Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2rkTXFRHSFGQfCLWyt5J5MooBwM.roa
File: 2rkTXFRHSFGQfCLWyt5J5MooBwM.roa (raw, json)
Hash identifier: MoZrQv7vxcHsfqpAiGw2HUOp4DzXB2ue8/9xmZzToDQ=
Subject key identifier: DA:B9:13:5C:54:47:48:51:90:7C:22:D6:CA:DE:49:E4:CA:28:07:03
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0CC8ADBED6941516BC93BB7E6BF9E48F6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2rkTXFRHSFGQfCLWyt5J5MooBwM.roa
Signing time: Wed 23 Sep 2026 04:34:07 +0000
ROA not before: Wed 23 Sep 2026 04:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.230.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.42.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.58.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:8a:db:ed:69:41:51:6b:c9:3b:b7:e6:bf:9e:48:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 23 04:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dab9135c54474851907c22d6cade49e4ca280703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:92:8b:35:de:60:76:63:07:af:3b:eb:06:
ba:a1:53:b7:d7:d1:37:9b:99:6d:62:d6:29:f5:f7:
cd:4f:14:52:62:eb:53:e3:90:6c:bd:86:37:b3:40:
c2:44:ff:9e:87:5e:da:7e:7a:cc:1a:3b:70:96:60:
62:a6:0e:94:04:7b:18:d2:d2:fe:23:97:38:92:14:
e0:bd:fa:45:98:43:5e:0b:62:76:1d:dc:49:89:41:
4e:f4:9b:bd:95:a6:d3:27:69:ba:cb:64:7a:80:ac:
77:79:85:bb:eb:19:d5:a2:e4:23:19:df:d1:8f:f7:
f9:26:b7:f7:f6:52:7d:7e:a7:49:a1:71:73:31:fd:
25:e7:dc:bf:48:24:e6:53:9c:0c:bd:64:96:3f:a9:
38:55:5d:b2:76:94:01:82:d3:a9:ec:13:a7:65:ad:
ff:49:92:aa:ae:0f:9e:2a:66:49:f5:d2:cf:ee:0e:
21:e7:57:5a:7b:ef:b7:5f:53:e0:48:36:49:9e:dd:
2e:78:17:38:49:a4:7b:9a:4d:77:04:eb:5e:42:d7:
79:37:52:86:ca:26:5d:11:74:6f:8e:8a:49:e3:6a:
d1:60:f3:7b:ad:f2:ab:1e:49:5e:45:10:fe:06:71:
3f:53:7e:b7:ff:ae:e8:3f:8d:04:54:ac:0b:28:dd:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B9:13:5C:54:47:48:51:90:7C:22:D6:CA:DE:49:E4:CA:28:07:03
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2rkTXFRHSFGQfCLWyt5J5MooBwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
185.72.10.0/24
192.124.190.0/24
193.124.5.0/24
193.124.7.0/24
193.124.200.0/24
193.124.202.0/24
193.124.206.0/24
194.58.67.0/24
194.58.155.0/24
194.87.1.0/24
194.87.3.0/24
194.87.6.0/23
194.87.53.0/24
194.87.59.0/24
194.87.67.0/24
194.87.81.0/24
194.87.119.0-194.87.120.255
194.87.122.0/24
194.87.136.0/24
194.87.160.0/24
194.87.163.0/24
194.87.172.0/24
194.87.179.0/24
194.87.182.0/23
194.87.185.0/24
194.87.211.0-194.87.212.255
194.87.231.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.133.24.0/23
195.133.29.0/24
195.133.40.0-195.133.42.255
195.133.50.0/23
195.133.58.0/24
195.133.72.0/24
195.133.92.0/23
212.192.241.0-212.192.242.255
212.192.251.0/24
212.193.0.0/24
212.193.10.0/23
212.193.15.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
8a:4f:f4:68:78:26:f5:46:7f:12:dc:a3:88:9a:c6:92:a8:fc:
b5:dd:e9:f6:0a:56:05:1b:1f:01:b7:1a:56:64:e9:f6:95:b9:
97:c4:b2:55:f5:2a:41:d3:9a:c9:17:ee:cd:5b:f2:75:86:68:
ca:08:1a:66:bd:fd:6d:ae:32:f7:03:1b:a1:61:ef:75:c2:d2:
3f:81:90:83:d7:4c:ca:15:f5:60:74:c2:f0:dd:22:74:2f:54:
87:37:48:24:30:04:fc:95:ca:1c:bb:27:33:13:d0:41:06:fa:
85:c2:56:3c:43:41:87:18:78:67:69:38:10:65:04:cd:25:d2:
13:6c:fd:9d:d5:60:19:14:6b:47:e7:e9:88:e8:d4:81:6a:68:
b2:00:33:d4:7f:23:19:5e:5c:f3:38:8f:e5:0f:ae:4c:df:74:
17:53:cb:60:57:24:2b:d2:f6:fd:f8:0b:53:a6:38:5c:34:0f:
5c:31:b3:87:bc:d8:5b:37:fd:12:9f:0b:93:ad:ec:8b:1b:b0:
06:a4:c1:87:fe:9d:dd:1c:a6:ed:61:42:56:d6:d1:a2:57:dd:
eb:89:ef:9f:ad:7c:88:a9:cc:d3:1c:c2:3c:b4:24:8b:99:6c:
99:7f:8e:ec:3e:9c:89:48:72:26:64:5d:c5:2a:fc:36:55:09:
0c:7c:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:01 2026 by rpki-client