Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2uPzc8t_0XbSv2rltsOkLPv3BrI.roa
File: 2uPzc8t_0XbSv2rltsOkLPv3BrI.roa (raw, json)
Hash identifier: wfyvPBf6XZ21DHGeIT45DfXE18VfyW60oFBwn8DSQHE=
Subject key identifier: DA:E3:F3:73:CB:7F:D1:76:D2:BF:6A:E5:B6:C3:A4:2C:FB:F7:06:B2
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F6F7B6941AF9FFC5656E0DE19A6100509
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2uPzc8t_0XbSv2rltsOkLPv3BrI.roa
Signing time: Fri 17 Jul 2026 09:49:46 +0000
ROA not before: Fri 17 Jul 2026 09:49:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273829
IP address blocks: 153.51.250.0/24 maxlen: 24
185.229.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:7b:69:41:af:9f:fc:56:56:e0:de:19:a6:10:05:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 17 09:49:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dae3f373cb7fd176d2bf6ae5b6c3a42cfbf706b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:b8:5a:3e:41:ab:09:e2:30:08:3c:03:b2:
ef:7f:6d:20:9e:a2:6a:90:04:55:b7:7b:92:8c:a5:
45:d3:a8:0f:9a:a3:6d:0a:f3:27:9b:08:4b:ad:a9:
f4:f8:5c:fa:15:5e:7e:4b:27:2c:f8:dd:26:20:46:
a0:e8:06:66:0e:3e:7d:99:c1:ce:1b:43:01:26:ff:
ff:27:8f:7a:15:eb:af:9d:32:eb:49:7c:d4:79:8a:
20:3d:82:ef:b2:29:0a:6b:0c:e6:88:14:ca:c0:b0:
0f:ae:04:7f:cd:58:9f:cb:42:b0:bc:b6:25:0e:ae:
30:67:a0:be:83:06:64:60:ac:7a:c7:80:94:74:8f:
67:0e:4f:11:c0:ed:09:4c:19:9b:11:68:f7:ea:1d:
68:96:86:c4:f2:b3:23:ed:25:93:83:c0:23:91:43:
0c:ed:8a:81:53:85:dd:66:16:d4:f9:f1:af:96:ef:
48:aa:f9:b1:ce:6d:b6:d3:f8:bd:88:93:24:84:88:
f8:b9:d6:72:35:29:e7:29:b8:a6:bb:0c:60:f2:18:
10:6c:39:c4:72:89:61:eb:c5:d3:09:ac:12:81:bf:
5f:48:35:c4:79:8e:cf:71:70:86:72:f2:40:eb:73:
46:c4:2a:c6:67:bd:3d:ea:9b:cc:a7:91:47:bc:70:
b7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E3:F3:73:CB:7F:D1:76:D2:BF:6A:E5:B6:C3:A4:2C:FB:F7:06:B2
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2uPzc8t_0XbSv2rltsOkLPv3BrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.250.0/24
185.229.216.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ab:52:2b:23:a1:2c:6e:a5:a5:7e:31:bd:0f:9f:0e:f2:e1:
ef:45:b4:b7:49:17:df:ae:79:09:4c:6b:a6:08:48:1b:f6:97:
d7:5b:a5:33:70:1e:d4:9a:44:a1:ac:44:20:c3:60:42:83:b9:
68:70:b1:6d:94:6a:88:d7:be:8c:89:7c:78:2e:d5:0e:c3:c2:
81:57:06:13:c9:43:01:dc:63:1e:d9:d1:2e:2b:db:24:bc:ae:
c2:f1:b9:d6:92:41:15:14:23:ef:3e:56:24:a9:b2:ff:23:d4:
42:0f:c9:12:8a:24:05:5d:96:1c:a4:cf:91:8c:37:b0:69:6e:
9a:7c:93:49:0b:97:ea:a8:8e:24:fa:3a:0a:c4:12:4c:e1:40:
55:0f:da:42:f4:c8:c3:46:06:5b:39:20:fd:d7:8a:2b:83:b4:
36:0e:0e:83:79:d5:39:47:9d:b9:bd:73:13:51:63:7d:ae:b7:
5f:e5:4e:61:af:05:43:93:e5:bd:de:cb:e0:b1:df:07:67:c5:
76:72:b9:67:00:7a:10:42:f3:57:a6:c5:81:86:21:45:e0:9f:
1b:40:28:46:d3:d2:16:6d:2d:33:8f:3a:b3:b4:60:ca:f3:86:
ef:b8:87:c4:34:9a:09:4c:9e:76:a1:de:4a:5a:ee:dd:14:c6:
02:ea:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:37 2026 by rpki-client