Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/2R9OsaPIQ9ouhEROqQfQjLAI808.roa
File: 2R9OsaPIQ9ouhEROqQfQjLAI808.roa (raw, json)
Hash identifier: K9HGA6TBeiJgVTYH+w4hxrgezLcofg8a/HW8iR5Tr/M=
Subject key identifier: D9:1F:4E:B1:A3:C8:43:DA:2E:84:44:4E:A9:07:D0:8C:B0:08:F3:4F
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01A0D9B861167B6AD0115B589BA38BA7C207
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/2R9OsaPIQ9ouhEROqQfQjLAI808.roa
Signing time: Fri 25 Sep 2026 17:58:54 +0000
ROA not before: Fri 25 Sep 2026 17:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 146.247.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:b8:61:16:7b:6a:d0:11:5b:58:9b:a3:8b:a7:c2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 25 17:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d91f4eb1a3c843da2e84444ea907d08cb008f34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:95:55:e0:95:df:e4:b0:b1:33:80:c3:b4:
14:c0:72:ba:2d:87:1e:bf:01:f5:4a:5e:07:f5:b0:
33:b4:50:fa:dc:56:57:62:7c:d4:bd:e7:79:18:59:
58:88:bc:b4:ce:1d:2a:2a:9e:5c:df:50:a9:10:d5:
2f:2e:47:5b:ea:c7:e3:93:73:1a:0b:58:d1:bc:99:
fc:dd:ad:bb:2e:9b:29:6f:27:86:07:f1:6d:62:90:
48:12:4c:e9:9a:68:4a:97:04:c7:1e:63:1e:89:ff:
40:a8:0b:95:28:5d:9f:7d:ac:32:20:13:2e:3e:9c:
ad:80:b7:48:58:ce:ef:f3:be:63:99:ac:a9:75:7f:
11:a3:d4:75:d2:f5:51:ce:1c:59:b4:4a:f9:73:04:
b7:e6:d3:09:0a:b7:5e:8b:ff:d3:fb:5d:45:28:71:
ca:7d:a3:30:69:dc:a0:cc:c6:94:f6:95:d1:c5:13:
77:bf:3d:f4:99:64:95:a5:ba:c5:b7:4f:67:1e:36:
23:6e:8f:a1:b6:92:b4:1e:42:b5:c0:2b:d6:cf:ea:
fd:23:6a:fc:f2:0a:06:76:04:36:37:2f:bb:ac:33:
2a:1a:52:8f:14:f5:80:f3:d8:62:10:0c:24:5e:6b:
40:bb:2d:d0:30:d2:2b:02:90:af:f9:06:14:97:55:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:4E:B1:A3:C8:43:DA:2E:84:44:4E:A9:07:D0:8C:B0:08:F3:4F
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/2R9OsaPIQ9ouhEROqQfQjLAI808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.112.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:9e:67:7f:87:ec:f1:28:79:9f:84:bd:46:62:71:ec:c8:dd:
30:d8:0c:c7:f1:f6:70:c4:6f:9c:60:38:66:80:47:55:f2:d3:
c9:91:94:2f:f2:bf:c8:de:4a:21:c1:6f:ed:bb:3f:65:7f:72:
a4:3d:67:ee:2b:81:83:b0:8c:90:c4:ed:be:da:19:7e:55:63:
1a:be:36:59:91:83:cb:80:62:66:ed:8c:d6:3c:b8:8f:bf:4c:
8e:7f:0b:3e:c3:f9:bd:a0:fb:b3:6b:ec:9d:64:7a:a3:03:c9:
eb:c5:3a:4d:cc:cb:a8:5f:32:b9:34:71:a0:2c:33:90:c0:39:
06:fc:93:36:10:11:c7:5d:fc:47:42:c4:42:27:d6:0a:db:97:
0e:ea:22:5f:39:10:04:28:84:7d:bf:d7:d3:39:fd:e9:1b:1e:
1d:f7:1f:1e:14:2e:87:6a:76:d4:3c:77:8f:6d:5e:51:18:4d:
e1:92:1f:2a:df:cd:db:59:a8:4f:15:f2:38:87:60:74:9a:1a:
d3:0f:b9:3d:3b:57:2e:50:41:14:6b:72:2b:3c:f7:84:6c:08:
c4:b1:5d:07:9c:83:39:45:54:de:3f:48:06:62:0c:0c:47:57:
1d:5b:e7:43:b1:98:c2:97:da:33:08:6c:59:9e:43:5a:fa:07:
18:5c:19:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:11 2026 by rpki-client