Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/h2MUZzK6jX-iU91egrEXxJwrlhU.roa
File: h2MUZzK6jX-iU91egrEXxJwrlhU.roa (raw, json)
Hash identifier: AQQQoSdiJ+jplNp9p3VB8GeXhyTD6RNK0y5PzB9A1Pk=
Subject key identifier: 87:63:14:67:32:BA:8D:7F:A2:53:DD:5E:82:B1:17:C4:9C:2B:96:15
Certificate issuer: /CN=2222a48a48ae45f20d7b83a4e9f3f43fdb03a90e
Certificate serial: 019F2368CC544DFD19DE43F55AF62630AE33
Authority key identifier: 22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/h2MUZzK6jX-iU91egrEXxJwrlhU.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213069
IP address blocks: 193.105.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cc:54:4d:fd:19:de:43:f5:5a:f6:26:30:ae:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222a48a48ae45f20d7b83a4e9f3f43fdb03a90e
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8763146732ba8d7fa253dd5e82b117c49c2b9615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:a0:85:37:e7:3e:6c:5f:2a:07:0e:62:80:
d6:86:a6:55:8f:7b:e4:87:b8:bf:70:12:45:9c:82:
aa:e2:61:2d:b2:5e:de:84:39:30:82:89:1f:b6:c8:
b4:e4:0f:97:c2:fc:c2:51:6f:a8:2e:7b:97:b3:f0:
d2:51:ee:0a:2d:a5:3f:65:53:78:a7:75:9a:70:c2:
5e:d8:36:07:c6:80:8b:bd:71:2f:8a:75:fe:8a:70:
58:cd:c9:be:5f:b9:ed:c1:4d:23:43:38:1a:8b:7d:
13:a3:35:c6:5f:3d:30:e4:71:0e:a1:36:b2:af:54:
80:e2:28:5a:f3:a3:3e:f4:1f:f0:79:15:89:df:55:
bc:05:2b:de:d0:28:cc:a5:ad:99:2a:bb:87:6e:a0:
85:4f:c9:ee:82:82:90:41:08:ad:3e:96:85:79:23:
3e:17:c5:ae:16:02:d4:84:fd:92:d6:ae:b6:9e:76:
e0:ed:e5:79:fa:4a:98:81:69:91:a1:17:98:9d:6b:
e4:b6:4c:af:63:e5:85:88:28:04:ad:8b:89:bd:36:
4f:43:54:83:9a:a9:62:b7:ef:45:c3:21:7c:d6:1e:
10:10:ce:d1:02:f0:33:af:43:31:5a:46:1f:d0:68:
90:53:80:04:54:08:52:5c:d8:92:64:6f:3d:1f:fe:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:63:14:67:32:BA:8D:7F:A2:53:DD:5E:82:B1:17:C4:9C:2B:96:15
X509v3 Authority Key Identifier:
keyid:22:22:A4:8A:48:AE:45:F2:0D:7B:83:A4:E9:F3:F4:3F:DB:03:A9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiKkikiuRfINe4Ok6fP0P9sDqQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/h2MUZzK6jX-iU91egrEXxJwrlhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/IiKkikiuRfINe4Ok6fP0P9sDqQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.153.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a8:0f:67:56:44:b8:bd:f3:dd:7c:37:96:3b:75:33:1e:8d:
51:a6:a2:e0:7b:b2:67:bb:57:2f:75:6b:9a:2b:55:46:a0:aa:
e8:41:39:2c:96:24:2e:f6:ec:ef:89:f3:b0:ab:b5:81:e3:5d:
08:39:6e:db:68:df:43:44:8d:13:b6:6d:42:c1:f9:da:dc:c3:
60:9e:41:21:da:50:b6:29:13:2c:99:e2:7b:10:04:0e:bb:7f:
9d:84:5d:42:b0:c8:b0:fe:f2:07:10:10:94:0f:e2:da:a7:f1:
38:c0:26:49:7b:99:f3:1f:a9:66:a4:fd:e1:28:81:70:4e:2d:
42:ca:ef:fc:70:3e:ce:6d:b1:3d:b1:83:e7:47:bc:c3:a0:fa:
ba:15:f1:7e:d8:b1:d1:2c:f8:cc:3a:73:6f:01:d5:61:b8:c1:
0c:91:94:ec:2c:62:5d:45:a3:ed:59:ce:17:31:0e:8d:13:64:
c7:66:0e:af:c7:e2:b1:46:6f:c0:3e:a0:c4:cc:c4:b4:3a:80:
b5:b4:ac:13:41:34:e2:ba:d3:04:89:2a:65:33:6d:f9:d4:6f:
05:51:21:c5:ec:ea:e9:21:e9:73:d7:09:6d:26:c6:2f:6d:e5:
58:d0:f8:64:b1:81:b5:19:83:e0:ab:08:9f:eb:4a:6a:08:4a:
9a:25:dd:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMxUTf0Z3kP1WvYmMK4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMjJhNDhhNDhhZTQ1ZjIwZDdiODNhNGU5ZjNmNDNmZGIw
M2E5MGUwHhcNMjYwNzAyMTUxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzYzMTQ2NzMyYmE4ZDdmYTI1M2RkNWU4MmIxMTdjNDljMmI5NjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc2ghTfnPmxfKgcOYoDWhqZVj3vk
h7i/cBJFnIKq4mEtsl7ehDkwgokftsi05A+XwvzCUW+oLnuXs/DSUe4KLaU/ZVN4
p3WacMJe2DYHxoCLvXEvinX+inBYzcm+X7ntwU0jQzgai30TozXGXz0w5HEOoTay
r1SA4iha86M+9B/weRWJ31W8BSve0CjMpa2ZKruHbqCFT8nugoKQQQitPpaFeSM+
F8WuFgLUhP2S1q62nnbg7eV5+kqYgWmRoReYnWvktkyvY+WFiCgErYuJvTZPQ1SD
mqlit+9FwyF81h4QEM7RAvAzr0MxWkYf0GiQU4AEVAhSXNiSZG89H/4npwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIdjFGcyuo1/olPdXoKxF8ScK5YVMB8GA1UdIwQY
MBaAFCIipIpIrkXyDXuDpOnz9D/bA6kOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWlLa2lraXVSZklOZTRPazZmUDBQOXNEcVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NmQwZWEtNDhhZC00YmUxLWE3OTkt
ZGYzNzk2YjM0ODU2LzEvaDJNVVp6SzZqWC1pVTkxZWdyRVh4SndybGhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83NmQwZWEtNDhhZC00YmUxLWE3OTktZGYzNzk2YjM0ODU2
LzEvSWlLa2lraXVSZklOZTRPazZmUDBQOXNEcVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWmZMA0G
CSqGSIb3DQEBCwUAA4IBAQApqA9nVkS4vfPdfDeWO3UzHo1RpqLge7Jnu1cvdWua
K1VGoKroQTksliQu9uzvifOwq7WB410IOW7baN9DRI0Ttm1Cwfna3MNgnkEh2lC2
KRMsmeJ7EAQOu3+dhF1CsMiw/vIHEBCUD+Lap/E4wCZJe5nzH6lmpP3hKIFwTi1C
yu/8cD7ObbE9sYPnR7zDoPq6FfF+2LHRLPjMOnNvAdVhuMEMkZTsLGJdRaPtWc4X
MQ6NE2THZg6vx+KxRm/APqDEzMS0OoC1tKwTQTTiutMEiSplM2351G8FUSHF7Orp
Ielz1wltJsYvbeVY0PhksYG1GYPgqwif60pqCEqaJd0r
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:54 2026 by rpki-client