Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2qgCcnvHctcF_1-ov9NwUXWguYs.roa
File: 2qgCcnvHctcF_1-ov9NwUXWguYs.roa (raw, json)
Hash identifier: hS4mFcxJq9yBHufH6OU+hw1fK2JmrH79GCFJJDr94gI=
Subject key identifier: DA:A8:02:72:7B:C7:72:D7:05:FF:5F:A8:BF:D3:70:51:75:A0:B9:8B
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019D027EEB29AD016AFDEFC8F3443B63A03A
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2qgCcnvHctcF_1-ov9NwUXWguYs.roa
Signing time: Wed 18 Mar 2026 19:49:25 +0000
ROA not before: Wed 18 Mar 2026 19:49:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214833
IP address blocks: 185.17.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:02:7e:eb:29:ad:01:6a:fd:ef:c8:f3:44:3b:63:a0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Mar 18 19:49:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daa802727bc772d705ff5fa8bfd3705175a0b98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:0c:c6:40:01:00:59:70:39:30:13:e7:e6:
91:0e:22:0c:99:94:b4:c8:c8:a8:33:78:8f:17:03:
5b:b9:c1:25:91:4f:d8:47:88:9d:56:ee:46:c2:4c:
ea:ae:1b:6e:5f:42:1d:ed:cf:ec:e7:a1:18:97:62:
cb:c4:24:74:a1:59:a3:8e:d1:b0:3f:17:fa:21:ae:
9e:5e:72:16:a5:2a:fc:1a:7b:32:b7:5d:e0:41:1a:
d8:e0:31:2f:5b:e8:66:22:c9:51:8e:a7:56:38:93:
16:f1:cd:01:44:44:c1:d3:8e:15:38:47:37:30:6f:
f3:25:df:1c:43:5f:92:ed:13:6b:09:5d:c9:f1:d9:
70:91:00:9c:e3:2d:c7:45:59:e4:02:69:8d:08:63:
4e:99:a8:57:29:93:90:cc:72:4b:07:c8:29:eb:e5:
f0:fc:a8:7f:ed:c0:04:5c:c8:d5:37:88:ea:a9:5e:
01:ed:55:71:a9:6d:bd:6e:0c:11:8f:25:3a:2b:1d:
63:e2:46:d8:94:68:f1:8c:d8:2b:8d:36:0f:57:ba:
06:a2:73:44:4d:64:c3:ce:0a:db:11:fa:5d:79:a0:
76:40:c2:38:89:c5:3d:92:03:fb:01:85:ec:78:da:
46:21:39:f9:40:9b:49:25:08:51:3c:bf:43:d1:7e:
be:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A8:02:72:7B:C7:72:D7:05:FF:5F:A8:BF:D3:70:51:75:A0:B9:8B
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2qgCcnvHctcF_1-ov9NwUXWguYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:80:ec:57:85:1c:a4:51:5e:0e:ad:9e:1e:69:fd:2e:a7:2e:
d8:ad:88:a8:a9:72:62:71:95:75:5f:1f:66:ad:14:69:c0:88:
e8:92:6d:54:01:c1:15:29:30:5d:08:d8:77:37:66:6d:5a:db:
22:6b:04:30:a8:26:43:c7:10:fc:d4:4a:71:09:85:f1:8f:76:
ce:01:1c:db:78:ae:31:78:ec:de:91:fa:a4:5a:aa:1a:65:57:
c6:36:87:23:ba:16:c4:77:2e:78:2e:5b:c0:dc:f1:46:5f:20:
cb:c7:71:f9:6d:0d:92:f9:46:fa:0c:05:55:37:b8:a3:89:75:
ca:9e:c3:ea:82:59:47:2a:65:12:2b:4b:54:cb:7e:bd:71:39:
0d:11:a4:4b:de:b0:3f:00:6a:02:27:ff:fe:92:45:ad:20:7a:
34:2b:00:38:8a:b6:93:c3:31:6a:62:b9:25:56:ff:cb:05:5d:
4e:f8:5e:72:0f:6f:20:37:cb:56:4b:f6:93:b4:d4:18:16:de:
6b:e8:e2:77:cf:cc:45:e0:1e:4e:b2:af:60:22:c4:08:46:7f:
5a:4d:50:7e:c4:26:10:de:e8:12:3d:a4:17:4c:f4:ab:64:6d:
77:fa:9e:ae:5b:49:25:4e:5e:e6:25:e1:fe:e0:2c:ac:ea:bd:
4d:f3:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:04 2026 by rpki-client