Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/2P7SaJMcXsPyw8VXwK7lvJ92E84.roa
File: 2P7SaJMcXsPyw8VXwK7lvJ92E84.roa (raw, json)
Hash identifier: De3uii83QPlU8l4wx/dhaSH5u2nnOc8fYmv6y+0gSd4=
Subject key identifier: D8:FE:D2:68:93:1C:5E:C3:F2:C3:C5:57:C0:AE:E5:BC:9F:76:13:CE
Certificate issuer: /CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
Certificate serial: 019F2368E2958EDE8162BA1E839E892B38F2
Authority key identifier: 04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/2P7SaJMcXsPyw8VXwK7lvJ92E84.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14630
IP address blocks: 193.23.124.0/24 maxlen: 24
194.35.32.0/24 maxlen: 24
194.35.33.0/24 maxlen: 24
194.35.34.0/24 maxlen: 24
194.35.35.0/24 maxlen: 24
2a0d:fd40::/29 maxlen: 48
2a0d:fd40:56::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e2:95:8e:de:81:62:ba:1e:83:9e:89:2b:38:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8fed268931c5ec3f2c3c557c0aee5bc9f7613ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:27:76:d0:0d:47:6b:6f:47:8b:f0:1a:18:
28:91:22:3e:64:0a:3b:5b:8a:aa:c6:18:94:51:17:
42:40:27:8e:e2:22:b1:fc:9f:a0:f1:84:69:9f:2e:
b1:7e:99:1f:25:81:9b:f5:2a:f9:67:8f:57:77:e8:
25:c7:de:f1:6d:1b:7c:2d:d4:3c:47:0e:e5:63:e7:
15:7b:62:90:ed:de:36:76:ef:b1:3b:18:8d:69:39:
82:22:a2:52:aa:c5:cc:07:70:74:55:90:0a:94:b0:
aa:39:11:6a:4c:e4:08:39:8d:1c:d6:a3:63:b4:69:
f1:6d:8d:a5:68:b1:4a:4a:82:d4:3e:1a:92:41:66:
a2:07:e3:d8:ba:de:97:39:3f:b1:58:cd:e7:a4:46:
01:66:ae:aa:fb:9d:13:b0:c5:31:80:40:f1:04:fd:
88:b5:39:43:7e:76:df:21:da:22:55:b2:2b:d1:ea:
1c:d4:be:b8:e0:1f:a4:8b:69:9e:45:5c:b6:7a:cd:
40:85:56:80:55:c2:b1:12:ad:b3:ee:32:98:31:64:
bf:ad:97:fd:5e:c7:40:9f:00:e4:19:4a:a9:00:6b:
59:ff:93:46:b2:af:e3:76:88:5f:15:68:80:1e:87:
ae:4b:0c:27:58:c9:73:21:e3:6b:dc:8c:6d:6a:bf:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FE:D2:68:93:1C:5E:C3:F2:C3:C5:57:C0:AE:E5:BC:9F:76:13:CE
X509v3 Authority Key Identifier:
keyid:04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/2P7SaJMcXsPyw8VXwK7lvJ92E84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.124.0/24
194.35.32.0/22
IPv6:
2a0d:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
3f:19:ea:d0:52:41:3e:c0:81:69:98:3c:83:81:15:82:e4:28:
b0:d1:f7:0c:f3:84:0d:34:33:b5:4b:f3:55:42:c2:ff:20:8f:
2e:c1:84:18:3c:16:de:95:28:10:0e:6e:42:70:a9:4e:bc:b3:
45:14:38:d8:53:d3:9f:d6:44:9d:9d:d8:a1:27:88:32:1c:69:
9e:c2:48:f2:f0:3e:e3:ac:df:34:c1:72:ee:02:33:51:c8:aa:
4f:65:76:6a:c1:b8:12:f3:d8:1c:88:a7:0b:32:e6:9b:f7:15:
35:9e:64:df:ce:1b:e6:66:d9:e5:9d:8c:90:14:fe:5a:74:d9:
20:94:b0:9e:58:c0:be:0d:a5:8a:fd:80:7b:11:a7:ae:ce:49:
48:7b:c1:d6:dc:17:f8:67:f9:5a:25:a2:c0:a7:11:77:ca:95:
44:a6:26:27:54:2b:15:de:75:f0:80:a5:2d:51:04:63:ea:bb:
b3:64:fe:c4:bf:b4:ee:9a:f6:81:cb:9b:26:c4:ab:ca:d5:98:
13:02:b3:7c:a8:8d:06:54:7e:e0:c1:cc:82:00:d0:f6:54:5d:
53:f6:7d:d6:d6:b5:c3:7e:81:6e:82:f6:c2:ef:b2:4e:cd:96:
c2:c7:5f:44:67:95:78:00:20:7d:de:48:79:18:50:59:76:b1:
12:aa:3d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:25 2026 by rpki-client