Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/2Mi7xSwXWORT-cP1uI-5ipGqq4s.roa
File: 2Mi7xSwXWORT-cP1uI-5ipGqq4s.roa (raw, json)
Hash identifier: tSv3E+ZA/wZe9XbU1lskSKrjg17Dn+XBQfh3/xFVJUg=
Subject key identifier: D8:C8:BB:C5:2C:17:58:E4:53:F9:C3:F5:B8:8F:B9:8A:91:AA:AB:8B
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019F46EA8AABFA3C9EF8EC4471D13E8162DE
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/2Mi7xSwXWORT-cP1uI-5ipGqq4s.roa
Signing time: Thu 09 Jul 2026 12:46:43 +0000
ROA not before: Thu 09 Jul 2026 12:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209845
IP address blocks: 167.150.81.0/24 maxlen: 24
2001:67c:1520::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:ea:8a:ab:fa:3c:9e:f8:ec:44:71:d1:3e:81:62:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Jul 9 12:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8c8bbc52c1758e453f9c3f5b88fb98a91aaab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:8c:87:c0:5f:b1:ca:84:14:36:03:5c:20:
e2:cb:bb:54:10:7d:25:f0:d9:de:aa:e6:6f:7c:1c:
a8:5e:95:e7:6b:19:a2:89:40:23:e3:63:28:5e:76:
6c:3c:84:01:7c:77:74:36:f8:4e:ca:7d:66:00:3d:
cb:cf:7d:0c:89:ad:b0:a0:21:8f:ae:cd:df:69:1b:
2b:49:cd:90:11:ab:c3:a4:3d:23:36:3a:7e:72:57:
83:9f:61:98:3b:ab:14:02:81:64:22:18:5b:d7:23:
b9:d8:64:44:19:a8:f8:c0:43:51:9f:70:06:b8:56:
76:4c:e2:8c:56:ea:48:df:f9:db:2c:59:ba:19:e3:
da:a5:38:c9:b2:88:ef:2b:64:92:5a:7c:69:69:87:
e8:97:f5:c8:53:a9:df:fb:a8:c8:e5:08:61:ab:7c:
39:52:04:a4:81:61:bd:66:d1:2d:d0:be:c2:c9:ec:
2c:39:25:ef:09:f6:c3:f7:16:b1:2f:48:8f:dc:eb:
d3:ad:d8:82:5d:82:92:43:04:e9:91:3e:3f:d1:2a:
7b:2f:4f:31:74:9c:57:fd:72:89:0e:84:25:ee:7d:
a9:d9:c4:6c:8b:4c:4b:39:a6:28:3d:93:c6:58:34:
f6:87:88:4f:cb:c9:34:64:d6:7e:a1:f9:6c:15:72:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:BB:C5:2C:17:58:E4:53:F9:C3:F5:B8:8F:B9:8A:91:AA:AB:8B
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/2Mi7xSwXWORT-cP1uI-5ipGqq4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.150.81.0/24
IPv6:
2001:67c:1520::/48
Signature Algorithm: sha256WithRSAEncryption
22:1d:91:d3:f4:6e:2c:c6:ad:52:59:34:72:63:0a:59:86:64:
69:d0:76:5c:2a:77:ac:d3:1d:fb:8f:59:52:aa:58:fa:53:1e:
07:15:d5:26:7b:09:0d:f9:14:59:81:32:82:1e:56:a1:3e:68:
a3:b6:66:21:3b:c5:43:04:0f:47:59:3e:6a:6d:af:89:2a:ae:
34:af:30:61:45:c5:67:34:bc:f8:f9:32:72:66:bb:1c:21:49:
c2:eb:7a:59:0d:d8:67:f5:d8:b2:8a:37:75:76:e8:6a:94:89:
03:d5:09:8f:f5:ef:66:d8:09:25:64:ab:b4:e8:35:9b:d5:bb:
17:c2:bb:7d:c9:31:e0:a7:45:cc:c1:da:f7:0d:c3:ad:b8:71:
86:85:89:e0:00:b1:55:79:d3:32:84:77:dc:bc:7f:4c:c8:60:
c5:4d:e7:75:02:b5:a3:cf:2a:13:7b:d4:81:15:ea:30:a8:d4:
50:ca:9d:82:36:04:ce:01:0d:de:b0:15:bd:e4:a0:70:09:72:
e4:2f:60:91:ff:b4:6f:e1:98:4c:9f:98:8c:f3:e5:f2:90:69:
3c:c9:5a:0c:57:58:0c:a1:3c:0b:99:5a:99:21:7c:8f:18:e0:
c6:4c:d0:f5:08:52:ae:cc:4e:c7:e6:2d:ad:0e:64:33:77:06:
cf:74:2a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:53 2026 by rpki-client