Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/2lNGwAAtHFC7YhY_Mp-axRGHDU8.roa
File: 2lNGwAAtHFC7YhY_Mp-axRGHDU8.roa (raw, json)
Hash identifier: ODKMj2/NSyQeIbF7eT6Nj0fLGtyoZ0RJH5O4JPORYsw=
Subject key identifier: DA:53:46:C0:00:2D:1C:50:BB:62:16:3F:32:9F:9A:C5:11:87:0D:4F
Certificate issuer: /CN=694e3b6d3c8581d0fbb01ee835fb4e8de2211a0f
Certificate serial: 019EDB1B1F0C6535A8EB8F564939411FD75E
Authority key identifier: 69:4E:3B:6D:3C:85:81:D0:FB:B0:1E:E8:35:FB:4E:8D:E2:21:1A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU47bTyFgdD7sB7oNftOjeIhGg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/2lNGwAAtHFC7YhY_Mp-axRGHDU8.roa
Signing time: Thu 18 Jun 2026 14:20:48 +0000
ROA not before: Thu 18 Jun 2026 14:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211207
IP address blocks: 2a02:ff85::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU47bTyFgdD7sB7oNftOjeIhGg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:1b:1f:0c:65:35:a8:eb:8f:56:49:39:41:1f:d7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e3b6d3c8581d0fbb01ee835fb4e8de2211a0f
Validity
Not Before: Jun 18 14:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da5346c0002d1c50bb62163f329f9ac511870d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:eb:60:48:9f:7c:ce:32:d9:74:fd:5b:60:
a3:b7:27:f2:bc:aa:ed:54:b5:68:3e:22:00:df:f8:
f0:e7:8a:97:28:16:df:31:7b:39:f6:97:a5:7d:8a:
e5:10:b0:4f:f5:aa:54:fc:23:a1:85:ea:8c:6f:ca:
f8:8a:1a:e8:e1:88:6f:16:b8:ae:a5:ea:af:bb:3f:
3e:a0:92:53:d6:15:67:94:87:44:50:b5:54:60:1c:
df:39:00:08:9e:6a:87:65:67:f1:64:66:7d:b1:12:
d9:38:1a:26:b7:40:c3:f7:66:a3:93:be:1f:dc:5e:
ce:75:9d:49:2d:37:57:63:a0:81:35:6c:b2:fc:dc:
24:83:a1:93:5a:78:01:9c:05:c3:67:d8:e5:ef:ef:
f5:7e:e8:f2:56:9c:42:b9:c3:5a:78:6b:cf:27:c1:
b1:83:a8:8d:cc:f8:70:42:88:d0:8a:14:b2:33:91:
0e:e0:07:37:af:79:37:53:0a:64:45:3f:a4:23:d5:
20:e5:2c:2f:5d:14:db:6b:40:1c:8b:de:e8:79:5a:
df:54:02:08:26:d4:57:f4:ca:55:10:bd:c2:a7:e7:
b7:71:25:1b:70:27:01:d6:80:e9:21:d8:7b:f5:4d:
60:d9:2f:5e:dc:ea:1b:a6:cf:4f:23:0a:0a:05:54:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:53:46:C0:00:2D:1C:50:BB:62:16:3F:32:9F:9A:C5:11:87:0D:4F
X509v3 Authority Key Identifier:
keyid:69:4E:3B:6D:3C:85:81:D0:FB:B0:1E:E8:35:FB:4E:8D:E2:21:1A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU47bTyFgdD7sB7oNftOjeIhGg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/2lNGwAAtHFC7YhY_Mp-axRGHDU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ff85::/32
Signature Algorithm: sha256WithRSAEncryption
48:e8:09:82:1d:7b:32:31:f5:19:1c:82:cb:24:ea:9e:3f:51:
41:0b:2e:bf:74:18:8e:ce:e6:9b:f6:9d:ca:5a:26:e7:24:aa:
eb:fc:72:7a:c4:be:92:b2:6a:33:ec:e2:1e:5d:99:26:93:06:
d5:34:22:5d:47:39:26:c3:e0:ff:91:d8:73:3a:09:36:e4:b6:
07:9e:56:99:44:04:5f:32:66:38:a5:22:d1:67:bb:28:ef:5c:
85:80:95:f1:24:0f:ea:a9:10:a8:70:f8:e8:ac:1e:bd:6e:8f:
ce:a3:4e:3a:67:af:2a:42:aa:74:db:83:a4:e4:8a:75:20:1d:
8c:60:fd:91:7c:8a:16:3d:1e:85:31:5c:31:85:17:a5:7d:d9:
ad:84:c0:bb:55:4b:a1:8f:da:43:58:a8:fc:68:21:d5:43:8c:
ef:a3:55:f0:f9:cf:0a:2b:3b:90:38:49:94:6e:9e:81:a0:a0:
19:a4:c5:2f:32:e3:21:7c:0f:20:41:a4:6c:d9:e6:3c:c3:64:
28:e3:fa:82:17:a1:f0:8f:4e:cf:37:72:34:4a:f7:3a:7e:45:
6a:cb:6a:9e:0c:41:dd:67:06:f7:de:f9:29:72:d5:b8:48:9d:
82:33:c1:c2:dc:19:7c:cd:e2:bf:60:4e:be:42:e6:0b:12:6a:
e6:75:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:07 2026 by rpki-client