Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/2KzBiCaQc6mGrvUnbp6zZMYqONs.roa
File: 2KzBiCaQc6mGrvUnbp6zZMYqONs.roa (raw, json)
Hash identifier: bUStw9A2ePfBawOBWpaDoz2Fke+/wxFZlv1ySB/Pnos=
Subject key identifier: D8:AC:C1:88:26:90:73:A9:86:AE:F5:27:6E:9E:B3:64:C6:2A:38:DB
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E0C197BA7D7823342B58A62BD691AEFB1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/2KzBiCaQc6mGrvUnbp6zZMYqONs.roa
Signing time: Sat 09 May 2026 09:37:37 +0000
ROA not before: Sat 09 May 2026 09:37:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 62.169.130.0/24 maxlen: 24
147.90.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0c:19:7b:a7:d7:82:33:42:b5:8a:62:bd:69:1a:ef:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 9 09:37:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8acc188269073a986aef5276e9eb364c62a38db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:ec:e1:e1:c3:f8:d6:18:3e:d1:f6:78:39:
e0:54:6a:86:3d:49:dd:c0:90:84:a7:32:f9:70:59:
42:75:15:3e:f7:e3:9d:71:84:7b:d9:4b:07:72:7e:
90:c9:df:ad:33:02:40:5b:ba:1b:57:3a:d8:a7:20:
d8:a6:93:29:e3:b9:b5:10:fc:d6:e6:90:58:cf:c8:
40:ad:bb:d7:95:fe:1a:39:97:4f:5d:aa:d0:1a:33:
be:81:3f:a4:ec:60:96:bb:fd:a8:54:b9:ea:2c:51:
53:a7:73:2f:48:bd:bb:ce:b8:ae:1c:3c:af:a0:a8:
db:5c:c9:17:8f:98:7f:02:2d:9b:70:a0:82:17:1c:
17:14:90:5e:fc:c1:71:05:9e:e6:21:00:76:ed:19:
da:8c:88:04:7f:d7:e3:7c:35:9c:2f:60:31:55:30:
35:3b:3b:fe:97:40:37:20:f5:b5:67:94:3d:31:49:
b5:24:98:5a:22:52:9c:54:d4:d0:09:c6:e7:12:20:
15:9a:32:15:6f:e7:dc:f1:e6:66:62:ec:98:37:a0:
a9:56:a3:2b:be:d3:3b:92:ad:c6:ed:58:98:92:81:
29:ce:ea:7f:be:3a:9f:42:23:b0:fc:2e:c0:e5:f0:
2e:16:b5:48:cd:86:91:ce:a3:a3:c2:05:be:34:50:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:C1:88:26:90:73:A9:86:AE:F5:27:6E:9E:B3:64:C6:2A:38:DB
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/2KzBiCaQc6mGrvUnbp6zZMYqONs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.130.0/24
147.90.226.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e3:91:94:64:59:28:97:5d:c2:ef:20:c7:87:f4:c3:13:8e:
40:7f:54:bd:2b:7f:18:c4:66:13:2d:85:78:a4:8c:51:90:0f:
e7:a1:54:64:a6:38:b0:0e:8c:bd:c8:f4:d6:a0:13:c5:82:37:
20:6f:24:a6:fa:3d:5d:48:04:e6:08:93:34:50:eb:6a:b9:c2:
a6:e6:e0:59:55:cc:f9:d1:1c:16:d7:95:e2:a9:cb:73:a1:90:
58:00:e4:4d:82:58:9a:45:67:ed:12:e6:8c:c8:37:95:60:20:
b2:fc:13:41:5f:e6:82:c9:14:ed:f3:ab:cc:e4:d7:17:1d:f3:
85:c3:51:c8:8b:06:46:79:d7:4d:b9:53:c6:fe:34:85:1f:69:
5e:af:a3:09:1e:37:b3:e3:16:41:59:fe:18:34:b2:16:2f:0d:
80:7d:13:38:29:a7:18:6e:9e:0e:39:14:a5:0d:12:0a:3c:e9:
a7:be:80:c8:ad:02:78:bb:4c:8f:6c:99:89:db:d8:01:20:4c:
91:94:e7:7d:6f:f2:00:ab:75:a2:94:0f:d9:b1:f1:ae:cc:5a:
43:2e:fd:53:19:39:10:89:60:f4:11:09:c3:fc:96:ac:70:4d:
a4:0b:89:27:35:50:a9:e8:ce:78:ae:21:ac:e2:d1:8b:a5:b8:
78:f8:f6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:22 2026 by rpki-client