Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/2FjkxVJwhbBSDsFlqMOylRx1h7w.roa
File: 2FjkxVJwhbBSDsFlqMOylRx1h7w.roa (raw, json)
Hash identifier: lWPoUqWqXBuYP0fhmCr8Qtwx5dmWT/xwoh3ALnECDtg=
Subject key identifier: D8:58:E4:C5:52:70:85:B0:52:0E:C1:65:A8:C3:B2:95:1C:75:87:BC
Certificate issuer: /CN=0fb240559077c111da55f8e2b30e7117640d82ec
Certificate serial: 019F236958503D4B23E852A8578C7DE3CD08
Authority key identifier: 0F:B2:40:55:90:77:C1:11:DA:55:F8:E2:B3:0E:71:17:64:0D:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7JAVZB3wRHaVfjisw5xF2QNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/2FjkxVJwhbBSDsFlqMOylRx1h7w.roa
Signing time: Thu 02 Jul 2026 15:18:54 +0000
ROA not before: Thu 02 Jul 2026 15:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60917
IP address blocks: 185.23.36.0/22 maxlen: 22
185.23.36.0/24 maxlen: 24
185.23.37.0/24 maxlen: 24
185.23.38.0/24 maxlen: 24
185.23.39.0/24 maxlen: 24
2a00:6860::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7JAVZB3wRHaVfjisw5xF2QNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:58:50:3d:4b:23:e8:52:a8:57:8c:7d:e3:cd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb240559077c111da55f8e2b30e7117640d82ec
Validity
Not Before: Jul 2 15:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d858e4c5527085b0520ec165a8c3b2951c7587bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:0c:32:da:e6:09:fa:e6:b3:bb:0c:c0:f5:
93:82:af:2e:c8:a2:99:49:56:ad:d1:48:65:9e:66:
c9:8e:5c:70:40:0d:08:39:22:4b:51:59:a9:a8:c9:
a7:2a:63:db:bb:fd:ad:cd:b2:2a:9c:4c:ba:80:f4:
50:87:ca:1f:70:bf:11:e0:0c:ac:bc:dc:0c:a4:f9:
65:6f:d2:74:bb:a9:ee:97:7b:b4:e0:b2:98:3e:1b:
da:40:99:28:17:a2:12:4b:e0:7e:31:3b:7f:bd:48:
94:ad:e7:ac:ad:a8:0a:fe:b9:ab:80:62:55:bf:9d:
94:30:28:e3:a2:ae:3c:91:48:72:e4:2c:b7:8d:08:
73:98:fb:4f:a5:4f:9a:3a:9a:a9:0f:e0:75:eb:c4:
a0:16:37:42:f3:01:8f:78:20:48:91:90:b6:89:57:
ab:4f:2b:91:11:b5:6e:b7:0c:b6:29:85:75:fe:2e:
23:d6:b1:22:71:f5:ca:bb:40:da:5f:e8:3f:b8:cb:
e3:db:27:16:4f:b7:e4:1d:da:1b:65:6d:69:06:23:
13:d5:4d:24:5d:f2:5a:77:60:35:05:79:b6:84:31:
3b:2c:b4:de:c2:fe:0c:61:b1:43:ee:3d:67:bd:44:
0e:bc:f2:a7:58:bc:47:12:87:62:bb:13:6e:db:7d:
2c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:58:E4:C5:52:70:85:B0:52:0E:C1:65:A8:C3:B2:95:1C:75:87:BC
X509v3 Authority Key Identifier:
keyid:0F:B2:40:55:90:77:C1:11:DA:55:F8:E2:B3:0E:71:17:64:0D:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7JAVZB3wRHaVfjisw5xF2QNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/2FjkxVJwhbBSDsFlqMOylRx1h7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/D7JAVZB3wRHaVfjisw5xF2QNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.36.0/22
IPv6:
2a00:6860::/32
Signature Algorithm: sha256WithRSAEncryption
4c:1f:32:4b:36:9c:0e:71:c1:be:7f:c1:14:58:10:11:6a:97:
cb:ab:c3:cf:da:f9:b9:a7:ee:f3:bd:7f:a4:de:99:49:10:25:
15:b7:a9:36:be:bb:3a:8b:a7:fb:18:ac:86:1a:2a:8d:60:f7:
41:d8:48:06:be:d1:71:ed:ae:e0:49:70:c1:db:fc:a7:bf:9a:
41:c7:11:8e:d3:bf:6c:1d:40:45:d7:bd:a9:50:ea:55:71:1b:
65:55:4c:fc:b9:0c:8b:aa:3a:a3:af:b2:31:06:1b:4a:26:2a:
55:ce:01:2e:f1:19:95:9a:e3:40:ad:04:b1:5b:11:6c:f7:83:
f9:b8:c8:75:9d:d8:fc:6b:7c:c0:a2:dd:21:29:8e:8c:f7:4d:
76:e3:84:92:07:d3:c8:54:b2:b6:2b:fe:52:de:03:06:e1:ac:
bb:35:00:7c:21:9d:00:59:0c:a1:5c:a7:f2:0a:f2:da:8f:8a:
c3:e8:d5:a3:ae:fd:00:19:e6:51:3d:45:1d:b1:73:79:aa:4d:
64:41:71:17:1d:02:58:e0:fe:89:a7:1f:ba:f0:4c:84:e0:69:
15:98:ea:ec:78:4b:c8:de:54:c6:42:16:b4:68:5f:28:70:7d:
c7:5e:3d:77:31:3c:6d:ac:9e:49:c7:66:c8:ed:ba:d5:c4:b8:
02:95:27:2f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaVhQPUsj6FKoV4x9480IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYjI0MDU1OTA3N2MxMTFkYTU1ZjhlMmIzMGU3MTE3NjQw
ZDgyZWMwHhcNMjYwNzAyMTUxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODU4ZTRjNTUyNzA4NWIwNTIwZWMxNjVhOGMzYjI5NTFjNzU4N2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5MMMtrmCfrms7sMwPWTgq8uyKKZ
SVat0UhlnmbJjlxwQA0IOSJLUVmpqMmnKmPbu/2tzbIqnEy6gPRQh8ofcL8R4Ays
vNwMpPllb9J0u6nul3u04LKYPhvaQJkoF6ISS+B+MTt/vUiUreesragK/rmrgGJV
v52UMCjjoq48kUhy5Cy3jQhzmPtPpU+aOpqpD+B168SgFjdC8wGPeCBIkZC2iVer
TyuREbVutwy2KYV1/i4j1rEicfXKu0DaX+g/uMvj2ycWT7fkHdobZW1pBiMT1U0k
XfJad2A1BXm2hDE7LLTewv4MYbFD7j1nvUQOvPKnWLxHEodiuxNu230sSwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNhY5MVScIWwUg7BZajDspUcdYe8MB8GA1UdIwQY
MBaAFA+yQFWQd8ER2lX44rMOcRdkDYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdKQVZaQjN3UkhhVmZqaXN3NXhGMlFOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYt
ODk3M2IyZDcwNjJjLzEvMkZqa3hWSndoYkJTRHNGbHFNT3lsUngxaDd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYtODk3M2IyZDcwNjJj
LzEvRDdKQVZaQjN3UkhhVmZqaXN3NXhGMlFOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRckMA0E
AgACMAcDBQAqAGhgMA0GCSqGSIb3DQEBCwUAA4IBAQBMHzJLNpwOccG+f8EUWBAR
apfLq8PP2vm5p+7zvX+k3plJECUVt6k2vrs6i6f7GKyGGiqNYPdB2EgGvtFx7a7g
SXDB2/ynv5pBxxGO079sHUBF172pUOpVcRtlVUz8uQyLqjqjr7IxBhtKJipVzgEu
8RmVmuNArQSxWxFs94P5uMh1ndj8a3zAot0hKY6M901244SSB9PIVLK2K/5S3gMG
4ay7NQB8IZ0AWQyhXKfyCvLaj4rD6NWjrv0AGeZRPUUdsXN5qk1kQXEXHQJY4P6J
px+68EyE4GkVmOrseEvI3lTGQha0aF8ocH3HXj13MTxtrJ5Jx2bI7brVxLgClScv
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:50 2026 by rpki-client