Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/ROiLNRCdCfapmISBEXTrcvll9pY.roa
File: ROiLNRCdCfapmISBEXTrcvll9pY.roa (raw, json)
Hash identifier: N5VEUMxgqC79yW3KyixiCLmTn73YopaqScdC2P51yq4=
Subject key identifier: 44:E8:8B:35:10:9D:09:F6:A9:98:84:81:11:74:EB:72:F9:65:F6:96
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 019ECD4B21BF387D3C673094CE85B7B3334D
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/ROiLNRCdCfapmISBEXTrcvll9pY.roa
Signing time: Mon 15 Jun 2026 21:58:33 +0000
ROA not before: Mon 15 Jun 2026 21:58:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202371
IP address blocks: 2.56.131.0/24 maxlen: 24
80.173.140.0/22 maxlen: 24
185.133.127.0/24 maxlen: 24
2a0e:ff00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cd:4b:21:bf:38:7d:3c:67:30:94:ce:85:b7:b3:33:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Jun 15 21:58:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44e88b35109d09f6a99884811174eb72f965f696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:d7:ed:24:9c:4b:e3:c8:56:7f:05:33:5b:
eb:52:ae:f1:b1:16:ba:e0:8f:db:26:e5:3a:e3:f3:
37:e9:fa:cb:23:48:2b:bf:82:47:39:33:21:eb:52:
74:fe:71:bc:29:31:59:64:dd:52:ae:c5:0d:56:32:
c6:9b:0a:6c:ee:d6:ca:34:f4:df:7f:7d:55:1d:01:
b2:ab:ca:6d:c6:2a:88:94:3e:f1:18:a0:3b:56:45:
40:4e:88:fc:85:c7:28:17:65:37:db:20:48:70:d5:
75:f1:07:19:c5:70:d0:87:22:ab:0d:2e:65:bb:ea:
24:bc:c5:69:4c:cd:13:89:8b:97:b0:ed:5d:db:43:
36:dc:e6:05:c4:17:c0:aa:8c:a4:9a:31:cc:b7:a2:
22:0b:dc:e2:45:9c:e0:3f:8b:a4:7b:04:26:c3:ae:
40:6d:f7:3a:d7:23:16:32:95:bd:7a:fa:84:26:d1:
64:6b:5b:44:09:ee:8d:95:13:c7:79:bc:fd:17:9c:
f5:0e:a5:99:e0:97:c6:f9:2d:5b:1c:fe:56:50:b8:
14:f7:3a:32:1f:2a:3a:cf:a0:cf:7b:ae:98:f1:07:
04:af:db:80:6b:a2:e3:45:33:f7:c0:ed:8b:75:15:
23:0e:0b:62:b4:e0:4b:f9:0d:7d:90:9d:88:e9:37:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:8B:35:10:9D:09:F6:A9:98:84:81:11:74:EB:72:F9:65:F6:96
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/ROiLNRCdCfapmISBEXTrcvll9pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.131.0/24
80.173.140.0/22
185.133.127.0/24
IPv6:
2a0e:ff00::/29
Signature Algorithm: sha256WithRSAEncryption
04:f7:0a:ca:3f:29:84:09:b0:3f:73:f7:dc:ab:3e:11:ae:69:
11:0f:fc:e1:2d:92:51:60:b6:95:77:a4:31:7c:88:2a:95:66:
d3:72:d3:36:1f:b0:77:82:89:28:3e:e9:50:7b:c9:e1:07:b6:
3c:df:de:e4:3b:d1:69:1c:4e:69:5f:b6:38:15:e1:0b:8b:d5:
27:83:b0:e4:70:24:95:7d:f9:69:2b:f1:79:28:51:f8:6d:00:
2f:9f:6b:b6:43:d7:f8:21:b3:2e:c6:ac:df:6a:1a:51:b4:d8:
7f:34:30:6a:e0:f6:70:e3:96:fd:4d:68:45:aa:8d:51:60:47:
d6:78:d7:bf:00:cb:e0:98:62:fb:ed:b4:d3:7f:43:61:ee:47:
ee:04:60:e8:e8:0f:32:07:9d:25:57:ec:54:ac:4c:85:d1:93:
50:76:c2:ef:bb:46:85:1c:f7:72:3f:56:6f:30:41:f2:71:aa:
25:be:d9:dc:35:4c:9b:f7:53:5d:80:ea:12:5b:00:49:7d:ea:
3e:98:bc:9f:f1:62:79:01:1d:eb:bd:61:cc:10:a9:2e:a9:8e:
9a:df:d6:23:d1:63:8b:d0:9e:a5:39:34:ea:ef:92:95:75:30:
53:94:4a:d9:f4:1d:93:53:ea:9d:1c:05:da:89:f1:fd:83:91:
df:75:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:38 2026 by rpki-client