Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/2LzfdrQXKsE9CcmIV4AKa74BfOs.roa
File: 2LzfdrQXKsE9CcmIV4AKa74BfOs.roa (raw, json)
Hash identifier: WaxJinvThKq6wVf2DyB6X5nU0+uAvcuIT/erGsORvGw=
Subject key identifier: D8:BC:DF:76:B4:17:2A:C1:3D:09:C9:88:57:80:0A:6B:BE:01:7C:EB
Certificate issuer: /CN=47f0b860e1350e087a06793181074f47b7953fa1
Certificate serial: 01A0D003C57C67685A46FF804F25278FA015
Authority key identifier: 47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/2LzfdrQXKsE9CcmIV4AKa74BfOs.roa
Signing time: Wed 23 Sep 2026 20:45:03 +0000
ROA not before: Wed 23 Sep 2026 20:45:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17999
IP address blocks: 153.76.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:03:c5:7c:67:68:5a:46:ff:80:4f:25:27:8f:a0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f0b860e1350e087a06793181074f47b7953fa1
Validity
Not Before: Sep 23 20:45:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8bcdf76b4172ac13d09c98857800a6bbe017ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:38:03:f4:6f:f5:ae:c7:04:69:75:f1:f7:
94:c4:1e:20:97:a5:e6:ea:84:56:e9:65:23:35:ac:
6d:17:8c:d6:84:62:20:b6:07:f7:a1:b8:fd:23:07:
ab:7e:16:33:de:3d:f1:8d:23:a0:53:cb:41:ed:25:
5e:f1:81:45:cc:7d:c6:18:b1:1c:3b:96:2e:04:d5:
a2:eb:82:61:81:37:4a:2a:bb:ea:88:d4:71:7b:53:
be:29:d4:47:3a:8e:c9:6d:00:87:6e:b8:f8:22:7d:
63:c1:47:56:b6:41:b1:0d:ce:6d:30:16:4a:c6:34:
b9:b2:63:72:df:f2:85:65:38:2c:8c:2e:2b:af:78:
cf:eb:c9:f2:f9:a9:24:85:17:83:bc:c2:43:ef:4f:
a4:69:06:e1:d1:e9:b8:bc:77:fc:02:bf:22:62:32:
30:23:22:ff:5e:6a:0e:fb:66:18:3f:e2:eb:37:63:
18:e8:11:ea:5c:54:f6:17:d3:40:28:d3:34:af:06:
24:c8:8e:87:55:a5:2d:3d:82:24:54:87:67:c0:eb:
74:ae:c0:31:5c:c7:88:4e:43:d4:a8:2f:78:8a:14:
52:c3:77:9c:c5:eb:39:3b:72:83:7d:6c:8b:69:67:
6e:1e:49:7f:ec:cc:f1:65:74:7d:17:71:2f:38:94:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BC:DF:76:B4:17:2A:C1:3D:09:C9:88:57:80:0A:6B:BE:01:7C:EB
X509v3 Authority Key Identifier:
keyid:47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/2LzfdrQXKsE9CcmIV4AKa74BfOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.232.0/21
Signature Algorithm: sha256WithRSAEncryption
06:d9:f4:5a:75:38:3b:41:ed:e8:25:da:55:5d:89:21:b0:49:
8b:85:7f:af:0f:52:1c:b5:67:7c:f0:17:cf:a5:2b:a8:be:7f:
91:10:04:cb:35:54:26:55:26:a1:d7:d1:77:49:1b:7f:6c:3a:
63:3a:3d:04:aa:5e:eb:61:d9:8c:46:b6:a5:ff:f0:2b:ba:86:
a9:23:12:e8:6f:48:d9:1a:8d:c3:8f:d0:23:4f:56:4d:2e:a3:
82:f3:4a:e1:37:b0:ec:d6:e9:8e:e9:f6:ee:2a:cc:e4:6e:fa:
3e:90:c5:0f:49:e1:ba:77:5e:55:20:2d:f4:49:f3:1d:aa:90:
8b:4e:9a:10:83:d2:e5:5c:a0:8b:0f:5c:20:f8:b5:b6:21:9e:
bf:64:fd:32:bc:47:16:69:0e:ad:ca:ba:cc:ec:4a:99:1e:b8:
07:fe:9f:fb:e3:0e:27:38:82:0f:e3:ad:ee:da:2e:46:7b:58:
ec:0b:96:37:a7:bb:ef:f8:e4:1a:b1:d1:c9:74:bc:b3:5f:0d:
bb:c3:5f:f6:1e:e4:61:77:df:f9:32:46:be:26:76:3c:a4:0c:
49:e5:9a:a0:ea:34:73:dd:f3:2d:30:74:49:5d:61:b9:0b:a1:
3b:62:0d:1c:35:4d:a1:49:39:6c:81:ff:96:40:b8:25:2f:3f:
95:9f:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:29:33 2026 by rpki-client