Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/2QbBHswT4LyT9MKxWibJ_ZC77bY.roa
File: 2QbBHswT4LyT9MKxWibJ_ZC77bY.roa (raw, json)
Hash identifier: OMywM0jRuHNbVt6pewn8yF5ZOU7J3bKnC67SOzWkkWU=
Subject key identifier: D9:06:C1:1E:CC:13:E0:BC:93:F4:C2:B1:5A:26:C9:FD:90:BB:ED:B6
Certificate issuer: /CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
Certificate serial: 019F236894267B52DBC25192AC5F64FF3EC9
Authority key identifier: 0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/2QbBHswT4LyT9MKxWibJ_ZC77bY.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48152
IP address blocks: 81.88.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:94:26:7b:52:db:c2:51:92:ac:5f:64:ff:3e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d906c11ecc13e0bc93f4c2b15a26c9fd90bbedb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:ac:e7:90:8c:f7:74:f8:fb:15:2e:a6:95:
a6:be:32:e5:65:05:09:8b:59:8a:d1:d9:72:7c:eb:
71:7b:78:ad:94:5b:4e:e6:58:d9:ec:59:61:db:61:
cc:73:05:cd:64:be:b9:46:b1:91:e4:c7:35:74:67:
8a:7a:4b:16:71:8d:10:e8:f0:56:fa:06:77:dc:b6:
df:9f:f2:0e:71:88:7e:79:7f:e9:4f:d0:b5:ef:3c:
75:c2:03:e7:c7:c9:00:af:36:1b:41:63:76:be:90:
75:aa:22:ec:fa:7a:be:f9:0a:2c:8e:45:b5:e1:12:
25:b4:72:1b:7a:f7:03:e4:60:d5:01:18:c2:fa:f0:
80:5f:cb:bf:7f:67:f4:68:c2:2b:03:fb:6a:84:0a:
3c:a2:11:a1:3c:ae:40:ee:19:5e:78:63:a0:49:cf:
05:f8:d7:6c:2c:7a:88:c2:28:2d:3d:a3:b6:fc:6d:
1e:c8:10:d7:e3:a4:19:2c:8e:91:01:14:3b:76:d5:
29:fb:fc:6d:5f:c0:21:04:e2:d9:15:99:d8:85:4d:
99:45:47:4c:b4:d9:81:a9:11:6d:f7:e5:bb:e8:a3:
ba:c8:8f:f0:b3:0a:03:6a:54:b6:fc:0c:3f:ce:2c:
94:5d:b4:44:da:a9:49:d9:3d:de:23:36:45:b3:75:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:C1:1E:CC:13:E0:BC:93:F4:C2:B1:5A:26:C9:FD:90:BB:ED:B6
X509v3 Authority Key Identifier:
keyid:0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/2QbBHswT4LyT9MKxWibJ_ZC77bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.104.0/22
Signature Algorithm: sha256WithRSAEncryption
38:54:ab:90:67:c9:ff:dd:b7:84:3d:ec:c4:49:80:72:3d:2f:
ef:e6:40:48:5d:e1:26:c6:18:15:bf:ae:c7:ff:b3:a1:26:c5:
8d:22:b8:20:94:64:56:b8:e6:8a:47:e3:3b:5f:3c:55:25:fb:
80:26:21:c7:6f:c0:86:37:c3:fc:0a:79:f3:e9:90:e9:0a:f0:
12:1c:01:8a:ec:91:15:9e:a3:cc:69:a9:6b:bd:49:e9:83:2b:
36:e6:b3:f5:b0:db:56:21:8a:e8:62:bc:37:74:89:c3:0c:28:
99:ae:91:25:91:dd:0d:e4:10:8c:17:60:bf:af:d3:e9:c1:e5:
4b:1c:1e:0b:4f:07:98:2b:50:51:40:6b:40:1f:02:b5:01:fe:
f8:96:18:78:00:67:54:71:18:d5:7f:01:3d:90:96:12:cc:65:
d4:d2:d1:62:68:41:f8:4b:4f:42:63:9b:fa:2c:6e:26:37:19:
44:2e:1d:df:7e:ce:74:c3:99:d4:e8:9f:3e:18:31:b6:8b:75:
de:ab:91:43:98:ff:fe:5b:91:51:36:08:cb:7a:63:1c:d0:5f:
51:2a:71:87:d4:80:d8:05:6d:86:2f:93:1c:50:3f:fc:d4:da:
f6:83:bb:26:0a:75:54:9f:bd:a9:2f:24:94:6f:d3:9b:56:0a:
e6:2d:2f:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaJQme1LbwlGSrF9k/z7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzEwZGJiNmRmOGUwNjIyMWJmZmRlOTI4MjBjNzljYmIx
NGFlNWMwHhcNMjYwNzAyMTUxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTA2YzExZWNjMTNlMGJjOTNmNGMyYjE1YTI2YzlmZDkwYmJlZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/2s55CM93T4+xUuppWmvjLlZQUJ
i1mK0dlyfOtxe3itlFtO5ljZ7Flh22HMcwXNZL65RrGR5Mc1dGeKeksWcY0Q6PBW
+gZ33Lbfn/IOcYh+eX/pT9C17zx1wgPnx8kArzYbQWN2vpB1qiLs+nq++QosjkW1
4RIltHIbevcD5GDVARjC+vCAX8u/f2f0aMIrA/tqhAo8ohGhPK5A7hleeGOgSc8F
+NdsLHqIwigtPaO2/G0eyBDX46QZLI6RARQ7dtUp+/xtX8AhBOLZFZnYhU2ZRUdM
tNmBqRFt9+W76KO6yI/wswoDalS2/Aw/ziyUXbRE2qlJ2T3eIzZFs3WSkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNkGwR7ME+C8k/TCsVomyf2Qu+22MB8GA1UdIwQY
MBaAFAsxDbtt+OBiIb/96Sggx5y7FK5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pFTnUyMzQ0R0lodl8zcEtDREhuTHNVcmx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2It
ZDg0NmQxMDZiNWY3LzEvMlFiQkhzd1Q0THlUOU1LeFdpYkpfWkM3N2JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2ItZDg0NmQxMDZiNWY3
LzEvQ3pFTnUyMzQ0R0lodl8zcEtDREhuTHNVcmx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUVhoMA0G
CSqGSIb3DQEBCwUAA4IBAQA4VKuQZ8n/3beEPezESYByPS/v5kBIXeEmxhgVv67H
/7OhJsWNIrgglGRWuOaKR+M7XzxVJfuAJiHHb8CGN8P8Cnnz6ZDpCvASHAGK7JEV
nqPMaalrvUnpgys25rP1sNtWIYroYrw3dInDDCiZrpElkd0N5BCMF2C/r9PpweVL
HB4LTweYK1BRQGtAHwK1Af74lhh4AGdUcRjVfwE9kJYSzGXU0tFiaEH4S09CY5v6
LG4mNxlELh3ffs50w5nU6J8+GDG2i3Xeq5FDmP/+W5FRNgjLemMc0F9RKnGH1IDY
BW2GL5McUD/81Nr2g7smCnVUn72pLySUb9ObVgrmLS/D
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:56 2026 by rpki-client