Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/2R13SKNxrFkn6v3hhU-oDShwLZE.roa
File: 2R13SKNxrFkn6v3hhU-oDShwLZE.roa (raw, json)
Hash identifier: oy+QOX2D3+8+vRTc46TxiL2OKCjj40Sfc5Pwn4cvQQg=
Subject key identifier: D9:1D:77:48:A3:71:AC:59:27:EA:FD:E1:85:4F:A8:0D:28:70:2D:91
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01A0A54AAFB68D9D70A215BF0ACCDB1D3111
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/2R13SKNxrFkn6v3hhU-oDShwLZE.roa
Signing time: Tue 15 Sep 2026 13:38:50 +0000
ROA not before: Tue 15 Sep 2026 13:38:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 80.86.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:4a:af:b6:8d:9d:70:a2:15:bf:0a:cc:db:1d:31:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Sep 15 13:38:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d91d7748a371ac5927eafde1854fa80d28702d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:5c:32:8e:f2:f6:c5:45:6d:0e:fb:05:fc:
d1:c7:67:36:bf:87:b1:b0:29:b7:56:4d:11:19:af:
3d:83:fb:47:23:70:2f:c8:8a:8d:c7:74:da:23:1b:
61:d3:bb:01:51:24:54:92:2c:0e:12:7f:0d:36:0a:
05:3a:74:80:9b:8a:5f:0a:9c:96:d1:49:e5:ee:9f:
22:c8:9d:b4:9f:e0:50:5f:6d:7a:d1:16:fe:f5:93:
12:f3:5f:a0:9b:91:be:5f:26:75:6b:00:43:b0:db:
41:7a:bf:8f:62:5d:a4:40:be:43:fa:6e:4e:ed:8a:
3e:26:59:da:8d:6b:f2:b2:1c:a9:5a:b4:3d:b2:57:
56:b8:fe:d6:69:8f:62:ab:dc:36:17:a0:18:20:9a:
0d:b1:52:6e:b2:15:d8:81:61:ec:bc:f0:82:8a:7e:
3f:e1:ee:f2:a1:0a:1c:f7:4f:4e:b8:82:76:15:6c:
ba:cb:97:1f:48:19:97:31:82:ae:9e:23:f7:40:42:
af:92:c2:af:76:79:36:3d:96:e8:ef:1d:64:f1:88:
93:1e:ad:3e:8b:4b:30:ce:ed:3d:28:48:ed:97:5b:
d2:08:ad:6f:31:2e:5c:cc:c4:c0:dd:88:a6:26:d8:
7a:86:1c:9f:8d:21:b0:16:20:48:72:75:43:29:5d:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:77:48:A3:71:AC:59:27:EA:FD:E1:85:4F:A8:0D:28:70:2D:91
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/2R13SKNxrFkn6v3hhU-oDShwLZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.210.0/24
Signature Algorithm: sha256WithRSAEncryption
88:2a:75:0f:6f:51:ff:1b:21:0f:f6:84:65:fc:24:57:4b:26:
34:b3:e2:00:49:2d:fe:1c:37:4b:57:c7:5e:f9:8e:57:02:4c:
f9:8a:d9:00:c8:cf:1b:8b:75:d5:1b:78:92:8c:ad:d5:82:3c:
a9:7e:a7:3f:b0:8f:e7:3b:fb:2f:57:33:ee:77:27:b9:88:9d:
d2:2a:48:24:b9:ed:6e:a1:2b:4b:36:0e:72:ba:80:a7:20:9d:
8a:93:1d:e5:d3:79:2f:7f:b1:2a:4d:cb:9c:ba:ac:25:f4:c3:
91:6a:f6:62:ac:73:c6:de:ea:80:3f:ba:a5:72:b5:2a:ad:ff:
b2:f6:23:22:c5:39:79:89:26:d8:6a:1e:3d:c8:d6:d4:09:85:
09:64:47:9b:a9:ca:a4:70:57:35:49:ed:4c:15:fe:87:5d:22:
e1:16:a5:4f:52:d8:e3:86:1c:59:c2:7b:6d:f7:fd:78:2b:84:
36:72:5c:9f:c3:9e:e0:a3:85:b6:13:40:54:e4:a5:6f:2a:cc:
3e:46:29:b0:87:5f:81:d0:c0:ce:0e:b4:81:54:9d:35:2a:dd:
9e:b4:ab:7e:25:12:bf:80:21:18:f4:53:1d:47:d1:f8:72:a7:
c3:34:75:2c:30:bc:4a:e5:59:fe:dd:8a:66:bf:80:58:3a:e5:
37:f0:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:48:03 2026 by rpki-client