Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/2LF9uim0YdDpGegCa61UauWuWfA.roa
File: 2LF9uim0YdDpGegCa61UauWuWfA.roa (raw, json)
Hash identifier: EJUG4c12axqY7VnRB7LGjwYbiGZwDBmNfyhI3v0wbAg=
Subject key identifier: D8:B1:7D:BA:29:B4:61:D0:E9:19:E8:02:6B:AD:54:6A:E5:AE:59:F0
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 019F2368382C976779295927E40A05E8EE5B
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/2LF9uim0YdDpGegCa61UauWuWfA.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21343
IP address blocks: 91.223.19.0/24 maxlen: 24
185.158.208.0/22 maxlen: 24
194.110.204.0/24 maxlen: 24
195.234.112.0/22 maxlen: 24
2a02:2278:ff00::/40 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:38:2c:97:67:79:29:59:27:e4:0a:05:e8:ee:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8b17dba29b461d0e919e8026bad546ae5ae59f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:70:2c:b7:7a:ea:63:03:c1:b3:be:47:3d:
30:3b:25:cf:8e:a5:07:57:c7:6c:ee:99:6b:19:48:
53:26:c8:e7:02:48:73:87:ad:08:dd:0e:03:bf:dc:
ed:80:c1:b7:7e:d7:e8:20:39:5c:40:30:c2:e2:2d:
36:48:50:78:2a:26:38:91:c4:84:b8:76:16:7b:82:
69:83:81:25:fc:67:60:97:71:90:d1:b6:00:f4:41:
f6:fe:ce:67:b2:80:f9:9e:e9:88:f1:46:d5:92:e4:
a3:d1:55:b8:f0:27:1a:f3:68:d2:dd:5c:d7:d5:3c:
da:8f:64:30:84:6d:a1:ed:a9:eb:52:03:07:ce:15:
dc:5f:b7:6d:dc:e7:6b:a9:cd:ea:03:1e:b9:93:e8:
5b:13:f0:f8:cf:54:ab:ec:55:04:bf:ee:00:d3:7d:
0e:aa:21:76:9e:10:5a:c5:0c:3f:20:d5:bd:45:31:
3d:4c:e7:23:10:e2:78:6b:f4:9a:8a:59:26:0e:dc:
cf:7f:db:b1:eb:25:0e:4f:48:03:aa:b6:61:20:26:
78:e4:da:86:5f:6c:f1:8b:3f:c7:a6:ad:ab:3f:da:
a5:80:16:cb:97:47:57:a7:7a:58:04:54:8f:3b:93:
22:14:d7:48:cb:4b:84:f7:5c:a8:b8:98:81:7f:93:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B1:7D:BA:29:B4:61:D0:E9:19:E8:02:6B:AD:54:6A:E5:AE:59:F0
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/2LF9uim0YdDpGegCa61UauWuWfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.19.0/24
185.158.208.0/22
194.110.204.0/24
195.234.112.0/22
IPv6:
2a02:2278:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
04:4e:c5:bb:c4:a2:3a:18:45:2b:bf:1d:d8:fd:5f:b0:0b:0a:
7a:ec:4f:bd:b8:2a:e9:e5:cf:86:e5:2b:4d:18:a5:2f:42:a2:
90:61:fe:af:25:bc:ff:95:c5:e3:85:de:28:d4:0e:9e:e0:fa:
c7:b3:b8:c1:af:97:dc:9e:a9:b7:ec:91:64:3e:29:17:72:67:
52:bd:68:f6:d4:18:f1:60:99:a6:5a:8e:bf:af:0e:22:28:e3:
cd:bb:4a:99:a1:7a:9c:51:41:cb:af:6c:44:f6:28:ac:a2:d1:
5b:2c:37:74:f9:75:32:0e:91:c7:57:fb:c9:38:89:23:90:86:
bb:f9:da:48:77:66:c4:ec:b5:85:6d:9f:4d:c3:ca:88:d8:26:
b5:0b:f1:56:05:de:1b:bb:dc:58:f6:83:ac:b4:59:ed:6a:e2:
4d:09:d3:87:f5:5a:1a:a9:1b:b4:77:8d:e3:d5:0c:10:4b:db:
51:34:3f:46:fc:98:3d:c9:1f:87:5d:be:18:a5:07:dc:10:57:
6b:92:fc:dd:ea:e8:4b:3f:8c:07:e0:ab:d3:ad:74:44:70:61:
17:14:bd:a1:8a:92:53:18:f2:62:eb:8c:a6:8d:68:77:d5:d0:
36:86:75:07:ea:ff:55:9e:3a:f4:9b:b5:43:06:be:bd:59:89:
82:37:a2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:53 2026 by rpki-client