Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/2XY0ascpXnm_TRDQ_QoDjxmv0dM.roa
File: 2XY0ascpXnm_TRDQ_QoDjxmv0dM.roa (raw, json)
Hash identifier: PEOCByycqfLaHwPxQbret/QNx60EQc+eQrwXAKjGEBk=
Subject key identifier: D9:76:34:6A:C7:29:5E:79:BF:4D:10:D0:FD:0A:03:8F:19:AF:D1:D3
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 01A1BFCA0E54CDDC79FDDAF15B22433F0AE4
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/2XY0ascpXnm_TRDQ_QoDjxmv0dM.roa
Signing time: Mon 09 Nov 2026 10:10:52 +0000
ROA not before: Mon 09 Nov 2026 10:10:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 87.58.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:ca:0e:54:cd:dc:79:fd:da:f1:5b:22:43:3f:0a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Nov 9 10:10:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d976346ac7295e79bf4d10d0fd0a038f19afd1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0c:25:8a:c4:04:44:c8:d2:89:bf:14:61:92:
c7:71:5e:34:7c:84:14:cf:99:75:81:62:db:8d:56:
29:c5:61:95:4d:69:15:de:94:89:79:0d:97:bc:91:
b3:1b:88:35:03:11:2d:d7:a9:7f:b0:8f:7d:da:18:
6b:59:e0:4a:75:96:f8:da:a0:b3:7b:c5:30:ec:f1:
4c:8e:39:8e:49:ec:be:d3:14:c6:57:10:93:4a:28:
35:2f:d8:28:74:bc:4e:03:89:05:92:d5:eb:c8:e4:
03:3d:5c:18:37:80:f5:54:7e:97:28:43:d7:cd:cb:
2f:89:54:db:db:03:28:a8:4c:d2:e0:23:de:49:0b:
79:c3:bd:bd:80:31:12:0f:79:f8:56:6d:dc:d2:c0:
14:87:e4:dc:f6:77:da:e6:9b:c6:fc:1a:64:a4:ee:
c0:98:ee:3d:c3:06:f9:1a:65:c7:15:cb:98:f8:5a:
7d:76:a1:a6:65:38:54:a9:d8:b2:f0:07:b1:08:7c:
df:cb:3d:84:e8:13:c2:26:ba:0a:b7:fd:3f:e4:20:
51:83:8b:de:b5:31:d5:84:46:4f:82:cf:2c:a7:2a:
cf:52:c8:6d:3c:b0:3e:1a:10:6e:a3:04:97:0c:da:
c5:9a:c5:0d:65:c2:01:04:42:96:55:be:3b:b0:06:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:76:34:6A:C7:29:5E:79:BF:4D:10:D0:FD:0A:03:8F:19:AF:D1:D3
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/2XY0ascpXnm_TRDQ_QoDjxmv0dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.142.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f8:8d:a5:d0:d4:96:1e:86:7b:0e:45:91:c9:30:52:0e:b5:
e2:0c:2d:11:94:aa:35:15:b0:a5:b8:9c:12:a0:87:e4:6a:21:
58:89:45:19:8c:e9:dc:85:1d:d9:2e:0b:ac:c9:3d:a1:82:7c:
62:27:30:4c:b1:fc:47:4f:96:2c:77:2f:d6:d3:66:b1:bc:ac:
f5:c1:bd:4a:da:f7:5a:62:e6:a0:1a:19:a8:9a:6d:69:b4:3c:
b9:fb:5e:26:8d:4e:e2:f7:f6:fb:ea:8d:c9:4f:b6:9b:09:ff:
9f:26:a1:cb:b3:2a:80:7e:67:37:9f:5b:63:86:e2:e5:f8:19:
0c:23:79:2e:ca:3d:34:33:69:5c:4f:35:bf:74:c3:37:fa:dd:
02:92:98:a7:4f:1b:af:a3:b7:c7:c2:82:82:a6:73:e9:24:a3:
c6:cc:67:fc:aa:4e:68:98:84:f5:1d:04:46:8a:ed:6f:42:5a:
14:1b:f4:c9:48:6f:e1:40:97:ae:3f:1e:65:94:00:e9:d7:51:
dc:19:76:06:2c:f9:ce:0f:7e:3f:d9:94:5c:02:a7:d3:3c:a7:
52:7a:88:98:7b:30:4e:78:ba:5e:9d:1f:f0:b9:e7:43:c8:09:
89:59:4c:1b:05:01:d5:56:2d:29:21:79:27:8b:f4:79:a6:82:
48:37:10:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaG/yg5Uzdx5/drxWyJDPwrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy
OTkzYjgwHhcNMjYxMTA5MTAxMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTc2MzQ2YWM3Mjk1ZTc5YmY0ZDEwZDBmZDBhMDM4ZjE5YWZkMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QwlisQERMjSib8UYZLHcV40fIQU
z5l1gWLbjVYpxWGVTWkV3pSJeQ2XvJGzG4g1AxEt16l/sI992hhrWeBKdZb42qCz
e8Uw7PFMjjmOSey+0xTGVxCTSig1L9godLxOA4kFktXryOQDPVwYN4D1VH6XKEPX
zcsviVTb2wMoqEzS4CPeSQt5w729gDESD3n4Vm3c0sAUh+Tc9nfa5pvG/BpkpO7A
mO49wwb5GmXHFcuY+Fp9dqGmZThUqdiy8AexCHzfyz2E6BPCJroKt/0/5CBRg4ve
tTHVhEZPgs8spyrPUshtPLA+GhBuowSXDNrFmsUNZcIBBEKWVb47sAbQwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNl2NGrHKV55v00Q0P0KA48Zr9HTMB8GA1UdIwQY
MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt
MjMzMzFiNjQ5MTZjLzEvMlhZMGFzY3BYbm1fVFJEUV9Rb0RqeG12MGRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj
LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVzqOMA0G
CSqGSIb3DQEBCwUAA4IBAQCH+I2l0NSWHoZ7DkWRyTBSDrXiDC0RlKo1FbCluJwS
oIfkaiFYiUUZjOnchR3ZLgusyT2hgnxiJzBMsfxHT5Ysdy/W02axvKz1wb1K2vda
YuagGhmomm1ptDy5+14mjU7i9/b76o3JT7abCf+fJqHLsyqAfmc3n1tjhuLl+BkM
I3kuyj00M2lcTzW/dMM3+t0CkpinTxuvo7fHwoKCpnPpJKPGzGf8qk5omIT1HQRG
iu1vQloUG/TJSG/hQJeuPx5llADp11HcGXYGLPnOD34/2ZRcAqfTPKdSeoiYezBO
eLpenR/wuedDyAmJWUwbBQHVVi0pIXkni/R5poJINxC2
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:13 2026 by rpki-client