Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/2Ndf1GB--RcVTegC6zPQAxJQe4g.roa
File: 2Ndf1GB--RcVTegC6zPQAxJQe4g.roa (raw, json)
Hash identifier: 0L8O9kiu2xZ+X6I/3EY4idZtFO0i4I4ns+3oUeMchLU=
Subject key identifier: D8:D7:5F:D4:60:7E:F9:17:15:4D:E8:02:EB:33:D0:03:12:50:7B:88
Certificate issuer: /CN=5b931a874e688f27c95acad8dbd31df698f2117d
Certificate serial: 019B7F808B670A9C4A49059FC45098B4C145
Authority key identifier: 5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/2Ndf1GB--RcVTegC6zPQAxJQe4g.roa
Signing time: Fri 02 Jan 2026 16:18:09 +0000
ROA not before: Fri 02 Jan 2026 16:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196934
IP address blocks: 195.191.178.0/24 maxlen: 24
195.191.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:80:8b:67:0a:9c:4a:49:05:9f:c4:50:98:b4:c1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b931a874e688f27c95acad8dbd31df698f2117d
Validity
Not Before: Jan 2 16:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8d75fd4607ef917154de802eb33d00312507b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:a2:0e:05:de:bd:85:ea:20:9b:a7:c7:cc:
bd:b9:d2:a8:0b:21:c5:5d:fe:8b:43:8b:c1:a4:96:
ac:a7:30:1c:48:2c:11:60:76:f6:5f:40:77:51:b1:
ea:6a:80:7c:91:d8:82:0b:ec:b7:e3:c4:46:75:d0:
3e:95:cf:27:13:cc:cc:92:b3:45:55:b3:43:ce:e5:
0e:1c:3b:c5:62:18:ce:65:bd:d0:7b:0f:e4:56:49:
2b:ff:d0:13:44:fd:90:03:41:74:8f:83:8a:5a:42:
fa:b0:18:d7:5b:a9:e7:59:06:56:b0:77:b1:af:1f:
33:a4:08:c5:c2:4b:da:2f:09:69:0c:aa:cb:f6:eb:
82:8c:89:52:bf:58:38:f0:85:6a:7f:e5:ee:9a:8e:
cb:77:02:fd:cb:7c:0f:4f:8e:7f:85:56:04:94:08:
68:f6:3c:dd:a0:da:50:46:55:23:fc:ab:bf:0e:02:
78:51:fa:13:37:05:37:ed:5a:5c:00:08:02:a5:7f:
c2:15:4a:51:db:98:b3:7e:ef:4f:79:32:ff:e2:d9:
bf:f6:31:c0:64:3c:61:6e:51:13:a5:2d:d0:e7:9f:
bc:c3:6f:13:a9:b9:2b:ac:8a:ce:de:bd:47:c5:b9:
a2:57:e5:62:5f:3a:cb:f4:ae:f8:78:b0:86:ab:93:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D7:5F:D4:60:7E:F9:17:15:4D:E8:02:EB:33:D0:03:12:50:7B:88
X509v3 Authority Key Identifier:
keyid:5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/2Ndf1GB--RcVTegC6zPQAxJQe4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.178.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:53:b6:98:93:72:01:cd:2a:5f:63:ce:02:dc:48:6a:82:95:
55:f0:88:1d:a2:eb:2c:77:d9:d6:56:b3:d6:4c:21:04:8f:2b:
75:33:6c:4a:50:fd:ab:74:ff:01:3d:47:bb:48:ad:cb:3d:9c:
1a:fb:1f:61:e6:98:4c:04:47:3e:de:48:72:fb:bd:62:8a:22:
34:ca:41:05:1d:b6:ce:3e:f1:8f:b0:23:b5:fd:c2:5a:c6:b3:
a4:3c:1f:8c:ac:96:9b:24:03:c4:00:0c:b1:37:a8:a5:1c:c0:
18:d4:29:d8:fc:d3:5a:5e:2c:57:64:00:74:31:43:1b:20:04:
2e:f8:8e:ab:55:05:e7:7e:ad:99:20:aa:ca:5d:dd:fe:76:bb:
87:80:b7:23:03:e6:f6:10:23:c3:c6:e5:03:a3:78:dd:37:58:
94:94:40:7a:96:0a:17:f8:2e:5a:e2:be:0f:e8:5b:b1:4b:35:
7b:3d:47:2c:08:ba:36:9d:cf:40:85:af:83:f1:ec:ff:a1:55:
9d:61:a4:f8:05:91:19:5f:a5:3c:80:3d:62:5d:8d:5c:79:01:
e7:cf:2d:de:10:55:f2:53:28:96:e5:8c:f7:24:e6:5a:01:ed:
e2:37:c8:90:a1:30:f0:57:ef:c5:21:3e:d4:5d:cb:18:68:03:
49:2a:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:59:14 2026 by rpki-client