Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2naRCXtm4c8QGK9fzUN6omwb2OE.roa
File: 2naRCXtm4c8QGK9fzUN6omwb2OE.roa (raw, json)
Hash identifier: LZlEgbeiDa5co70KmVv/qHnC9NAMuF7oiCcCZqH+vuw=
Subject key identifier: DA:76:91:09:7B:66:E1:CF:10:18:AF:5F:CD:43:7A:A2:6C:1B:D8:E1
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 01A154118DCE28D51626FFF89E764D042769
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2naRCXtm4c8QGK9fzUN6omwb2OE.roa
Signing time: Mon 19 Oct 2026 12:09:58 +0000
ROA not before: Mon 19 Oct 2026 12:09:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 31.98.140.0/22 maxlen: 22
31.98.144.0/20 maxlen: 20
31.98.160.0/19 maxlen: 19
31.98.192.0/19 maxlen: 19
31.98.224.0/19 maxlen: 19
31.105.0.0/18 maxlen: 18
31.105.64.0/19 maxlen: 19
31.105.128.0/17 maxlen: 17
164.37.128.0/19 maxlen: 19
165.65.128.0/19 maxlen: 19
165.65.160.0/21 maxlen: 21
165.65.168.0/21 maxlen: 21
165.65.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:11:8d:ce:28:d5:16:26:ff:f8:9e:76:4d:04:27:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Oct 19 12:09:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da7691097b66e1cf1018af5fcd437aa26c1bd8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:ae:87:d9:98:f6:f5:36:27:f2:c1:e6:9e:
30:9a:18:46:77:e7:dd:46:f0:59:ed:51:b8:02:94:
1d:12:a6:50:b0:5c:d3:90:e6:a7:2b:6a:fc:f9:3a:
f8:ce:f3:51:1d:c8:e5:05:7c:a0:8c:26:a3:67:58:
73:b6:88:5b:53:28:e3:b9:78:48:4d:1e:a3:74:78:
16:89:b3:2d:31:14:dc:81:e4:46:49:37:f2:3d:40:
67:23:e9:c6:04:1e:a8:ab:82:b5:ba:61:73:eb:5c:
fa:5b:6e:53:07:94:e6:62:6f:d4:7a:1f:52:9c:fe:
e6:5c:d2:d3:bb:fc:67:ce:5e:73:1d:65:0b:67:98:
fb:7f:89:1e:0b:81:24:c7:5f:ec:5e:cf:6d:9b:ca:
11:06:8b:86:d8:61:8b:9f:18:14:42:31:2b:86:18:
47:ca:fc:14:78:ab:17:60:41:f8:16:1d:e1:b6:59:
fb:2a:da:f7:bd:a4:94:c5:f9:be:9f:bf:b9:b6:f3:
cb:b3:f9:d7:87:0f:f4:4f:11:59:47:24:ef:5e:e1:
6a:0f:09:bb:fb:ce:12:cc:63:cc:9c:f9:85:2b:2f:
ae:22:22:3d:4d:62:68:46:b9:de:ca:96:fa:1d:7d:
82:79:8c:08:eb:f1:de:72:ae:5b:d7:4f:b8:4c:83:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:76:91:09:7B:66:E1:CF:10:18:AF:5F:CD:43:7A:A2:6C:1B:D8:E1
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2naRCXtm4c8QGK9fzUN6omwb2OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.98.140.0-31.98.255.255
31.105.0.0-31.105.95.255
31.105.128.0/17
164.37.128.0/19
165.65.128.0/18
Signature Algorithm: sha256WithRSAEncryption
03:b6:86:7b:a9:d3:ea:6b:4a:e1:73:fb:8d:8d:95:72:75:12:
cb:f9:86:ea:60:39:c7:d4:6a:46:1a:16:fb:37:8a:52:6a:9b:
f7:fb:cb:5d:ad:d2:17:ed:36:10:1f:98:0c:62:2c:29:e8:11:
f7:f6:17:7a:e1:be:99:53:fe:c3:2e:3c:d7:ab:b4:59:58:fa:
4d:26:d5:89:e4:d4:b2:4b:ca:73:4a:71:5b:03:bd:22:40:9d:
ae:ae:84:40:ef:57:c5:c5:b8:57:1d:c8:5f:a4:5f:3b:16:96:
3c:8a:30:f8:97:2c:f8:51:57:95:19:91:7a:e3:14:76:fd:f5:
51:f6:17:af:71:a8:d0:d2:ae:16:72:66:9e:53:b8:c3:19:b3:
dc:60:22:e3:7f:f9:e7:5b:a5:4e:6d:28:65:76:9b:2c:6a:c6:
56:1e:40:0a:3c:ea:49:51:99:e2:fe:8a:1c:99:db:61:4b:55:
63:48:58:f9:45:4c:e1:3f:a1:4d:38:51:26:a5:e5:0f:6b:5e:
6c:a1:90:9a:db:a5:3c:e8:0e:52:b5:10:18:59:f2:02:cb:97:
f7:00:bc:d9:3b:84:5d:9f:73:53:bf:f5:65:c2:47:c3:fa:c3:
2e:c4:df:6e:d9:62:e6:89:40:99:d8:cd:6e:c5:1d:c8:f8:4a:
e0:fe:81:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:29:15 2026 by rpki-client