Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/2JL6QkmCoFqlhxQJNmWn1mF_TU4.roa
File: 2JL6QkmCoFqlhxQJNmWn1mF_TU4.roa (raw, json)
Hash identifier: QqXkH/YgS0MOCatOfHharCIV2omJWZGXYUHGmZTmvS0=
Subject key identifier: D8:92:FA:42:49:82:A0:5A:A5:87:14:09:36:65:A7:D6:61:7F:4D:4E
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 019F5BFFC08DBA9D56BC42C7D13DBD7927A6
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/2JL6QkmCoFqlhxQJNmWn1mF_TU4.roa
Signing time: Mon 13 Jul 2026 15:01:55 +0000
ROA not before: Mon 13 Jul 2026 15:01:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199495
IP address blocks: 91.223.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:ff:c0:8d:ba:9d:56:bc:42:c7:d1:3d:bd:79:27:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Jul 13 15:01:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d892fa424982a05aa58714093665a7d6617f4d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:ab:4b:4c:cf:a6:6e:44:a7:29:21:a4:60:
65:cc:7e:0d:8a:31:08:c5:f3:34:82:bc:6d:40:13:
c9:b8:75:f6:ea:e3:55:a3:3d:e9:70:5d:0e:47:30:
3b:78:c7:5e:6a:12:34:3a:25:72:cc:67:75:12:ed:
0a:f3:11:80:69:7e:11:ae:ef:ac:ee:69:9f:ba:16:
5d:23:1a:02:0c:74:ce:65:21:bb:29:e7:fa:0c:96:
cb:8c:c4:3d:d1:e3:f9:f4:e3:a1:96:da:8f:5e:eb:
8e:59:78:3d:a3:72:39:92:ef:bb:ae:eb:64:43:4d:
df:11:ae:90:38:0e:4d:fd:5f:9d:e9:82:e5:e9:91:
f1:f5:2b:a7:65:4c:ae:fe:f7:86:8c:53:96:1e:72:
b5:45:53:c9:69:f2:0b:d7:a5:e1:ea:bd:e1:ce:81:
bb:1f:4b:13:0f:85:e5:b7:75:16:32:df:07:8a:34:
55:2c:4d:c6:70:e7:7f:ec:2c:2b:2d:64:e3:77:3a:
95:0f:3c:33:ac:69:2c:50:e2:6a:3d:7d:46:77:75:
b2:10:60:9e:db:8d:8b:6a:82:7d:57:30:24:da:bc:
6f:fb:10:22:9d:43:f9:54:f8:13:40:82:c4:6f:42:
8d:10:d8:7c:4b:87:15:3c:ff:0f:2b:ca:28:a7:45:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:92:FA:42:49:82:A0:5A:A5:87:14:09:36:65:A7:D6:61:7F:4D:4E
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/2JL6QkmCoFqlhxQJNmWn1mF_TU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:9d:2c:54:af:9e:33:23:15:0b:e5:d1:d4:2a:24:20:03:13:
ef:3a:de:4f:33:5a:50:9d:f1:3c:0e:ca:80:8b:84:01:b0:48:
41:ef:8d:88:16:86:35:95:3c:ca:92:cf:8f:46:5a:49:36:06:
4c:61:b9:90:b5:44:16:14:11:1d:71:3a:69:16:f6:6f:35:a2:
c7:78:79:d0:cf:8e:38:b4:19:94:21:f9:f1:d3:be:b3:b4:3b:
0f:33:e2:bb:be:43:c1:f3:1b:32:07:2d:45:4a:55:5d:ac:42:
e4:4b:64:ab:12:f7:18:31:eb:5b:2d:87:2f:af:db:53:dc:33:
81:57:06:11:96:33:7a:69:c4:16:a1:bf:57:6f:be:08:4f:e4:
e5:98:8d:a2:45:98:cd:7c:ef:1b:ea:a1:14:39:e9:a7:b7:51:
0b:38:7a:d7:9c:ae:3b:eb:b4:5e:e1:60:ed:9d:c5:51:cc:f7:
06:62:83:9d:f1:13:f0:b2:b0:4f:53:9a:f9:d2:98:80:ad:dc:
88:a7:5a:b4:25:c3:d0:28:e4:40:6e:48:e1:aa:84:38:ec:99:
4d:a7:35:59:95:26:16:39:15:fe:eb:63:26:41:ca:5e:bb:ae:
87:9f:55:f3:7a:c8:f6:4d:6e:1c:69:f3:95:be:2f:c6:04:c3:
ed:a3:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:04 2026 by rpki-client