Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/r0qZ8D2aTVCBnUaFMEdO5JjY_WE.roa
File: r0qZ8D2aTVCBnUaFMEdO5JjY_WE.roa (raw, json)
Hash identifier: vpPL8rRx0AJAgJ6HwLPSPxj+S6uKrcpsWXCyy/Hr0EY=
Subject key identifier: AF:4A:99:F0:3D:9A:4D:50:81:9D:46:85:30:47:4E:E4:98:D8:FD:61
Certificate issuer: /CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Certificate serial: 019F2368638BBDB87FB17994525101F47B78
Authority key identifier: 27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/r0qZ8D2aTVCBnUaFMEdO5JjY_WE.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3292
IP address blocks: 2.110.0.0/20 maxlen: 20
2.110.16.0/22 maxlen: 22
2.110.32.0/20 maxlen: 20
91.199.190.0/24 maxlen: 24
185.158.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:63:8b:bd:b8:7f:b1:79:94:52:51:01:f4:7b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af4a99f03d9a4d50819d468530474ee498d8fd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:ae:44:2e:89:d0:71:c3:d7:17:54:0d:9e:
ab:ef:11:eb:b9:47:e6:68:d2:2c:76:ca:b7:07:df:
b7:95:52:01:5a:80:eb:53:b4:b8:69:65:98:97:78:
db:5a:56:00:18:3e:ad:46:52:45:9d:75:74:b4:5b:
9a:f7:03:4d:79:45:a0:a2:4a:0c:8d:93:8a:2d:73:
e9:19:39:73:f1:0e:9b:d3:6c:7c:9e:39:4f:08:9c:
61:eb:2b:33:64:17:d3:e7:f3:35:91:bb:26:83:ca:
b4:0d:6b:38:a9:a7:fd:f0:58:0a:c9:0b:74:cb:84:
62:ca:ae:14:2b:3a:46:5a:24:f8:73:b0:b4:d0:86:
36:f4:e2:6b:8c:f8:4b:78:c5:2e:54:53:23:e9:51:
7f:7d:64:df:03:3e:5a:d0:fa:d1:31:32:86:35:3b:
d9:bc:4f:a6:dd:e2:b8:16:d0:ed:27:67:0c:55:b4:
ee:59:b1:bf:99:18:ab:dc:8c:9e:52:5e:2a:77:8a:
0d:21:f3:5c:fb:94:25:a4:de:d3:59:da:38:c5:81:
7a:11:3b:c0:1c:4f:ba:55:64:72:cb:23:42:6f:ab:
31:0b:10:85:c5:e1:f3:d8:dd:82:c0:72:b1:b9:e5:
6f:b1:2b:3c:ba:1f:04:b4:87:19:ad:61:30:84:70:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4A:99:F0:3D:9A:4D:50:81:9D:46:85:30:47:4E:E4:98:D8:FD:61
X509v3 Authority Key Identifier:
keyid:27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/r0qZ8D2aTVCBnUaFMEdO5JjY_WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.110.0.0-2.110.19.255
2.110.32.0/20
91.199.190.0/24
185.158.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:37:0a:ce:6b:05:bc:b0:cb:03:a7:f8:ef:ee:64:fd:1b:e0:
d8:29:0e:c5:32:9c:73:c6:ef:0c:e9:36:06:71:5e:9c:fa:d2:
9b:f3:3c:53:da:32:89:8e:2e:c0:66:81:e7:94:a2:f5:cf:8a:
c9:81:fe:39:ce:c3:61:d8:a0:bf:4a:d5:28:85:1a:e8:46:2b:
b8:81:66:c0:95:aa:ca:40:90:fd:2c:d9:9a:65:bb:23:2b:7c:
53:ab:30:8b:04:93:3c:e7:a2:38:da:c4:f3:1d:54:77:80:fd:
63:48:5c:d6:96:88:2d:28:a7:55:f5:ca:d7:8b:1d:6f:c6:99:
17:59:3f:05:1f:8b:14:51:55:29:59:09:d9:be:d6:9b:a3:28:
15:2e:9d:33:10:6a:c2:17:58:b4:55:04:35:ad:c6:cf:6f:ee:
48:9e:9f:30:89:a6:0a:38:9e:f6:3c:b2:fe:72:69:c4:8a:b9:
17:68:f0:f3:8b:72:74:73:40:9a:a7:a8:cb:5c:f6:19:a0:86:
95:c4:0e:1f:f2:57:1e:9c:76:57:18:99:ee:17:22:11:15:1a:
ea:5b:08:41:13:3a:e1:84:9b:92:21:95:22:fd:5b:cb:86:b5:
29:25:e1:bf:b3:12:71:1f:0f:4c:81:d3:00:9b:6f:34:ed:29:
4a:3e:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:15 2026 by rpki-client