Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/2KPw1cvbm50f0LYM14wl1jqJ9og.roa
File: 2KPw1cvbm50f0LYM14wl1jqJ9og.roa (raw, json)
Hash identifier: A1Jjz4VQ5P7K7cWtSDzEEjwDvup5VASHzuFeW68IpQ8=
Subject key identifier: D8:A3:F0:D5:CB:DB:9B:9D:1F:D0:B6:0C:D7:8C:25:D6:3A:89:F6:88
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019CEB5F2F11CE461F44FCA17105F8704FC5
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/2KPw1cvbm50f0LYM14wl1jqJ9og.roa
Signing time: Sat 14 Mar 2026 08:03:29 +0000
ROA not before: Sat 14 Mar 2026 08:03:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209881
IP address blocks: 95.128.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:5f:2f:11:ce:46:1f:44:fc:a1:71:05:f8:70:4f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Mar 14 08:03:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8a3f0d5cbdb9b9d1fd0b60cd78c25d63a89f688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:88:be:73:cc:df:d3:2e:b4:a3:bb:fb:ff:
1e:db:f5:9d:05:f7:e5:26:a0:b2:3e:92:23:09:57:
67:20:4f:51:b3:aa:6e:53:82:d4:45:08:e3:ff:3a:
06:ef:5b:19:af:aa:8a:fc:74:e4:23:4c:8a:cd:29:
a4:be:e1:e0:8f:42:19:cc:c4:34:45:06:ac:2d:31:
1c:4f:62:25:6f:49:f9:d2:08:a7:f4:35:7a:3b:1b:
7c:ef:5e:39:b4:fa:f7:f8:15:c2:fb:95:1d:42:cb:
92:4d:9b:5f:4f:9d:ba:a8:c4:b9:be:76:5f:40:ae:
78:36:37:7c:04:58:22:c1:69:bd:f1:14:71:2b:cf:
c2:9a:dc:52:8d:9c:a4:b9:15:84:20:b3:b4:79:b7:
ce:11:ae:13:2f:42:3e:ff:71:5b:34:6c:64:fb:b3:
76:ba:e1:c1:56:b0:fe:8b:89:a5:f2:7a:b6:7a:0a:
76:da:da:ef:af:4c:6e:af:5f:e6:79:15:38:80:d8:
e6:eb:99:c5:18:d8:9a:1c:cd:4b:c3:c5:ec:44:57:
6d:5a:48:ad:27:eb:3d:e3:e1:4b:0d:b3:6d:27:30:
0c:d9:14:4f:21:4e:bb:64:ac:ea:fa:b8:e5:c2:e2:
aa:75:a0:f8:3d:6f:64:d2:b0:96:6a:d5:32:e6:11:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A3:F0:D5:CB:DB:9B:9D:1F:D0:B6:0C:D7:8C:25:D6:3A:89:F6:88
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/2KPw1cvbm50f0LYM14wl1jqJ9og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1a:90:11:bd:0f:d5:fd:0e:94:93:bc:40:ef:a9:dc:22:7b:
5c:fc:84:54:3c:01:0c:c0:7f:2d:64:d2:2e:d0:8b:ae:7e:ac:
67:b8:02:42:94:76:7d:72:76:c4:b4:fa:92:ad:85:2c:13:b9:
e8:f5:be:73:06:25:58:4e:2a:aa:d9:6b:a4:8d:ff:a2:bf:8b:
92:45:15:9f:32:d7:82:f5:06:4f:f5:36:6a:8a:07:56:f6:48:
9a:40:ec:ab:71:9c:c5:a5:af:ff:c9:c6:35:d1:1f:7c:a0:bd:
2b:28:e7:65:db:ee:90:03:6a:4d:3b:0a:d3:c4:f6:5e:3e:38:
b7:05:dd:bb:db:15:2e:1d:78:4d:eb:ff:96:ac:0e:64:bd:2f:
81:99:8b:18:3a:78:c9:0c:3c:bd:aa:a8:e9:be:aa:a9:f5:e6:
d4:77:f8:91:0b:82:9d:25:6e:1c:75:73:1b:d6:d6:33:97:ee:
67:aa:b4:cb:16:c6:78:60:41:3f:93:54:5a:e5:0a:32:a8:da:
82:d0:1a:06:6c:15:72:f7:81:8f:b9:03:70:89:88:1c:62:49:
42:7c:f0:91:3c:bb:7d:dd:76:f3:2b:e3:3b:bf:0d:94:f1:f7:
15:d5:74:1e:24:21:60:71:41:85:e7:13:73:32:72:d6:3c:f7:
6a:94:39:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:04 2026 by rpki-client