Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/231qsvaOZIqIruO4fkNxN4_GZxo.roa
File: 231qsvaOZIqIruO4fkNxN4_GZxo.roa (raw, json)
Hash identifier: unnQteTwyKRIT/eUEC+t3+86puUV0nMgnQ966MHZ+gM=
Subject key identifier: DB:7D:6A:B2:F6:8E:64:8A:88:AE:E3:B8:7E:43:71:37:8F:C6:67:1A
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01A0D3F28A629B1A510422BF773E011FC7EF
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/231qsvaOZIqIruO4fkNxN4_GZxo.roa
Signing time: Thu 24 Sep 2026 15:04:42 +0000
ROA not before: Thu 24 Sep 2026 15:04:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213459
IP address blocks: 80.86.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f2:8a:62:9b:1a:51:04:22:bf:77:3e:01:1f:c7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Sep 24 15:04:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db7d6ab2f68e648a88aee3b87e4371378fc6671a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:52:09:ff:fc:7a:7c:fb:d1:1d:a0:c8:04:
47:4c:b4:aa:8c:a2:19:29:12:46:45:7b:bd:1b:42:
88:0c:1b:29:0a:ce:dd:24:7a:d8:06:f1:00:ff:0f:
ee:bc:8f:11:40:de:4e:0f:2c:97:2b:0a:0c:a8:6b:
ee:3e:de:bc:7f:e4:ac:05:9f:e6:30:11:ca:ab:f8:
1a:fd:04:db:54:36:0e:5a:e1:ca:48:d7:fd:48:c5:
f8:e2:67:f6:14:58:49:ba:14:25:66:55:a3:06:2d:
80:49:8c:4c:2c:6f:4a:cd:a9:aa:27:a0:bd:1c:43:
5c:3c:b3:b2:da:90:f1:41:16:51:45:a7:b8:2e:dc:
c6:11:30:08:ef:ea:a4:1f:20:60:c5:13:b3:bd:61:
cd:95:ba:ae:d8:4e:14:cf:ae:58:bb:1b:5f:50:57:
89:5d:de:9a:40:33:8f:04:ed:e9:5a:18:2a:35:83:
0f:30:26:7a:b8:2b:e5:26:14:4d:e4:84:23:ba:e1:
28:62:f9:47:da:88:4f:50:f4:a6:07:d8:de:84:e9:
26:b7:e9:08:b5:4f:24:cd:a0:3a:7d:eb:7e:ef:0f:
69:6d:ba:20:0f:fb:33:90:bc:28:f5:a1:d5:d7:a2:
33:11:37:fa:b9:54:b1:06:91:d7:53:87:c1:95:5c:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7D:6A:B2:F6:8E:64:8A:88:AE:E3:B8:7E:43:71:37:8F:C6:67:1A
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/231qsvaOZIqIruO4fkNxN4_GZxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.223.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1d:c2:66:17:4e:c9:49:1e:c7:d6:9d:be:fb:46:f8:df:89:
06:a2:fe:a8:55:21:cc:d9:21:dd:fb:5d:27:e9:be:9a:59:c6:
73:38:f0:02:2f:86:a1:44:8e:3f:5b:cd:5a:af:b3:a1:ed:99:
d2:2d:c3:b1:3d:4a:78:31:4f:d8:62:b6:00:8d:02:69:8d:2e:
18:c9:94:61:59:d7:b1:7f:a9:78:35:7e:4a:b5:2e:8c:e6:2d:
c6:4b:0e:ab:58:2e:eb:fa:6e:2b:61:8e:ea:89:d9:51:ee:92:
e7:7a:a8:60:d0:c4:10:e9:33:de:a7:a2:0a:a1:f1:81:b3:ad:
0a:7b:51:cd:3b:b8:cf:02:d0:cc:e4:ab:41:c9:2f:61:5f:55:
8d:36:80:4d:34:60:5e:58:04:06:5a:10:44:4d:0f:b7:af:cc:
a9:94:77:bc:f2:30:30:0c:38:cb:73:d9:70:15:fd:09:cc:f4:
26:66:c0:d0:84:89:c2:1f:7b:89:db:49:0c:f1:fb:88:ac:b7:
d3:84:c9:71:44:a6:5e:07:ee:17:f7:97:eb:24:66:64:4e:02:
2d:b7:20:53:ba:c5:3b:8a:34:b9:83:e0:cf:4c:84:a0:1b:27:
a2:69:d6:45:8f:cb:76:bc:5e:63:51:91:0e:c6:29:43:67:b0:
ed:f7:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:29:31 2026 by rpki-client