Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/2ICA_jT8gH0SqY4DMPAhLBe-a3g.roa
File: 2ICA_jT8gH0SqY4DMPAhLBe-a3g.roa (raw, json)
Hash identifier: bQhPgBki/83xZpaETZB5bitS9JPACummJNBn28qxStg=
Subject key identifier: D8:80:80:FE:34:FC:80:7D:12:A9:8E:03:30:F0:21:2C:17:BE:6B:78
Certificate issuer: /CN=ea4ad934118e6526c894f469f86aa320c13e08f4
Certificate serial: 019F23692A19125F742B37B27C0CAA9A2D62
Authority key identifier: EA:4A:D9:34:11:8E:65:26:C8:94:F4:69:F8:6A:A3:20:C1:3E:08:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/2ICA_jT8gH0SqY4DMPAhLBe-a3g.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204919
IP address blocks: 80.91.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2a:19:12:5f:74:2b:37:b2:7c:0c:aa:9a:2d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea4ad934118e6526c894f469f86aa320c13e08f4
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d88080fe34fc807d12a98e0330f0212c17be6b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:36:56:82:70:c5:b8:e3:31:34:62:8b:29:
14:94:c1:9d:94:12:dc:53:28:ff:62:60:04:1a:6b:
69:dd:b2:83:e3:0c:f5:29:99:8a:99:3a:2c:d1:12:
77:96:95:fa:3c:73:87:47:97:49:7f:d7:ee:c5:5a:
19:ac:cf:9a:e2:35:12:2e:d7:05:67:d5:48:41:ce:
b2:2d:40:db:45:4b:c8:5d:2d:65:80:92:0c:09:9d:
d8:1d:92:b7:66:d2:a5:88:43:5a:66:b3:0c:85:32:
90:f4:4f:e5:0e:5d:b7:45:29:08:7c:d2:9f:fa:f3:
49:23:99:9d:f4:c6:c3:2f:58:77:64:36:94:db:43:
f7:d3:ea:9a:8e:b7:8b:45:aa:4e:ce:25:e5:b8:f0:
5e:2d:52:a1:e0:f9:87:76:37:37:2c:b8:f7:42:30:
35:09:6a:17:a1:15:b0:a1:bd:d1:af:b7:9d:2b:16:
03:b8:4d:f6:96:36:86:3f:af:8c:2e:09:ef:f2:0b:
eb:75:9a:5a:cc:9e:42:a0:3f:26:7e:3a:e8:1d:46:
b1:59:94:b8:eb:80:d6:12:c3:62:28:31:87:81:f4:
5e:33:d6:80:a1:07:b7:43:24:db:15:ff:d1:49:c9:
e7:19:d3:ea:13:33:26:99:c2:83:d6:5b:5d:00:d2:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:80:80:FE:34:FC:80:7D:12:A9:8E:03:30:F0:21:2C:17:BE:6B:78
X509v3 Authority Key Identifier:
keyid:EA:4A:D9:34:11:8E:65:26:C8:94:F4:69:F8:6A:A3:20:C1:3E:08:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/2ICA_jT8gH0SqY4DMPAhLBe-a3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.205.0/24
Signature Algorithm: sha256WithRSAEncryption
79:32:8e:4c:1e:8c:aa:55:28:3f:9d:7e:cd:70:b0:ee:56:a1:
b7:0e:e1:01:a0:5d:a6:c5:48:06:f5:12:22:25:c3:a8:8f:24:
c9:1b:c2:c2:9a:f2:39:e2:6c:fa:28:1c:8a:86:c4:2f:2f:86:
ae:c5:4b:db:65:8e:3a:bf:05:c3:79:f8:22:7f:78:da:9f:f2:
cb:bc:57:41:03:11:59:9c:62:ca:ea:1b:18:8e:0b:51:93:72:
6f:f8:9a:08:ef:ed:35:bd:33:7c:56:9f:29:fd:4e:4e:d6:a3:
17:6c:ce:95:3d:b8:77:b5:5d:0d:19:e4:c3:9a:a0:69:93:56:
10:e0:b1:5f:5c:64:c2:99:28:3e:e4:b2:1a:3a:af:15:15:49:
92:7c:a6:08:d6:a7:75:1a:08:c9:4b:66:26:59:62:28:5f:44:
2a:6f:77:4b:38:13:b4:05:17:49:5b:ff:2d:97:fd:11:f9:54:
a7:79:13:b4:c0:05:db:e4:e6:1f:ed:aa:94:41:b1:96:45:c1:
ba:15:80:ee:77:2b:0f:f9:cd:45:32:42:29:15:c9:fa:35:65:
54:d4:fd:e9:e2:a9:e1:db:00:24:ca:40:81:84:8b:18:a3:03:
66:2f:eb:cd:29:58:7e:0a:98:fe:f4:30:b2:a5:5b:5a:26:bc:
9c:3c:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:34 2026 by rpki-client