Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2xEfDcGknjx0mgp1P_7qi4TOFfA.roa
File: 2xEfDcGknjx0mgp1P_7qi4TOFfA.roa (raw, json)
Hash identifier: aGXdN08I+4MOKoeQ+0EmcVQTpZOUghSk7qbg9Yr66LM=
Subject key identifier: DB:11:1F:0D:C1:A4:9E:3C:74:9A:0A:75:3F:FE:EA:8B:84:CE:15:F0
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019F8DCCC2A3F7F882387B12CCEDF1A3B078
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2xEfDcGknjx0mgp1P_7qi4TOFfA.roa
Signing time: Thu 23 Jul 2026 07:07:14 +0000
ROA not before: Thu 23 Jul 2026 07:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209275
IP address blocks: 213.238.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:cc:c2:a3:f7:f8:82:38:7b:12:cc:ed:f1:a3:b0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jul 23 07:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db111f0dc1a49e3c749a0a753ffeea8b84ce15f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:5e:00:1e:ac:a1:36:0c:14:f0:d3:dc:10:5c:
a6:46:57:0c:e2:71:c0:e9:ae:03:8a:91:e9:6b:bc:
03:bc:c3:4c:2b:a9:27:1c:e4:b6:32:7b:b4:86:89:
4a:3e:02:7c:5a:87:8e:3e:10:e5:62:44:a6:33:49:
ee:4b:4c:b4:28:57:d4:31:1c:fd:ae:f5:0e:ef:cf:
ba:ed:66:67:a9:26:66:b4:62:b7:11:70:b8:d3:02:
a1:90:da:7c:27:91:06:9e:4f:2d:3e:7f:62:03:81:
c7:4a:98:3c:4e:a9:cb:25:01:72:fd:83:ed:69:ef:
c2:d8:99:6e:06:7f:62:6a:7d:de:6c:83:8a:a5:a5:
56:ed:59:a4:39:77:a2:09:14:c2:fe:d3:81:e1:36:
7a:00:13:5a:51:4d:d6:47:93:f8:7f:09:b0:43:d5:
0e:24:fb:1d:c0:5d:d3:af:e7:a8:1b:8f:39:b6:36:
03:e3:96:53:8e:b7:7d:2a:d5:4b:fa:d6:cb:af:6d:
f9:16:ee:88:cd:19:91:ce:44:14:5c:91:1f:2f:33:
28:06:df:b8:db:f3:64:0f:e3:46:4e:a0:21:3b:ff:
2f:f7:f8:71:3e:de:28:33:d5:5c:50:0a:01:69:46:
69:0b:a8:de:1a:e6:26:67:84:ea:c7:d8:83:46:66:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:11:1F:0D:C1:A4:9E:3C:74:9A:0A:75:3F:FE:EA:8B:84:CE:15:F0
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/2xEfDcGknjx0mgp1P_7qi4TOFfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e3:44:dc:64:ae:ac:30:a5:e1:4a:10:3f:f1:1c:97:00:0d:
25:68:2e:88:07:f0:d2:f5:cc:8b:c5:7c:7e:f1:7e:38:3b:ee:
54:50:64:08:89:e2:81:4e:28:83:b3:fa:c0:b3:72:ee:99:fa:
b5:9a:4b:0d:30:27:03:e2:86:45:cd:de:8d:0a:60:5f:c3:06:
38:ed:90:12:0f:dd:07:56:1e:94:ba:7b:37:8c:38:5e:7c:92:
ea:bd:f6:b4:e7:5c:ad:09:5f:20:39:9d:bb:0b:d9:52:79:d4:
08:1a:d8:ff:83:fe:7c:43:ff:dc:a9:49:c8:8c:53:35:34:21:
74:99:02:93:d9:a8:9a:de:c4:bb:cf:b5:13:71:27:1f:dc:54:
4d:35:53:49:93:fb:43:13:b2:15:49:59:32:d9:88:6c:4e:51:
b3:20:44:1d:35:1c:99:e8:3a:d9:e8:8d:aa:c8:5f:6b:08:e8:
65:19:69:da:fa:71:75:a5:5c:ed:af:7f:9e:e5:ce:23:07:10:
a3:b7:e7:f1:33:06:ea:63:e2:42:d1:0c:3f:aa:bd:e3:f5:e0:
5b:38:44:55:61:2b:2e:dd:a7:09:0b:4c:64:7d:85:f1:93:8e:
d4:06:a5:f0:f8:42:17:d5:e9:50:c5:dd:a8:21:9a:d1:81:44:
e2:55:f8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:48 2026 by rpki-client