Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/b80T5aKo89J4YEAP6bAiheKe6EY.roa
File: b80T5aKo89J4YEAP6bAiheKe6EY.roa (raw, json)
Hash identifier: CLeP0I5fgLyLMgId9gEX6E6rFzYBTw+ow8e/05qzkMY=
Subject key identifier: 6F:CD:13:E5:A2:A8:F3:D2:78:60:40:0F:E9:B0:22:85:E2:9E:E8:46
Certificate issuer: /CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Certificate serial: 019F2368665D9855B1E67547FDACA74390AD
Authority key identifier: 27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/b80T5aKo89J4YEAP6bAiheKe6EY.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50757
IP address blocks: 2.110.21.0/24 maxlen: 24
185.90.52.0/22 maxlen: 24
212.70.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:66:5d:98:55:b1:e6:75:47:fd:ac:a7:43:90:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fcd13e5a2a8f3d27860400fe9b02285e29ee846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:ae:3d:a5:8f:1d:6a:8e:1f:f5:27:86:95:
3d:c2:f2:db:91:e9:fa:6d:8e:ff:24:32:25:5c:68:
2c:10:c9:41:00:e9:14:b8:a9:04:dc:ed:a8:78:10:
41:69:c6:24:fb:92:81:3d:64:8e:1e:55:6c:7f:c8:
2d:43:75:13:23:a7:a0:1e:e5:df:e0:54:14:2b:77:
2a:44:a6:79:08:ed:71:e6:b6:87:00:2d:59:49:3c:
ab:01:b5:9c:35:a8:45:6d:cd:34:70:19:d4:99:46:
0d:82:12:7c:5e:5e:8e:9b:43:51:f1:77:2c:b1:d5:
9a:5c:1c:57:5c:17:b4:12:39:df:f3:02:64:8f:fc:
61:30:66:8b:04:b2:0e:a5:54:9c:a8:f5:60:31:ea:
bb:ce:66:4f:b7:69:d9:ed:8d:e9:79:a2:3c:1c:d9:
c2:6d:91:56:46:14:27:33:92:fe:04:8c:38:37:88:
60:97:6c:09:da:78:75:f5:12:57:90:4e:3a:ad:d8:
f3:bf:8e:87:42:29:59:41:2d:0a:1f:c2:75:21:6c:
2b:7c:29:93:be:10:7e:4f:f3:7a:7c:ba:22:ec:d0:
bd:d1:a7:03:0f:61:2c:69:7f:01:1c:e8:af:4a:1f:
d7:0c:2e:ca:2d:12:74:1d:62:61:e3:69:65:b3:52:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CD:13:E5:A2:A8:F3:D2:78:60:40:0F:E9:B0:22:85:E2:9E:E8:46
X509v3 Authority Key Identifier:
keyid:27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/b80T5aKo89J4YEAP6bAiheKe6EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.110.21.0/24
185.90.52.0/22
212.70.2.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ce:69:03:e0:8d:90:03:2f:e4:5b:99:c9:5b:af:a6:24:0c:
7d:75:6f:37:3c:ad:0c:b2:df:14:9f:c6:a7:b2:cb:04:7c:ff:
26:c7:fe:7c:60:ad:d3:b0:69:64:4b:f3:0b:d5:54:3f:9f:e2:
f7:50:6f:19:e5:68:32:ec:49:06:38:e6:ce:69:7e:7d:32:73:
b9:54:18:32:80:84:fb:23:7f:07:bc:b0:85:61:8b:fa:23:e1:
bf:32:e9:be:fa:1c:71:e1:5d:52:63:e6:ea:5d:3b:3e:ce:0a:
93:50:79:0b:af:13:00:93:dc:af:fd:c8:b9:3f:a7:57:8b:c5:
74:cb:1f:a5:9d:07:28:8a:c2:6b:0e:67:67:34:fe:c3:06:6c:
62:fa:0d:b2:ec:95:2b:d9:f8:cc:34:72:1c:29:30:19:86:63:
88:5e:f0:5f:e0:c2:4c:87:53:9e:6a:7e:cf:e4:6b:18:84:09:
09:fd:b2:d3:4c:16:e1:4c:c9:62:e4:d9:54:a8:ad:62:3f:b1:
ae:fd:7e:55:92:fb:25:bd:50:cb:c2:81:2f:c4:f1:80:1f:28:
30:c4:9e:72:b9:06:4b:6c:1f:75:3b:2a:c7:86:a8:8b:d8:ea:
98:2c:ea:0a:03:fa:0d:af:c2:99:03:a4:77:54:d4:1d:b6:b5:
a4:ce:be:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:35:08 2026 by rpki-client