Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/2wwJSN-aUvUu9Rxb4n6669OEQt8.roa
File: 2wwJSN-aUvUu9Rxb4n6669OEQt8.roa (raw, json)
Hash identifier: w+2Vw7XNkk5azSPXvwkjHp7ZpTzcCE9fRC6rKTH/wjI=
Subject key identifier: DB:0C:09:48:DF:9A:52:F5:2E:F5:1C:5B:E2:7E:BA:EB:D3:84:42:DF
Certificate issuer: /CN=63d87ebc77db75024336fee91aba63d897fc7452
Certificate serial: 019F23686B0898AF395AF453AC8D1A7CEBB6
Authority key identifier: 63:D8:7E:BC:77:DB:75:02:43:36:FE:E9:1A:BA:63:D8:97:FC:74:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/2wwJSN-aUvUu9Rxb4n6669OEQt8.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41589
IP address blocks: 81.25.128.0/20 maxlen: 20
91.142.48.0/20 maxlen: 24
195.34.86.0/23 maxlen: 23
217.171.176.0/20 maxlen: 20
2a02:4d8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6b:08:98:af:39:5a:f4:53:ac:8d:1a:7c:eb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d87ebc77db75024336fee91aba63d897fc7452
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db0c0948df9a52f52ef51c5be27ebaebd38442df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:1c:69:a0:ad:be:ab:14:f5:20:91:4e:03:
f5:33:de:37:19:13:1c:2e:b6:d6:a0:e1:ec:c1:3b:
d9:f4:6b:44:eb:98:65:81:9b:df:bd:86:ae:d8:1c:
60:e8:02:77:0a:ba:04:ef:bd:fe:f8:5a:c6:0a:50:
b0:86:e1:54:c8:62:f2:89:2c:d3:64:80:fc:b7:78:
2e:19:cb:fe:49:39:5f:26:8f:51:cc:5b:36:25:42:
bb:5c:2f:ee:29:56:ce:32:f3:0f:eb:aa:8e:7b:f6:
c0:ec:54:36:37:82:74:f9:fb:81:4f:8c:7e:91:b1:
6d:60:8f:ff:79:29:f5:68:8a:f4:f5:ef:35:f9:d6:
63:9b:55:94:a3:c8:af:34:38:0f:5c:75:39:8f:98:
0e:f1:0e:ce:20:3c:76:71:7c:8d:46:38:e6:83:2f:
92:36:ca:7c:ce:b6:e4:6a:94:73:39:d0:76:cf:16:
44:d1:20:68:b1:99:1b:a2:7f:38:2b:14:04:f7:e7:
9b:9f:16:dc:36:12:5e:fe:eb:18:66:35:ef:82:6e:
52:49:03:d2:47:d1:4a:12:b5:19:1e:1f:6f:92:0c:
7a:59:36:16:3d:e9:92:5d:63:8f:83:93:0f:99:d2:
b2:7f:4f:29:bd:41:f2:4b:4f:35:bb:b2:14:71:3f:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0C:09:48:DF:9A:52:F5:2E:F5:1C:5B:E2:7E:BA:EB:D3:84:42:DF
X509v3 Authority Key Identifier:
keyid:63:D8:7E:BC:77:DB:75:02:43:36:FE:E9:1A:BA:63:D8:97:FC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/2wwJSN-aUvUu9Rxb4n6669OEQt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.128.0/20
91.142.48.0/20
195.34.86.0/23
217.171.176.0/20
IPv6:
2a02:4d8::/32
Signature Algorithm: sha256WithRSAEncryption
38:62:78:74:9a:fa:15:35:ad:03:77:88:08:ad:2f:fb:a3:52:
2d:0f:d7:f4:b6:ad:54:ad:55:29:89:5b:27:3d:27:b0:bc:0a:
2c:96:4c:3d:0e:02:22:23:5b:46:67:c0:06:fe:cc:84:da:ee:
b7:b2:62:98:c0:e0:62:f9:b9:d5:fd:4e:54:35:e5:48:b6:56:
9e:9d:4c:14:77:31:c7:8c:85:ad:02:9f:c2:b1:e0:67:1a:42:
3f:73:ef:ad:f7:89:3e:22:b5:a1:1b:73:df:d2:11:ea:b5:51:
58:08:b2:77:f6:81:1a:67:2f:8c:26:f7:6a:1f:97:28:00:31:
26:07:65:53:6d:e9:04:91:24:45:f0:c1:54:2c:88:f5:18:a4:
70:fc:89:d6:ed:06:e2:5d:d5:5f:0e:f4:29:4a:5a:70:9a:f6:
5e:d9:33:19:40:3a:6b:6f:90:97:f0:e6:1f:15:5e:ba:b3:b9:
a8:aa:7f:4c:72:8e:bf:56:78:78:e8:71:2a:3d:ca:fe:91:9d:
61:c0:ff:c4:55:e6:9e:8f:89:7d:f2:32:1a:a6:3a:cf:93:ce:
3c:4e:63:76:6b:ed:aa:de:86:ca:99:34:a6:00:66:30:63:78:
dc:20:11:af:13:0c:02:26:77:9e:f5:80:f4:b4:e1:9f:1c:9d:
5b:54:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:43 2026 by rpki-client