Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/2zJJEln3aMuBWTTX2Wghm64WL1c.roa
File: 2zJJEln3aMuBWTTX2Wghm64WL1c.roa (raw, json)
Hash identifier: 5hVuyCxLA7+9VBEWVzzqiucZv/QNutyUowFs04GW0IQ=
Subject key identifier: DB:32:49:12:59:F7:68:CB:81:59:34:D7:D9:68:21:9B:AE:16:2F:57
Certificate issuer: /CN=0c56234bc73d0cac819611cade29874822ff5d54
Certificate serial: 019F2368729B50CB59A1BFEAEA63990048AB
Authority key identifier: 0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/2zJJEln3aMuBWTTX2Wghm64WL1c.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47204
IP address blocks: 194.88.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:72:9b:50:cb:59:a1:bf:ea:ea:63:99:00:48:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c56234bc73d0cac819611cade29874822ff5d54
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db32491259f768cb815934d7d968219bae162f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:8e:3b:f6:b2:f3:df:50:88:93:b2:d9:b7:
e2:6d:d5:24:ff:31:d0:9d:f6:70:f8:4a:48:30:21:
c0:f0:02:f5:f1:26:c0:1e:ac:ff:17:cf:76:ab:b5:
94:24:63:97:c1:86:fc:da:59:80:af:5d:6a:f4:16:
10:9c:c4:e4:d4:5f:a6:82:f4:c0:03:65:ac:13:fd:
4d:0b:c1:f1:54:be:f9:83:5c:09:85:8d:36:53:41:
93:aa:6f:8a:6c:74:cf:f6:21:d3:fc:78:ce:e1:d0:
9b:ea:0a:cd:3e:1f:23:eb:e6:26:a2:33:47:ae:f8:
55:5b:37:ae:12:ae:c5:68:ee:fe:4a:92:c3:1d:39:
78:85:1d:50:75:5c:93:d3:cd:af:75:64:b4:6c:53:
5a:fa:15:97:c3:51:e2:96:6b:7a:69:3a:4d:d8:45:
0d:ae:b5:3b:93:f9:af:83:08:db:7b:76:da:3b:f4:
6c:31:9f:f3:44:b0:43:e2:9a:a7:78:7b:54:e6:ea:
82:ce:05:b2:7f:79:1e:37:28:43:99:33:16:e0:bf:
c4:21:11:7d:8d:dd:fe:96:36:8d:57:4a:ba:de:07:
1f:4f:8c:67:30:e0:17:f7:c1:39:02:6c:fd:e6:c1:
ad:4f:c3:29:56:dc:86:38:5a:f1:2e:78:aa:87:01:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:32:49:12:59:F7:68:CB:81:59:34:D7:D9:68:21:9B:AE:16:2F:57
X509v3 Authority Key Identifier:
keyid:0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/2zJJEln3aMuBWTTX2Wghm64WL1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.199.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2b:a3:1f:b7:29:cc:22:67:30:bc:40:71:9c:6d:6f:48:6d:
37:bd:7b:76:6f:5e:56:c7:c2:11:7a:bf:2c:bc:6e:3d:a9:d8:
94:6c:ff:74:df:fb:94:97:d4:1a:4c:57:72:08:6e:b9:cd:9e:
bf:ce:88:d0:b4:31:f2:d2:c2:5c:a9:a7:2d:2c:7d:35:73:be:
ee:5a:55:d3:09:cf:50:c8:ce:43:ce:d9:92:b0:18:5a:7f:16:
6f:d6:bf:0d:80:71:8a:c0:a2:7d:55:b2:e6:8f:5b:c3:68:1f:
a0:37:63:8a:bb:7a:81:08:6e:55:45:54:7e:22:7e:ae:05:b7:
92:f9:75:28:74:be:14:0b:8d:91:ef:9a:65:27:65:4a:fc:77:
7b:d2:b8:14:28:b9:ee:e8:fd:7c:a7:83:f7:ff:ca:cc:a2:de:
cb:57:6d:0c:8c:0d:69:2c:4a:07:3b:67:57:90:39:be:b0:ba:
2f:46:de:82:11:ec:45:61:cd:51:a2:a8:fd:fe:a7:f3:e2:9e:
b2:cc:2b:4e:60:5e:c1:27:3b:4e:11:7f:65:44:d7:ec:e9:b5:
d4:de:bc:64:e4:f8:88:da:ce:73:6d:ee:d5:b8:88:f0:0c:00:
fa:32:6c:5c:2f:93:2e:d1:40:3f:0c:61:35:f2:74:fc:f4:33:
c8:ce:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:04 2026 by rpki-client