Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/2nTM0D-a0nASVa1p2SsE0MKhwbo.roa
File: 2nTM0D-a0nASVa1p2SsE0MKhwbo.roa (raw, json)
Hash identifier: BRJ4KsmqnH+3689KCfmrsNy/UG7jQKDPebqleLFq6n8=
Subject key identifier: DA:74:CC:D0:3F:9A:D2:70:12:55:AD:69:D9:2B:04:D0:C2:A1:C1:BA
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019F04BBAE188491F40A1F14091B486D6AB2
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/2nTM0D-a0nASVa1p2SsE0MKhwbo.roa
Signing time: Fri 26 Jun 2026 16:20:36 +0000
ROA not before: Fri 26 Jun 2026 16:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219346
IP address blocks: 95.164.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:bb:ae:18:84:91:f4:0a:1f:14:09:1b:48:6d:6a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jun 26 16:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da74ccd03f9ad2701255ad69d92b04d0c2a1c1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:61:50:a0:43:ac:73:27:1c:ce:67:22:ce:
e9:1d:b8:9e:ae:79:92:a3:dd:ed:6c:31:3c:aa:54:
1a:08:7d:b4:41:41:bc:9d:5a:80:2b:15:f0:a1:82:
b0:44:8f:21:20:eb:1b:e6:b6:fd:48:36:bc:f7:bb:
9a:79:20:06:0d:fe:be:7d:65:3b:83:18:2d:0d:08:
a4:ad:66:dd:4a:fa:5f:a2:0c:2a:37:77:1e:71:3f:
2f:45:ef:90:69:d6:6a:eb:5f:fc:9c:e5:2e:e0:a7:
69:52:da:d6:17:d6:0d:c4:3f:7f:78:14:48:9c:da:
ca:af:4b:c9:76:31:bf:8d:46:56:93:44:a1:7e:ee:
b6:0e:c2:ef:6c:f7:de:34:d9:38:85:db:53:83:fa:
32:8f:18:1d:43:93:d0:78:fe:28:22:e5:8a:14:93:
b7:e2:3a:d5:a1:2b:53:41:7e:45:9f:8c:84:92:20:
e7:a4:bc:47:24:df:fe:7c:2a:69:e4:cf:8d:65:ee:
df:9b:3c:b6:61:2c:12:48:2e:fb:84:bd:5e:7e:ea:
e7:c5:55:23:06:b6:d9:75:96:ac:ac:9f:3c:2c:ff:
7b:e2:bb:38:a8:fe:92:2d:ba:d7:2c:26:67:35:85:
38:a7:4a:8e:43:56:72:ff:e2:56:3b:43:d8:34:eb:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:74:CC:D0:3F:9A:D2:70:12:55:AD:69:D9:2B:04:D0:C2:A1:C1:BA
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/2nTM0D-a0nASVa1p2SsE0MKhwbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.85.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:4d:cf:19:7f:49:ba:49:b1:cc:5a:b1:38:0c:8c:8e:27:3b:
52:69:7d:13:66:ac:d8:e1:8a:aa:db:b5:96:3d:b3:7b:3a:06:
53:15:b6:66:59:ec:e2:58:b8:fc:58:dd:86:74:c7:2c:b5:86:
ce:f9:f1:11:f1:b6:d3:25:1d:06:ef:71:e5:e1:ba:2a:c6:30:
ff:d0:08:7b:87:01:89:01:ce:95:b5:1c:a8:74:5b:c0:06:07:
7a:63:5d:ee:cc:03:bc:bc:5f:b3:20:eb:18:49:a2:f3:ee:f6:
27:94:03:a3:85:3e:83:c3:d8:b4:18:a1:14:68:81:f8:81:dc:
a3:38:ac:a6:04:76:5b:4d:73:63:4e:75:47:4b:7c:3e:76:f9:
c7:ee:66:62:49:a2:dd:34:e2:b0:b8:07:5e:f1:39:da:af:1a:
1d:7c:ca:67:bc:86:0a:3c:15:5b:37:fd:c5:63:a7:dd:dd:0f:
e2:0c:d7:5e:61:71:b3:2c:f0:7e:bd:a2:95:d3:56:92:dc:d7:
2e:98:3c:ff:a6:f7:77:5d:7f:e4:58:5b:0c:7a:65:ca:8a:0e:
15:32:64:56:04:09:9a:e2:3d:c0:90:c9:1f:a1:22:f0:dd:1e:
98:c5:a0:fb:80:7f:09:d7:02:1a:b4:87:e8:37:94:1e:a1:cb:
b5:01:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:13 2026 by rpki-client