Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/2GKmq9a4tbRnyy5v_dzbijUGgpo.roa
File: 2GKmq9a4tbRnyy5v_dzbijUGgpo.roa (raw, json)
Hash identifier: 5lV0Dnj2JREu67qpiN4zC8MeQVoN3LVpjCKJ+YsJ3TU=
Subject key identifier: D8:62:A6:AB:D6:B8:B5:B4:67:CB:2E:6F:FD:DC:DB:8A:35:06:82:9A
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 019EFEF34539BFBDA41EFC24E1C04EE7F807
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/2GKmq9a4tbRnyy5v_dzbijUGgpo.roa
Signing time: Thu 25 Jun 2026 13:23:36 +0000
ROA not before: Thu 25 Jun 2026 13:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51713
IP address blocks: 65.98.29.0/24 maxlen: 24
65.98.127.0/24 maxlen: 24
69.72.248.0/24 maxlen: 24
77.95.113.0/24 maxlen: 24
93.113.110.0/23 maxlen: 23
93.114.86.0/23 maxlen: 23
93.114.184.0/23 maxlen: 23
93.114.234.0/23 maxlen: 23
176.56.56.0/21 maxlen: 21
185.17.180.0/22 maxlen: 22
185.65.40.0/22 maxlen: 22
185.164.196.0/22 maxlen: 22
188.212.34.0/23 maxlen: 23
192.250.224.0/24 maxlen: 24
192.250.234.0/24 maxlen: 24
192.250.239.0/24 maxlen: 24
195.250.23.0/24 maxlen: 24
198.38.80.0/24 maxlen: 24
198.38.82.0/24 maxlen: 24
198.38.92.0/24 maxlen: 24
209.42.16.0/24 maxlen: 24
209.42.17.0/24 maxlen: 24
209.42.18.0/24 maxlen: 24
209.42.19.0/24 maxlen: 24
209.42.20.0/24 maxlen: 24
209.42.21.0/24 maxlen: 24
209.42.22.0/24 maxlen: 24
209.42.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:f3:45:39:bf:bd:a4:1e:fc:24:e1:c0:4e:e7:f8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jun 25 13:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d862a6abd6b8b5b467cb2e6ffddcdb8a3506829a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:2e:08:b1:fe:22:d3:ff:5c:15:b7:79:ff:
3e:e3:dd:ed:b3:e2:e4:cc:5b:87:06:d3:e0:70:b3:
e5:8a:61:42:f0:c3:d5:6e:42:71:45:54:05:65:65:
5f:42:49:c7:df:77:b9:cb:44:4d:c3:8f:44:c2:c7:
80:ab:7e:77:fe:d0:ef:2c:c7:3e:77:58:91:32:24:
ee:07:13:e2:0c:ea:66:e8:aa:12:c6:55:a0:65:c4:
b8:9b:76:77:70:c7:28:e1:30:db:93:09:b0:8b:d1:
bd:da:9e:3c:27:c3:26:90:c9:ac:77:fb:6f:a8:69:
96:21:7b:f8:a7:6b:df:22:07:a8:fa:8c:bd:55:a2:
e4:85:1e:5d:38:3f:34:fc:36:d7:45:dd:28:d4:ca:
62:73:a4:48:bf:41:26:59:82:8e:07:3e:1c:93:70:
7a:50:40:39:11:4c:12:8a:24:82:c1:0e:b6:22:b4:
75:ff:ed:ad:47:92:73:e0:9c:ac:5e:dd:cd:f6:75:
f4:23:cd:1c:a0:8c:7c:fb:12:00:8c:43:7a:5b:9c:
93:08:05:3a:e1:71:d7:25:58:42:dc:34:c4:17:55:
81:a4:ec:5d:bc:0f:b2:08:b2:cd:04:8e:45:bf:32:
79:13:75:36:fc:e4:c8:ec:f0:b3:52:14:4d:60:48:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:62:A6:AB:D6:B8:B5:B4:67:CB:2E:6F:FD:DC:DB:8A:35:06:82:9A
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/2GKmq9a4tbRnyy5v_dzbijUGgpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.98.29.0/24
65.98.127.0/24
69.72.248.0/24
77.95.113.0/24
93.113.110.0/23
93.114.86.0/23
93.114.184.0/23
93.114.234.0/23
176.56.56.0/21
185.17.180.0/22
185.65.40.0/22
185.164.196.0/22
188.212.34.0/23
192.250.224.0/24
192.250.234.0/24
192.250.239.0/24
195.250.23.0/24
198.38.80.0/24
198.38.82.0/24
198.38.92.0/24
209.42.16.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:18:bf:07:48:94:63:bf:c8:92:c0:3f:b3:c4:cb:34:a0:b0:
f2:a3:50:ac:57:e0:24:cb:58:27:ae:b3:8b:34:36:b0:b5:6b:
2f:db:38:55:25:c7:80:e9:d8:5e:fb:ff:ea:18:21:26:03:7b:
bb:66:8f:3c:93:f6:da:f4:31:b2:78:69:52:c5:dd:aa:e2:3c:
df:1c:e6:ef:ed:b4:68:bb:cd:9e:06:04:e1:0e:47:64:89:75:
54:31:23:56:86:eb:8f:71:0f:7a:6c:04:d9:4d:48:bf:2b:29:
eb:62:3a:97:56:49:0b:b9:e4:7a:47:ab:66:85:c6:ab:17:90:
fc:6b:25:db:be:9f:6a:ff:0c:11:7c:1f:e1:ea:10:dc:04:9a:
09:1e:54:e4:97:76:40:0a:93:7b:f1:69:59:f7:a6:49:91:ba:
57:7f:13:32:40:19:82:31:1d:44:be:f0:b4:ad:aa:60:c1:42:
88:c8:00:dc:d7:b7:88:f6:b6:c5:2b:1b:66:42:ed:80:20:9b:
4b:a1:fb:8e:d1:e3:43:5a:b7:bc:2c:16:0e:74:cb:1f:f1:04:
77:0b:77:52:5f:5c:c6:04:3b:05:48:67:18:09:23:6b:bb:ce:
e4:49:35:fb:72:c7:04:03:28:2a:93:6d:07:c7:c4:4f:a7:69:
78:4c:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:12 2026 by rpki-client