Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/2QJlNqejeO95FQ8p2esL1ZII6dk.roa
File: 2QJlNqejeO95FQ8p2esL1ZII6dk.roa (raw, json)
Hash identifier: Kke3EbmaVtee0KytWcvPRvyGZmTbAP6OWgdRpSMJlGg=
Subject key identifier: D9:02:65:36:A7:A3:78:EF:79:15:0F:29:D9:EB:0B:D5:92:08:E9:D9
Certificate issuer: /CN=533fe95a0d5fd96a1696f79a6121308b981fdd58
Certificate serial: 019F23695A80CD64F1D99B48B5834256588D
Authority key identifier: 53:3F:E9:5A:0D:5F:D9:6A:16:96:F7:9A:61:21:30:8B:98:1F:DD:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/2QJlNqejeO95FQ8p2esL1ZII6dk.roa
Signing time: Thu 02 Jul 2026 15:18:54 +0000
ROA not before: Thu 02 Jul 2026 15:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207017
IP address blocks: 185.168.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:5a:80:cd:64:f1:d9:9b:48:b5:83:42:56:58:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533fe95a0d5fd96a1696f79a6121308b981fdd58
Validity
Not Before: Jul 2 15:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9026536a7a378ef79150f29d9eb0bd59208e9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:d9:90:67:dd:5b:0e:ff:43:6b:91:63:37:
b0:48:73:04:c9:35:34:6d:07:3c:13:7b:8f:d9:f5:
2a:d3:5a:ca:7d:0f:9e:78:99:22:bf:2e:66:20:5d:
d7:ce:14:09:23:bb:b2:b1:2c:e3:f2:99:43:7d:66:
53:0c:c1:b7:b4:31:4d:34:d2:99:3d:12:ac:20:f1:
9d:5d:4b:bc:e7:2c:f1:ee:17:6e:61:0d:47:99:ac:
ac:76:90:58:80:07:89:cf:dd:f5:b2:f0:5d:fb:05:
10:f6:36:16:e0:fc:4b:ed:10:02:a2:eb:03:d5:0c:
d8:d4:65:8c:4b:6e:4e:d3:bb:ef:15:bf:65:e5:d3:
83:1f:ff:33:89:f7:ae:3d:a3:67:17:31:62:b1:eb:
38:b8:5d:18:0f:c7:12:3a:83:55:33:bd:bd:af:63:
7c:4e:8c:92:5c:67:07:01:ff:5b:9b:04:a8:e5:07:
05:4a:aa:e2:be:15:63:a9:98:1b:68:8e:81:6b:af:
fc:27:6c:6b:be:b5:2e:ff:aa:d2:0d:2e:fe:10:dd:
fe:3f:74:5c:fe:44:19:63:1b:16:f4:20:44:f7:26:
cf:f7:54:c1:1c:be:d7:cc:7a:ec:53:ca:a9:49:69:
a4:45:04:c6:83:0a:98:e0:b6:5a:28:dd:f6:5e:b2:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:65:36:A7:A3:78:EF:79:15:0F:29:D9:EB:0B:D5:92:08:E9:D9
X509v3 Authority Key Identifier:
keyid:53:3F:E9:5A:0D:5F:D9:6A:16:96:F7:9A:61:21:30:8B:98:1F:DD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/2QJlNqejeO95FQ8p2esL1ZII6dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.196.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:a3:e8:ec:58:c9:f2:39:ab:14:72:7c:b7:ab:72:fd:72:bf:
b4:56:b4:c8:47:4a:16:69:82:8d:ae:f5:39:62:cc:1a:34:42:
8f:17:86:f8:a6:3d:76:39:3a:7e:8d:8b:06:0e:c7:7a:b0:a4:
1f:e2:b0:5f:8e:d6:11:6b:99:08:b9:71:af:c3:2e:51:d5:17:
f4:a1:d5:54:22:86:59:f4:e4:45:51:30:1b:79:27:64:99:a0:
ba:09:d3:c7:69:e2:ce:a1:c2:c2:16:69:ad:d8:98:89:c9:75:
96:01:84:39:26:40:18:87:7f:84:8e:0a:6a:00:cc:68:9a:98:
ee:49:74:c8:ce:56:e4:93:ab:b0:84:5c:ae:a1:3b:d0:c6:dd:
3e:99:6b:d1:98:56:01:2f:e8:ba:85:7e:7d:fb:f0:2b:a7:a2:
d0:e1:3f:4f:a2:95:eb:c3:34:64:b1:97:00:29:67:bd:9c:3c:
5e:74:fd:87:66:a9:4a:58:95:f8:e0:c6:b4:86:6e:ca:7c:a4:
9d:e1:ca:98:14:c0:06:01:6f:a5:a4:ae:cb:6e:93:c8:99:85:
80:71:8a:39:f1:7d:0b:f1:b7:2a:f9:31:75:75:2a:bc:ab:c2:
d9:bd:d7:f9:c2:c5:3e:87:a6:10:6d:cc:dd:92:0a:db:8d:bf:
c2:99:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:44 2026 by rpki-client