Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/q2pAL2lCOW58gNErXJpyzMnWEGk.roa
File: q2pAL2lCOW58gNErXJpyzMnWEGk.roa (raw, json)
Hash identifier: vC6Ptp7svOt37VyHSqwU50xrCkwSLAjuQ0Pmh+N9xXQ=
Subject key identifier: AB:6A:40:2F:69:42:39:6E:7C:80:D1:2B:5C:9A:72:CC:C9:D6:10:69
Certificate issuer: /CN=8983d3e15f6e3661d71cf54f62f72fa14a275f4f
Certificate serial: 019FB2B2E19B29E9F313306687EFAC2310C7
Authority key identifier: 89:83:D3:E1:5F:6E:36:61:D7:1C:F5:4F:62:F7:2F:A1:4A:27:5F:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYPT4V9uNmHXHPVPYvcvoUonX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/q2pAL2lCOW58gNErXJpyzMnWEGk.roa
Signing time: Thu 30 Jul 2026 11:04:55 +0000
ROA not before: Thu 30 Jul 2026 11:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199999
IP address blocks: 185.38.68.0/22 maxlen: 22
185.101.0.0/22 maxlen: 22
2a04:7600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/iYPT4V9uNmHXHPVPYvcvoUonX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/iYPT4V9uNmHXHPVPYvcvoUonX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYPT4V9uNmHXHPVPYvcvoUonX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:b2:e1:9b:29:e9:f3:13:30:66:87:ef:ac:23:10:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8983d3e15f6e3661d71cf54f62f72fa14a275f4f
Validity
Not Before: Jul 30 11:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab6a402f6942396e7c80d12b5c9a72ccc9d61069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:21:91:32:f4:d4:f8:8d:cf:f8:82:3f:42:
f7:45:7c:bc:d1:4f:b3:38:0c:61:e3:87:d5:08:38:
da:dd:b8:13:ec:5f:73:bc:5e:26:95:51:e3:e2:ec:
55:0e:f2:37:15:f9:7d:0d:50:1c:91:5f:9a:9e:dd:
12:d9:ea:fb:0e:24:f2:f0:91:3e:49:b8:e9:d2:f7:
e0:30:b7:b0:6e:07:3e:32:49:bb:ae:76:9e:73:76:
6a:7f:fc:1b:19:12:06:bd:e3:bc:04:f8:ba:ff:54:
cc:f7:c5:48:88:f9:6f:e8:7c:a9:e9:98:46:94:c2:
cc:97:ad:e0:5a:48:9f:0a:46:ff:f0:17:86:07:db:
5b:ab:71:b6:d8:75:36:db:07:4d:16:d0:d0:cc:f4:
e8:62:69:d8:bf:be:6d:0d:d5:04:f7:94:3e:1b:39:
de:78:b1:a0:26:92:3b:2b:86:f8:cf:06:e6:2d:e7:
62:0e:f2:bc:d0:e7:88:3e:a0:61:e8:fe:95:c2:fb:
2c:4f:3c:b7:4e:fc:c8:7a:51:98:a6:f6:9f:16:b3:
97:5a:4f:f2:25:8e:4d:7b:2c:e4:9e:63:95:23:5d:
1e:3f:76:2d:87:f0:64:0d:ec:60:41:d3:e1:ce:0f:
49:af:00:bc:23:c3:bc:23:dc:a5:72:13:67:ba:a2:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6A:40:2F:69:42:39:6E:7C:80:D1:2B:5C:9A:72:CC:C9:D6:10:69
X509v3 Authority Key Identifier:
keyid:89:83:D3:E1:5F:6E:36:61:D7:1C:F5:4F:62:F7:2F:A1:4A:27:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYPT4V9uNmHXHPVPYvcvoUonX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/q2pAL2lCOW58gNErXJpyzMnWEGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/iYPT4V9uNmHXHPVPYvcvoUonX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.68.0/22
185.101.0.0/22
IPv6:
2a04:7600::/29
Signature Algorithm: sha256WithRSAEncryption
8d:52:e7:bc:4f:15:a0:c4:de:48:46:63:b4:36:fe:f6:51:b0:
6c:52:c7:9f:f0:7f:8d:4e:05:0b:d1:74:72:1f:fd:aa:5f:74:
31:7d:58:11:50:18:a1:3b:d9:7c:7c:9f:3b:34:a9:b6:6b:05:
c9:e5:fb:c7:a0:43:03:8d:d8:4f:b9:94:82:3d:6f:2e:c4:51:
55:ba:e5:a6:73:d9:b7:36:35:00:59:cf:ba:da:bf:10:37:72:
92:2e:bb:fe:ac:15:73:c9:7a:6a:e6:d5:a7:9f:3d:74:e9:a0:
52:b5:3d:97:18:bc:32:84:7e:02:2d:49:a8:a4:23:d4:e5:5a:
5a:74:9e:82:2b:02:98:c8:a3:e8:c7:38:e2:ed:10:29:80:7f:
90:09:dc:c8:20:45:87:c8:6c:8d:50:e2:45:b4:00:0d:ea:5d:
18:f9:e8:70:8b:cd:ea:9b:d1:94:4e:be:9c:7c:4c:27:81:35:
e5:42:a4:79:39:50:38:9e:31:7a:8f:71:91:ff:ff:24:ae:12:
14:e4:8a:c3:87:a1:6d:49:d5:5b:c2:b9:c8:4a:ab:18:31:2e:
31:50:de:cf:65:22:f5:5d:9a:c2:8f:6c:d7:ca:c0:a4:b9:9e:
de:90:46:13:ae:e4:9b:55:8d:1f:04:a3:39:0e:d7:de:fd:b1:
da:eb:32:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:45:34 2026 by rpki-client