Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/2KoAgZVTwnbWcixjMbqnJvf6xN0.roa
File: 2KoAgZVTwnbWcixjMbqnJvf6xN0.roa (raw, json)
Hash identifier: p0gbt1YvA9hNbGitowNrqQTyinoOy92to8c/+jH2B7c=
Subject key identifier: D8:AA:00:81:95:53:C2:76:D6:72:2C:63:31:BA:A7:26:F7:FA:C4:DD
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019F084263DD79BC35C865DCBEC9D61872D6
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/2KoAgZVTwnbWcixjMbqnJvf6xN0.roa
Signing time: Sat 27 Jun 2026 08:46:36 +0000
ROA not before: Sat 27 Jun 2026 08:46:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 195.216.184.0/24 maxlen: 24
213.182.192.0/24 maxlen: 24
213.182.201.0/24 maxlen: 24
213.182.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:42:63:dd:79:bc:35:c8:65:dc:be:c9:d6:18:72:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jun 27 08:46:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8aa00819553c276d6722c6331baa726f7fac4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:33:b8:7d:2f:f5:cf:9c:39:8f:04:d9:29:
d5:bc:07:81:d9:f5:b3:4f:f6:05:75:19:82:ee:cc:
c8:0e:d4:e2:f1:ca:24:f1:fb:3e:a4:45:ff:b8:6f:
4a:8c:15:99:12:92:6f:bd:1c:d0:d5:ab:24:85:ee:
33:3c:2b:ec:08:22:24:62:0c:ba:ea:63:95:25:99:
d9:56:c3:ad:41:c1:1a:e3:9f:93:52:24:65:c3:ee:
60:dc:c8:2f:33:5e:15:fa:ed:1a:57:1d:0b:83:8a:
02:16:49:b8:7e:b9:7e:1f:36:61:4f:87:d8:b0:59:
bb:2d:24:db:f4:23:f3:d3:4b:0f:11:12:7c:cd:a6:
60:34:ef:dd:60:52:f0:b8:00:27:71:d1:8e:15:e5:
73:ee:4d:37:b8:9e:f4:96:4a:d7:59:e3:3d:c6:29:
38:da:fe:6e:b4:56:4f:df:9a:42:a0:c2:6d:91:0c:
bb:da:2c:8d:1b:23:a4:bb:56:66:29:5a:4e:d2:46:
0d:34:a7:7a:03:a5:77:34:24:1c:e1:48:5d:b9:0f:
6c:f9:90:23:90:5d:40:b9:d7:53:ec:a6:5c:14:e0:
7c:c7:ff:d8:34:12:b9:f2:06:c0:95:aa:bd:3f:cc:
be:47:8d:9e:92:2b:eb:87:f2:6b:01:89:48:55:d5:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AA:00:81:95:53:C2:76:D6:72:2C:63:31:BA:A7:26:F7:FA:C4:DD
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/2KoAgZVTwnbWcixjMbqnJvf6xN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.184.0/24
213.182.192.0/24
213.182.201.0/24
213.182.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c5:3c:8f:e2:02:57:5a:86:e8:bd:12:55:b1:f7:3f:7e:76:
85:e8:be:40:5a:20:7e:46:ea:bd:e7:16:de:94:16:49:94:91:
eb:1f:ec:04:25:c5:9a:2b:50:4e:72:ca:68:4c:d4:19:ba:30:
da:22:19:f3:a6:d2:04:6e:bb:4f:1f:87:20:dc:07:8e:8f:67:
db:ff:83:e9:fd:af:02:51:4d:c8:8a:7e:25:9c:1e:00:d0:47:
d1:a0:4e:d2:ca:4a:f1:10:24:49:a5:a7:11:22:2b:6e:75:92:
41:fa:90:b2:2a:86:f5:3c:31:e2:ce:ed:3d:65:ef:36:14:60:
b7:e0:a5:c9:27:92:b0:31:cb:1d:13:40:05:bc:74:e8:bd:d8:
4a:57:c6:6b:b5:09:2c:57:f4:61:33:23:29:ae:c8:7a:7c:63:
52:d0:b4:d2:6a:ca:6b:2f:24:5a:da:98:9a:9a:c2:61:b5:dd:
47:cf:01:32:99:a1:a4:10:25:08:7f:59:f4:bd:98:11:38:8c:
1f:bf:52:c7:10:26:75:b0:25:d8:3e:a4:dc:ef:32:1b:c0:b3:
22:f3:7e:13:03:01:33:02:78:60:8b:d4:9b:22:2d:a7:0b:eb:
47:87:84:d5:88:8d:94:94:2f:7e:4f:39:84:29:fa:33:7b:48:
b1:95:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:19 2026 by rpki-client