Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2cx1kiC0m8Ntj1qli35CYijVuaE.roa
File: 2cx1kiC0m8Ntj1qli35CYijVuaE.roa (raw, json)
Hash identifier: j+Fti8a1TO+v93xAcdAfaatn73GV2xzRwG0WA7w2RzA=
Subject key identifier: D9:CC:75:92:20:B4:9B:C3:6D:8F:5A:A5:8B:7E:42:62:28:D5:B9:A1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DB5BC4BD52CA6F15F7D99030891D9F4C4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2cx1kiC0m8Ntj1qli35CYijVuaE.roa
Signing time: Wed 22 Apr 2026 15:08:29 +0000
ROA not before: Wed 22 Apr 2026 15:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213186
IP address blocks: 151.242.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:bc:4b:d5:2c:a6:f1:5f:7d:99:03:08:91:d9:f4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 22 15:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9cc759220b49bc36d8f5aa58b7e426228d5b9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:e0:0b:17:c2:53:bc:4e:c5:02:81:3f:8a:
bf:4f:6b:14:b5:d7:14:cf:6c:33:c6:1d:04:0e:2b:
e3:a0:a6:44:97:4e:10:7d:ea:77:23:ca:f7:86:f8:
b0:78:7e:24:a8:9a:e3:8d:e8:a1:79:da:7d:6d:15:
26:7c:65:80:c6:ba:cf:b9:21:4e:f2:7d:5b:77:e9:
27:53:ef:11:d7:a7:53:44:ec:b6:f1:a8:90:2e:ce:
e3:3e:da:28:28:2b:bd:22:a9:d9:13:59:88:ea:16:
7b:59:47:26:3c:e2:e5:9e:7f:68:ed:c4:ea:45:14:
a4:83:e7:fa:ec:ef:09:66:4d:81:da:05:c9:82:4d:
07:b8:0e:94:be:b4:cf:3e:2a:8b:90:27:85:a3:a7:
4b:58:df:c5:0a:fa:47:7c:2d:cc:88:21:1c:de:6b:
7e:9e:3b:90:a7:e2:98:e0:e7:ff:2e:26:ac:34:9b:
02:5d:a4:90:06:70:87:62:6c:fb:7f:00:a8:58:a7:
1e:93:27:c0:5e:2f:49:fc:51:d2:80:1e:de:18:7f:
b2:89:76:c5:7e:31:27:ed:2d:69:38:ff:a1:38:90:
57:c1:f2:c1:28:71:5c:79:ae:90:34:0b:f6:9c:32:
a4:3c:4d:00:dc:fe:3c:35:0d:d7:0b:0e:ce:9b:87:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CC:75:92:20:B4:9B:C3:6D:8F:5A:A5:8B:7E:42:62:28:D5:B9:A1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2cx1kiC0m8Ntj1qli35CYijVuaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:89:a2:a4:13:71:af:74:2c:4a:c2:5c:ef:be:d5:bd:9b:d2:
a6:a4:7d:c7:b0:7a:4e:ea:c8:48:78:66:1b:da:c6:ce:3c:d6:
31:97:cf:c9:57:4a:1b:26:26:21:a6:d2:37:d4:c5:42:c5:d9:
37:ea:09:ed:c6:a8:85:17:36:03:e1:21:f7:76:03:70:62:f7:
4b:d1:a2:98:13:cf:9a:da:63:79:5c:3a:46:28:15:3a:b8:af:
cf:79:08:09:04:2e:c4:32:79:83:0d:4b:aa:db:fc:95:77:52:
64:aa:bc:cb:86:85:f0:ac:69:06:97:ca:a8:ae:6d:42:e0:a6:
13:be:b3:8a:a1:7e:48:5e:07:1f:60:8a:49:65:6c:45:3b:b0:
ad:01:b7:6a:0c:5a:c8:e7:81:11:a4:eb:b5:f4:b8:bc:ca:a3:
94:03:14:d4:30:1f:79:14:b7:66:6a:c2:b0:07:46:dc:02:f6:
59:cb:db:00:0b:d5:2d:f8:63:2a:5c:16:6f:9b:32:9b:a3:8d:
72:33:9e:49:3c:e0:ed:df:93:13:cc:d4:00:f0:0d:ee:77:bf:
63:3a:92:cd:23:43:f1:de:4b:8e:f2:d0:e6:16:6a:6d:45:12:
64:d3:bc:92:57:fa:f1:96:25:1c:23:48:d0:84:27:4a:2a:e8:
0d:da:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:25 2026 by rpki-client