Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/2u6Ubex5E5d2M7NpqrZa9E6-kos.roa
File: 2u6Ubex5E5d2M7NpqrZa9E6-kos.roa (raw, json)
Hash identifier: A/wpadhLqiRngDqADTL67MD1OSsd1r0o0E7K45ZK4nY=
Subject key identifier: DA:EE:94:6D:EC:79:13:97:76:33:B3:69:AA:B6:5A:F4:4E:BE:92:8B
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019EE43D61FF529FFD0358D6B17F76200635
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/2u6Ubex5E5d2M7NpqrZa9E6-kos.roa
Signing time: Sat 20 Jun 2026 08:54:48 +0000
ROA not before: Sat 20 Jun 2026 08:54:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401626
IP address blocks: 185.242.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:3d:61:ff:52:9f:fd:03:58:d6:b1:7f:76:20:06:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 20 08:54:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daee946dec7913977633b369aab65af44ebe928b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:c7:eb:12:7c:f7:7c:b7:75:a4:bf:88:d1:
36:3f:78:3f:ec:44:f9:9b:72:67:18:1e:ac:94:73:
5f:86:c5:3b:a8:4a:f2:3d:e4:a2:95:37:c3:76:a7:
0d:a6:ec:bb:28:19:6c:e9:7a:24:cc:ed:2e:d9:bb:
61:31:6a:75:1e:76:8b:09:39:09:16:a4:4f:6f:b3:
9a:9b:48:da:13:de:5c:cc:fe:03:b6:ce:f4:97:d3:
d0:d1:a8:75:e1:10:fe:36:12:18:b5:7a:48:c3:1d:
0a:f2:c0:d0:62:42:8b:39:14:e9:43:db:f8:8f:e6:
67:00:2e:3d:a2:56:33:3d:fc:a4:aa:ae:66:3f:cc:
4f:fd:b8:98:fd:62:a4:c5:05:63:8f:fe:e6:d6:31:
dc:eb:20:ab:e5:a3:33:2a:6a:a0:02:d7:85:10:20:
ba:d3:76:77:7b:bf:f0:a9:a5:35:48:4d:42:cf:4f:
f5:4a:c4:cf:0f:91:29:0d:7e:7b:1c:26:81:d3:35:
90:ea:70:ee:12:bc:0b:c4:32:b1:f5:14:48:3b:cf:
da:e7:b8:1f:c7:95:d0:13:6f:b0:21:7b:bf:07:bf:
df:c6:81:f0:c8:85:c5:ec:85:6a:3b:bf:43:54:a5:
6e:30:b8:0c:1a:56:4b:36:c0:1a:b9:cc:36:5d:85:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EE:94:6D:EC:79:13:97:76:33:B3:69:AA:B6:5A:F4:4E:BE:92:8B
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/2u6Ubex5E5d2M7NpqrZa9E6-kos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.3.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2c:87:17:54:b2:e0:9b:0c:f7:6e:df:3d:30:7b:cd:23:95:
92:e7:d5:80:fb:b7:af:cd:6f:23:d3:01:6c:9b:ab:1a:b1:1c:
a9:fa:88:84:b2:a0:d7:87:09:90:52:e8:bb:4b:0e:d1:41:bb:
c9:7e:fb:3b:0f:53:df:d6:a7:d8:39:a5:93:ec:5c:96:4a:67:
27:bf:9b:6d:fa:51:9f:4c:bb:3c:53:ea:2e:b7:f5:85:99:0c:
33:78:57:9d:3a:ac:e1:d8:02:7c:84:eb:f8:c3:4f:8e:97:3d:
37:78:ee:49:a7:27:96:73:fe:32:da:09:3c:e7:8b:66:01:9c:
15:3d:2e:84:fd:81:ed:23:bd:79:3c:fc:b1:14:14:6f:06:88:
22:fa:0b:e8:79:ce:2b:3d:e6:e2:2a:d7:b5:68:3d:1c:f8:a7:
49:14:11:db:a7:52:00:50:34:d8:27:56:32:a9:cb:b5:27:97:
32:9f:c5:03:02:ed:a7:68:e2:23:86:38:2b:f1:83:ee:3e:38:
9a:be:23:05:8e:47:c6:3c:7a:63:ba:6d:0a:2e:ee:20:69:a2:
49:40:9e:07:e9:af:54:66:a3:23:74:4d:16:e9:fd:59:34:f0:
14:a6:7b:a4:cd:8b:40:2b:22:20:20:10:64:af:a1:d9:fc:e8:
e7:c8:fc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:35 2026 by rpki-client