Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/2vRYzpUyqwpbHO24NS6UN1Fcnxw.roa
File: 2vRYzpUyqwpbHO24NS6UN1Fcnxw.roa (raw, json)
Hash identifier: Xrcl/zsxr2D25T79fukjqwy5A2prTB0sVfEcK7SEg5o=
Subject key identifier: DA:F4:58:CE:95:32:AB:0A:5B:1C:ED:B8:35:2E:94:37:51:5C:9F:1C
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019C42434F3F17A43BE09B2CAA95AD737A27
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/2vRYzpUyqwpbHO24NS6UN1Fcnxw.roa
Signing time: Mon 09 Feb 2026 11:57:13 +0000
ROA not before: Mon 09 Feb 2026 11:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201810
IP address blocks: 185.124.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:43:4f:3f:17:a4:3b:e0:9b:2c:aa:95:ad:73:7a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 9 11:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daf458ce9532ab0a5b1cedb8352e9437515c9f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:b1:62:55:6e:1b:4a:43:da:df:c6:5e:46:
5b:bd:05:cb:f7:2b:87:24:52:13:55:b9:05:9a:0d:
01:6a:61:86:04:f8:39:fc:57:a3:e6:66:5d:80:64:
19:d2:f9:eb:9b:6e:cd:78:30:1a:04:0b:82:d6:fc:
d6:37:5c:b6:6b:07:3c:28:0a:39:e3:1a:2d:9c:d5:
a4:3f:e9:ee:ee:13:a0:e0:eb:ac:d2:92:a8:9c:9f:
eb:75:04:0c:60:b2:5f:44:82:da:2b:a5:13:32:50:
81:aa:23:2d:e7:f3:13:6d:8c:a0:31:6a:ac:de:3a:
d6:cc:55:3a:68:b4:69:b4:3b:72:1d:bc:19:0e:5f:
9f:be:58:76:f1:76:45:00:09:f8:a2:28:05:ef:88:
66:77:a9:e6:24:0f:3b:68:cd:69:82:02:d9:c3:5c:
85:13:d2:b9:86:21:f8:09:a1:21:7b:ca:c3:fa:9b:
82:79:43:65:69:47:ad:50:10:76:9b:58:e6:c1:08:
9b:1f:74:42:3c:de:d8:03:dd:6e:61:1e:67:af:5b:
3d:e5:9a:90:c2:01:70:0a:48:b8:a5:16:7c:ac:ca:
68:3b:c0:29:22:13:29:28:cd:22:35:40:72:13:fc:
00:3a:10:80:bf:3a:76:5e:a4:88:72:dd:43:aa:1c:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F4:58:CE:95:32:AB:0A:5B:1C:ED:B8:35:2E:94:37:51:5C:9F:1C
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/2vRYzpUyqwpbHO24NS6UN1Fcnxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.174.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:87:78:fb:b5:79:06:b6:f8:fd:8b:12:68:a1:4c:3a:6f:51:
87:66:91:ec:af:a9:5f:1f:0b:77:05:1f:17:af:3e:32:b3:f6:
64:f1:b5:78:b2:d6:02:7d:8a:ed:06:5c:b1:28:2e:79:5c:47:
f3:5c:5f:94:0c:47:03:d1:38:96:c8:75:2e:2c:ae:db:f3:2d:
b5:2d:3d:54:a7:9e:78:e2:96:52:0f:f2:39:b4:44:12:7f:5e:
b1:11:cc:c3:f0:c2:35:0f:29:16:69:85:5b:ce:c3:2a:78:a1:
76:a6:b4:db:cc:28:a6:db:56:e7:aa:b9:a5:b8:1e:07:48:5a:
bb:c9:8d:8d:f2:88:6a:73:99:bc:5f:8d:ee:44:f4:57:a7:a6:
b4:f6:53:81:d9:ad:3f:d6:0e:61:2a:53:63:bc:49:26:ce:64:
95:e1:84:12:5e:5b:94:fb:ec:30:2a:d4:74:3b:e2:0b:f7:0f:
51:3f:2e:a8:67:64:a3:9b:e7:45:98:04:68:55:40:b2:00:25:
02:41:91:98:26:ff:7f:ad:a9:c8:99:aa:21:e8:4a:a8:27:91:
09:6d:c0:13:ec:55:5d:ff:bd:31:62:40:2e:5f:99:9b:f1:b0:
6a:04:b2:e9:97:28:13:f9:2a:62:65:c2:cf:3e:68:32:25:8e:
fc:f7:95:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxCQ08/F6Q74JssqpWtc3onMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYwMjA5MTE1NzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWY0NThjZTk1MzJhYjBhNWIxY2VkYjgzNTJlOTQzNzUxNWM5ZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEuxYlVuG0pD2t/GXkZbvQXL9yuH
JFITVbkFmg0BamGGBPg5/Fej5mZdgGQZ0vnrm27NeDAaBAuC1vzWN1y2awc8KAo5
4xotnNWkP+nu7hOg4Ous0pKonJ/rdQQMYLJfRILaK6UTMlCBqiMt5/MTbYygMWqs
3jrWzFU6aLRptDtyHbwZDl+fvlh28XZFAAn4oigF74hmd6nmJA87aM1pggLZw1yF
E9K5hiH4CaEhe8rD+puCeUNlaUetUBB2m1jmwQibH3RCPN7YA91uYR5nr1s95ZqQ
wgFwCki4pRZ8rMpoO8ApIhMpKM0iNUByE/wAOhCAvzp2XqSIct1DqhyAuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNr0WM6VMqsKWxztuDUulDdRXJ8cMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvMnZSWXpwVXlxd3BiSE8yNE5TNlVOMUZjbnh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXyuMA0G
CSqGSIb3DQEBCwUAA4IBAQDPh3j7tXkGtvj9ixJooUw6b1GHZpHsr6lfHwt3BR8X
rz4ys/Zk8bV4stYCfYrtBlyxKC55XEfzXF+UDEcD0TiWyHUuLK7b8y21LT1Up554
4pZSD/I5tEQSf16xEczD8MI1DykWaYVbzsMqeKF2prTbzCim21bnqrmluB4HSFq7
yY2N8ohqc5m8X43uRPRXp6a09lOB2a0/1g5hKlNjvEkmzmSV4YQSXluU++wwKtR0
O+IL9w9RPy6oZ2Sjm+dFmARoVUCyACUCQZGYJv9/ranImaoh6EqoJ5EJbcAT7FVd
/70xYkAuX5mb8bBqBLLplygT+SpiZcLPPmgyJY7895Vq
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:55:08 2026 by rpki-client