Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/2nrbW3VdeN2GnR3O-CPVEbZiCHs.roa
File: 2nrbW3VdeN2GnR3O-CPVEbZiCHs.roa (raw, json)
Hash identifier: SPTJ+uK+hKRfW/BtTC1O2+VvVevjpsE7eAr+uPMmQmc=
Subject key identifier: DA:7A:DB:5B:75:5D:78:DD:86:9D:1D:CE:F8:23:D5:11:B6:62:08:7B
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 01A115796C46FFF321B72013324D58481647
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/2nrbW3VdeN2GnR3O-CPVEbZiCHs.roa
Signing time: Wed 07 Oct 2026 08:27:21 +0000
ROA not before: Wed 07 Oct 2026 08:27:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25233
IP address blocks: 77.64.0.0/17 maxlen: 17
77.64.40.0/24 maxlen: 24
78.93.0.0/16 maxlen: 16
78.93.28.0/24 maxlen: 24
78.93.45.0/24 maxlen: 24
78.93.50.0/24 maxlen: 24
78.93.72.0/22 maxlen: 22
78.93.92.0/22 maxlen: 22
78.93.96.0/22 maxlen: 22
78.93.107.0/24 maxlen: 24
78.93.108.0/24 maxlen: 24
78.93.109.0/24 maxlen: 24
78.93.144.0/24 maxlen: 24
78.93.145.0/24 maxlen: 24
78.93.146.0/24 maxlen: 24
78.93.147.0/24 maxlen: 24
78.93.148.0/24 maxlen: 24
78.93.149.0/24 maxlen: 24
78.93.150.0/24 maxlen: 24
78.93.151.0/24 maxlen: 24
78.93.152.0/24 maxlen: 24
78.93.153.0/24 maxlen: 24
78.93.154.0/24 maxlen: 24
78.93.155.0/24 maxlen: 24
78.93.156.0/24 maxlen: 24
78.93.157.0/24 maxlen: 24
78.93.158.0/24 maxlen: 24
78.93.159.0/24 maxlen: 24
78.93.160.0/24 maxlen: 24
78.93.161.0/24 maxlen: 24
84.22.224.0/19 maxlen: 19
84.22.231.0/24 maxlen: 24
84.22.234.0/24 maxlen: 24
84.22.238.0/24 maxlen: 24
84.22.241.0/24 maxlen: 24
84.22.254.0/24 maxlen: 24
86.60.64.0/18 maxlen: 18
86.60.101.0/24 maxlen: 24
86.60.107.0/24 maxlen: 24
86.60.109.0/24 maxlen: 24
86.60.112.0/21 maxlen: 21
86.60.126.0/24 maxlen: 24
212.93.192.0/19 maxlen: 19
212.93.196.0/24 maxlen: 24
212.100.192.0/19 maxlen: 19
212.100.210.0/24 maxlen: 24
212.100.218.0/24 maxlen: 24
212.100.223.0/24 maxlen: 24
212.116.192.0/19 maxlen: 19
213.184.160.0/19 maxlen: 19
2a02:df0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:79:6c:46:ff:f3:21:b7:20:13:32:4d:58:48:16:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Oct 7 08:27:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da7adb5b755d78dd869d1dcef823d511b662087b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:b6:95:91:02:ba:bd:54:07:aa:19:fa:cd:
ec:60:cd:85:93:4c:91:4c:0e:2b:6b:31:67:50:93:
5c:e4:1a:e1:bb:a7:99:51:68:fc:9a:bd:51:9c:49:
56:13:3b:63:98:56:6e:dd:19:58:50:5a:f8:56:ca:
76:48:bc:e4:22:ea:c2:3a:e2:eb:64:b8:28:99:4a:
51:d4:df:1c:c8:07:53:aa:06:56:d2:9a:89:34:79:
e6:22:b2:5d:85:06:6d:d1:67:90:8c:7f:6f:1f:7c:
fd:70:08:14:de:f5:e7:ab:50:9a:59:d9:39:c1:18:
84:3b:ef:e6:41:a3:da:03:c4:5b:d7:fa:35:f2:46:
cf:17:4f:fd:e6:04:5d:b1:bd:b8:9d:68:44:63:c1:
6b:9b:af:ad:13:b9:3f:c1:23:01:32:98:f0:8d:63:
23:a1:ca:2d:02:42:02:0c:d1:bf:58:dd:ec:05:a9:
19:02:60:85:72:e5:f1:53:c6:67:8a:65:22:fe:15:
d1:7b:34:11:01:7e:18:2e:a2:6d:89:fa:93:9a:27:
cb:bf:ef:77:3e:a6:e0:11:81:f0:15:b8:2e:f6:c2:
58:0e:63:98:2e:0e:24:78:10:e9:33:77:34:dd:56:
74:5a:26:ff:ee:01:3a:e0:ff:5c:cb:7a:77:29:83:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7A:DB:5B:75:5D:78:DD:86:9D:1D:CE:F8:23:D5:11:B6:62:08:7B
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/2nrbW3VdeN2GnR3O-CPVEbZiCHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.64.0.0/17
78.93.0.0/16
84.22.224.0/19
86.60.64.0/18
212.93.192.0/19
212.100.192.0/19
212.116.192.0/19
213.184.160.0/19
IPv6:
2a02:df0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:4d:86:a4:0c:af:7a:7a:13:ea:fa:9e:21:8f:1d:00:49:3a:
63:47:70:2e:f8:9f:10:06:c3:48:2f:38:50:d9:2d:94:90:3d:
32:eb:c3:1a:ce:30:47:24:5c:8f:b7:a2:a4:79:1a:9b:84:e9:
3d:4c:a8:b7:dc:cb:a4:54:30:fd:18:f1:db:f5:9c:4a:9a:46:
1f:41:59:25:b8:8c:86:6f:5a:51:68:fb:96:d0:b9:1a:ab:e0:
c8:96:28:f4:07:2c:db:48:c1:45:de:50:f7:7f:26:27:80:e3:
61:c1:17:56:29:19:9a:a8:71:20:2f:6c:48:e9:80:bf:ff:53:
08:c7:1c:66:88:fb:01:42:ab:fb:7e:7c:f6:b0:2f:b7:72:3b:
68:1d:f5:38:4b:56:33:75:b5:e0:64:62:90:60:40:be:f1:02:
92:09:e5:22:8b:81:9d:c9:9a:45:76:f6:e8:6f:97:9e:2f:ad:
7f:df:f2:f8:63:4e:5d:6a:1d:01:86:d8:96:5f:31:12:42:1f:
f6:8c:f7:0b:85:1e:8a:0c:b6:0e:34:bb:1e:dd:68:8d:65:03:
d0:32:05:07:e3:cc:21:e6:12:c8:60:df:fc:93:b4:59:45:f8:
64:9f:a7:de:94:86:d7:20:82:ac:19:be:f7:43:64:fb:17:5d:
4f:09:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:24:55 2026 by rpki-client