Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2nU7GckuO6SyTs35VgMjQhvz5g4.roa
File: 2nU7GckuO6SyTs35VgMjQhvz5g4.roa (raw, json)
Hash identifier: iBrWI1AcqiG1rj8NaTUxeLENuYcW9YjfD+0ivp6cXH4=
Subject key identifier: DA:75:3B:19:C9:2E:3B:A4:B2:4E:CD:F9:56:03:23:42:1B:F3:E6:0E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019DDE653BEAFA0E020FDC224D5C307BE3B3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2nU7GckuO6SyTs35VgMjQhvz5g4.roa
Signing time: Thu 30 Apr 2026 12:37:49 +0000
ROA not before: Thu 30 Apr 2026 12:37:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 82.197.194.0/23 maxlen: 24
82.197.198.0/23 maxlen: 24
82.197.200.0/23 maxlen: 24
82.197.206.0/23 maxlen: 24
84.245.20.0/23 maxlen: 24
84.245.24.0/23 maxlen: 24
84.245.26.0/23 maxlen: 24
84.245.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:65:3b:ea:fa:0e:02:0f:dc:22:4d:5c:30:7b:e3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 30 12:37:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da753b19c92e3ba4b24ecdf9560323421bf3e60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:cc:8e:f8:9a:2d:bd:97:9a:46:13:07:ac:
06:8c:3a:4f:b4:ef:ac:b1:93:9f:d8:53:fe:9e:2e:
bf:8e:ac:db:b6:14:fb:67:f1:d5:38:09:03:78:9a:
3f:0a:8f:94:e6:e2:03:5f:bc:74:35:4e:d4:43:e5:
89:bc:7d:f6:79:42:d7:1b:89:98:82:8b:f9:2e:37:
00:3f:ee:17:68:a5:d9:bf:4b:1b:c2:e6:09:74:89:
91:21:9e:fd:33:68:35:ed:36:f8:b2:f6:e0:16:91:
44:0b:9d:06:47:58:9d:27:ff:75:49:42:c2:1e:67:
35:16:ce:85:38:5b:30:03:de:f4:df:65:13:f0:ad:
f6:8d:8d:9a:0f:e0:8a:05:61:77:03:0c:71:7f:37:
1e:10:30:d7:26:46:c7:e3:ea:a8:a0:c2:2d:7e:25:
b1:91:5c:5a:01:1f:70:79:31:fa:59:3c:b1:88:89:
42:63:48:ef:18:d1:d8:09:70:05:dc:6f:21:61:98:
3a:f6:0b:db:f0:ad:0e:32:2c:85:af:21:9e:4f:95:
f5:71:e0:d0:50:40:ae:e7:e1:bb:49:b6:96:c1:6d:
be:84:b3:1c:40:b7:66:e0:64:5d:bc:7e:e3:a9:04:
79:90:51:db:dd:10:b4:9c:f0:b7:e4:f3:89:26:d9:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:75:3B:19:C9:2E:3B:A4:B2:4E:CD:F9:56:03:23:42:1B:F3:E6:0E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2nU7GckuO6SyTs35VgMjQhvz5g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.194.0/23
82.197.198.0-82.197.201.255
82.197.206.0/23
84.245.20.0/23
84.245.24.0/22
84.245.30.0/23
Signature Algorithm: sha256WithRSAEncryption
37:e7:67:10:7c:3a:d7:db:df:70:bf:d4:ee:f7:51:0b:02:98:
7c:32:78:f8:04:59:a5:27:2b:ba:88:c0:f3:32:7c:66:aa:79:
45:61:06:63:a3:47:8d:e7:a7:7e:24:fb:a6:a4:db:c2:7d:c7:
79:c6:ec:7e:dd:72:82:20:0c:70:84:12:d0:b3:9c:77:a4:f2:
a6:85:6e:42:47:49:6f:e7:c9:d3:b5:6d:1d:94:2c:fa:33:4c:
85:91:29:37:39:a6:df:ff:74:41:11:07:df:31:df:f3:32:0b:
5f:3e:28:14:6e:c1:b9:b1:aa:e5:e5:f3:c7:0f:90:f5:f4:f2:
1b:97:1f:59:08:f3:56:25:fc:1a:6e:e3:7f:8d:5b:63:5f:a0:
67:7a:49:e4:b9:fe:1a:34:71:65:9a:71:19:55:19:a6:a4:aa:
e0:18:da:e2:21:71:f6:e9:1d:ad:2c:d6:39:5f:be:9d:49:66:
ef:0d:58:ee:a7:10:03:59:95:ee:de:93:ea:0e:50:73:ac:7b:
52:b1:c8:82:03:71:bd:f3:b6:55:78:ab:68:4a:02:3d:8b:93:
54:c1:8d:f2:b3:69:92:ec:9e:45:6d:fa:8d:b2:db:d9:c4:09:
07:b7:cc:7f:a7:b3:06:47:d7:0a:c1:f9:d8:cc:1f:6d:39:1e:
2f:9a:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:15 2026 by rpki-client