
fa:a1:a1:4f:13:60:36:32:d0:42:86:fc:51:52:3a:
c5:f0:ed:43:a3:af:2a:15:9a:4f:fe:83:22:51:dc:
b0:7b:8f:ee:fe:3a:6a:99:e7:84:40:76:45:3d:44:
a2:3d:95:1c:46:b7:e2:a0:69:4c:71:60:10:b0:ca:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B5:04:9D:E6:BB:18:C3:8A:0D:D7:7C:5E:57:E3:CE:AF:F5:BA:2E
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/2LUEnea7GMOKDdd8Xlfjzq_1ui4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.39.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d4:98:b6:b2:d3:c9:f6:a9:f6:1a:44:7f:83:c1:4d:51:0d:
d8:ce:64:4c:6d:a8:01:a2:62:00:a9:9d:b5:bc:0c:bf:94:e3:
96:63:a7:e5:7e:b1:71:62:c2:51:a4:e8:83:0d:96:ca:9f:d6:
0e:cf:5d:0c:57:41:d5:61:f1:98:2f:3c:8f:c9:c2:cf:62:0c:
c7:8e:b7:a7:d0:e8:97:e3:f1:51:08:40:f4:9c:c1:2b:b6:04:
d4:2d:77:11:24:31:e1:80:78:5c:8a:f6:77:bd:f6:f2:bd:14:
86:02:2c:e1:0f:da:8c:ce:8d:f5:2f:10:e0:9d:5e:ac:09:a4:
db:0b:de:06:ee:70:a1:da:d7:ee:86:92:71:3e:2b:be:fe:4f:
c5:a1:9b:6e:2f:8c:ab:dc:13:51:18:84:ff:e8:07:80:f5:a6:
21:8a:29:91:fd:91:e7:f4:64:02:c4:06:8b:7c:30:78:25:60:
bb:76:e6:c9:56:a8:00:57:2e:94:4f:0d:70:97:c2:d7:d1:f3:
8d:ca:7e:ce:d6:c2:10:1b:ae:ab:cf:06:8f:20:ce:66:60:30:
4b:6e:a6:08:d3:1c:51:3f:3e:aa:12:85:78:c9:02:55:4b:b1:
e5:87:02:69:02:9d:6a:ce:3b:d5:30:a0:7b:c0:b6:0e:d7:69:
c4:af:a4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:51 2026 by rpki-client