Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/2XSKC5_2aJdXis0i0E32cdzCcnE.roa
File: 2XSKC5_2aJdXis0i0E32cdzCcnE.roa (raw, json)
Hash identifier: WPJFZgYN6ewzMbdHq7cQDqzD7p7iGCXVy5MenFdGn80=
Subject key identifier: D9:74:8A:0B:9F:F6:68:97:57:8A:CD:22:D0:4D:F6:71:DC:C2:72:71
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 019F23683DABD0E2B33127FCFD7E448A1EE0
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/2XSKC5_2aJdXis0i0E32cdzCcnE.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47308
IP address blocks: 195.238.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3d:ab:d0:e2:b3:31:27:fc:fd:7e:44:8a:1e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9748a0b9ff66897578acd22d04df671dcc27271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:e2:d7:72:4c:8e:d3:26:00:ba:27:ff:e3:
6a:c4:28:91:6b:0d:f2:7e:f6:da:73:c6:c5:8a:16:
2e:55:f2:ce:3c:e1:a3:9b:21:2a:06:69:20:14:d5:
21:95:ef:5d:71:7f:91:e0:4c:8b:3a:f1:42:98:43:
dd:f6:7b:d7:f2:6a:fa:40:38:7f:c4:46:86:34:0a:
40:b8:5f:19:39:55:4a:f7:6e:92:e6:52:25:d3:a3:
80:f1:9a:8c:d6:c9:19:c7:5b:dd:6c:8f:66:c4:b9:
c2:15:f1:0f:44:ba:e9:e6:aa:46:b4:1d:57:f7:7c:
9f:a4:df:a4:db:32:ef:c1:59:74:99:40:10:35:e0:
64:6a:0e:4f:a9:6e:06:24:11:7a:5f:26:80:f3:04:
14:2b:21:85:ae:26:bd:6a:e1:ed:3b:dd:ae:43:56:
f2:08:71:18:dd:f8:7c:a3:8e:66:34:34:63:99:74:
65:a8:d1:aa:b7:0b:a8:65:41:49:70:1b:11:3b:0b:
73:51:d9:32:62:20:f4:86:e2:7d:76:e8:95:3e:50:
ed:fa:d0:f7:bb:ac:20:09:af:cb:58:bb:f3:70:25:
fc:c9:79:6c:b7:50:ff:33:f9:67:88:c0:c3:a2:5f:
6c:7d:5e:31:7f:fc:89:db:7b:cf:6a:02:65:1e:7d:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:8A:0B:9F:F6:68:97:57:8A:CD:22:D0:4D:F6:71:DC:C2:72:71
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/2XSKC5_2aJdXis0i0E32cdzCcnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.247.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:fe:46:1e:40:fb:c4:bf:00:8c:15:94:0b:e3:17:de:f6:df:
fe:bc:2b:2f:b3:dd:88:24:00:57:be:89:c4:11:97:d5:26:29:
93:27:91:9f:47:0f:e1:61:7e:17:94:b5:a2:a1:0f:1f:e9:54:
e6:fa:7a:9b:43:62:c8:a2:7e:5f:61:df:ba:c5:22:f0:b4:8f:
de:86:35:e4:23:98:9f:b2:a5:c9:52:47:50:8a:37:1a:67:ca:
5b:b2:d7:83:1a:cc:1b:b7:68:dd:9f:0d:c1:de:f1:15:c3:69:
54:aa:d5:bf:2f:12:bc:b8:6f:eb:b2:92:1e:c6:fa:f9:42:87:
28:33:d6:4f:78:8b:24:9c:1d:2b:44:b8:ef:f0:c8:15:c1:06:
b3:06:f5:77:80:37:b4:92:5e:fa:42:dc:9a:4c:98:ed:1f:74:
eb:bb:7e:66:f8:ae:07:47:d9:75:2e:ed:61:0b:f3:9e:cf:fc:
1f:af:3c:86:f2:da:b5:d1:01:9c:ec:0a:05:02:f0:cf:60:6d:
52:97:29:b8:28:ee:1b:d5:7c:8d:2b:b4:5b:db:ee:a1:08:93:
a2:55:c6:00:10:f3:4c:fe:ac:ce:53:c8:17:c5:69:d8:44:05:
ca:7e:64:d3:29:95:b5:a1:ac:ea:da:d5:dd:f1:06:1d:52:de:
49:49:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:26 2026 by rpki-client