Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/2g3g_d2cbfXZVdPZvllR7ko9tq4.roa
File: 2g3g_d2cbfXZVdPZvllR7ko9tq4.roa (raw, json)
Hash identifier: qrpCT5b4Pl5PHRJkUsaii3h3DkJ//XJSoI+D6opqI3Y=
Subject key identifier: DA:0D:E0:FD:DD:9C:6D:F5:D9:55:D3:D9:BE:59:51:EE:4A:3D:B6:AE
Certificate issuer: /CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Certificate serial: 019F2368B34BAB42F5E52BD6EF775CAEAE9D
Authority key identifier: 4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/2g3g_d2cbfXZVdPZvllR7ko9tq4.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16044
IP address blocks: 91.226.252.0/22 maxlen: 22
91.226.252.0/24 maxlen: 24
91.226.253.0/24 maxlen: 24
91.226.254.0/24 maxlen: 24
91.226.255.0/24 maxlen: 24
193.34.60.0/23 maxlen: 23
193.34.60.0/24 maxlen: 24
193.34.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b3:4b:ab:42:f5:e5:2b:d6:ef:77:5c:ae:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da0de0fddd9c6df5d955d3d9be5951ee4a3db6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:14:83:c2:ce:ec:1a:f0:18:cc:21:e1:b2:
d0:77:e2:da:8f:8e:db:c2:5a:58:d7:d5:32:29:36:
9e:de:f0:14:b9:1f:9c:cd:86:07:cf:eb:02:aa:85:
3f:e8:4f:ec:ca:93:73:50:ef:57:25:4f:1e:ec:9c:
cd:d2:35:74:e3:e1:5b:00:b2:0b:5d:2d:15:ff:10:
af:b4:47:d3:2f:ef:6e:11:98:66:0a:bc:82:06:0b:
37:68:04:0b:d3:1d:34:d3:87:6a:ed:58:56:76:9d:
10:1e:7d:e0:ce:41:76:72:da:3d:d8:3d:c5:e8:23:
bf:5c:3c:51:a0:11:fe:b2:6f:cc:84:34:7d:19:fc:
b6:0f:a0:a5:3b:d2:35:61:50:ac:9b:b5:4e:2a:e4:
ea:be:77:11:0a:6c:2f:2e:41:0b:21:d2:ca:b8:ad:
0b:81:2d:c9:9a:2f:45:33:e9:cc:7b:c6:61:64:a8:
b4:e8:b2:70:da:4c:75:19:ff:a3:bc:a4:18:41:5a:
ea:87:80:b2:83:cf:b7:d5:29:11:26:d6:45:4e:76:
fd:ea:87:0b:d8:39:42:11:b5:f5:66:f9:75:2f:02:
0e:15:e2:72:fe:b0:72:3d:92:c3:f4:e0:b9:41:43:
c5:ce:eb:40:4b:e4:48:d7:d1:ff:91:29:4c:b3:79:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0D:E0:FD:DD:9C:6D:F5:D9:55:D3:D9:BE:59:51:EE:4A:3D:B6:AE
X509v3 Authority Key Identifier:
keyid:4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/2g3g_d2cbfXZVdPZvllR7ko9tq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.252.0/22
193.34.60.0/23
Signature Algorithm: sha256WithRSAEncryption
82:0b:87:57:e3:7f:c8:5b:14:f7:ad:5c:db:10:8d:9f:82:35:
e1:da:23:0a:45:f1:4c:d3:29:6b:76:43:d0:77:40:cd:73:0c:
93:8f:91:c0:7e:11:44:3a:de:86:e6:11:60:47:c4:c6:82:24:
16:ad:25:ff:a7:d4:40:08:1b:c6:5a:4a:81:7b:f6:8a:7a:30:
f8:0b:1e:5a:33:be:4f:65:e7:5c:f5:5f:b7:d4:13:e9:4e:59:
53:eb:e3:82:57:8d:a0:cf:fa:06:82:99:8b:bd:a8:9c:92:d8:
e4:7e:e3:32:f4:eb:9c:66:1a:58:16:33:31:e8:6d:a4:9e:70:
73:65:ee:4a:a2:fc:8a:32:11:36:ec:81:e4:2c:2b:56:f2:b4:
91:e5:5b:cf:66:98:bd:2d:db:7a:72:cb:56:34:57:51:df:e2:
4a:09:54:de:1e:90:c7:a0:a3:0b:eb:32:98:f1:0c:6a:78:80:
1f:f0:c8:bc:8e:4f:a1:75:4e:c0:f9:a9:79:84:2c:65:67:e2:
ed:0d:47:76:b2:25:81:26:b0:c4:97:6c:6c:6a:98:bf:45:14:
89:8f:f2:ed:71:51:7a:e6:31:06:7a:ce:0d:1c:98:9e:b6:ab:
08:06:4e:ef:36:e3:1d:87:c7:07:d3:96:c5:40:8e:98:35:24:
27:09:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:43:43 2026 by rpki-client