Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/2rKgFCA24RfmvmYnfyf-htKhPU4.roa
File: 2rKgFCA24RfmvmYnfyf-htKhPU4.roa (raw, json)
Hash identifier: tCm3fFMU2QGfYRwln/nF50skwuboIoBvE1SaHlNbkLE=
Subject key identifier: DA:B2:A0:14:20:36:E1:17:E6:BE:66:27:7F:27:FE:86:D2:A1:3D:4E
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01998030EAE707DAACC9392B19C42DD92B1A
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/2rKgFCA24RfmvmYnfyf-htKhPU4.roa
Signing time: Thu 25 Sep 2025 09:25:13 +0000
ROA not before: Thu 25 Sep 2025 09:25:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205536
IP address blocks: 94.184.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:80:30:ea:e7:07:da:ac:c9:39:2b:19:c4:2d:d9:2b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 25 09:25:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dab2a0142036e117e6be66277f27fe86d2a13d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:25:89:2f:d6:e6:ab:42:94:0c:33:b2:b1:
f1:8b:ff:78:91:e5:c5:11:29:ac:a2:fa:e0:a3:ee:
d2:99:6a:a3:a1:0e:85:f3:67:b7:9c:d3:81:03:f1:
57:a5:2a:4b:c3:79:1d:81:c9:2d:ce:f6:20:74:6b:
c0:c7:f2:2e:53:c9:a8:be:9d:20:50:c3:6f:e8:7d:
f4:5b:0a:8b:8b:e6:93:f0:f2:3d:e4:4d:84:35:dd:
84:79:8c:c8:44:ba:0d:cb:a3:1e:f8:d8:4d:09:f0:
51:14:6c:4b:7a:b8:c2:45:fd:56:4b:80:fe:01:3b:
50:60:ab:5d:4d:9f:e2:2e:d7:cc:b7:43:9a:72:82:
01:35:6e:5d:53:90:b7:48:3b:c5:7e:79:99:c7:79:
2e:11:3b:e9:af:b7:c9:93:0f:76:5d:20:36:6d:c9:
85:05:2e:ff:50:c6:9b:bc:e4:64:67:02:90:30:9d:
24:b5:c8:fd:77:a5:59:ff:2c:0c:fc:8a:d2:92:f4:
7d:cf:cb:23:91:8a:a8:55:62:80:fb:9e:12:eb:99:
ba:c1:c0:f6:7b:19:74:dd:35:83:12:fe:ee:26:46:
34:db:08:06:fc:36:f2:53:89:7d:a6:81:c2:45:20:
f4:f5:2d:f1:7d:48:3f:be:f5:0e:3d:96:19:27:da:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B2:A0:14:20:36:E1:17:E6:BE:66:27:7F:27:FE:86:D2:A1:3D:4E
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/2rKgFCA24RfmvmYnfyf-htKhPU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:5e:23:6d:46:0d:6b:75:3b:5b:53:46:83:a9:e6:38:0b:cb:
16:b6:23:cc:92:f0:7a:84:64:1f:63:b8:9f:76:3d:73:90:0c:
85:b5:8c:6e:1a:de:67:e2:2a:c9:e3:39:2b:c0:dc:25:df:01:
60:3c:0c:e7:b3:a7:ef:e1:0d:f7:07:c0:b8:89:95:9b:38:ee:
6a:b5:ff:a3:56:45:d2:cb:21:7a:5e:17:c4:f3:84:6d:43:b4:
4e:82:6e:65:bc:1f:71:70:44:cb:5f:5a:97:d1:15:1f:13:c8:
38:e4:fa:d3:3c:ae:13:ee:39:a6:6f:46:04:a4:60:df:66:76:
69:8f:95:81:55:91:71:4f:72:a6:07:53:31:c5:41:f8:3d:f9:
eb:4c:53:62:99:2e:b7:f4:af:7d:ea:8b:16:a6:eb:f6:60:de:
34:de:45:b1:e2:10:0f:58:61:f7:8c:a4:d5:78:a6:e2:e1:9e:
c5:61:fa:fb:70:7c:87:d6:62:e9:b6:e8:f4:c0:e2:65:dc:39:
99:7e:91:7e:e0:19:68:88:f8:8b:64:65:4c:86:66:67:e1:b2:
04:df:f7:9c:75:e1:7d:42:e2:13:00:ab:cb:9c:37:23:3d:3e:
5b:92:ba:2a:10:31:17:d4:f4:fd:03:19:57:10:03:d9:3a:a0:
27:c5:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:11:02 2025 by rpki-client