Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/2Sd0HvmlHyStTo-WBNLzAR8NTUQ.roa
File: 2Sd0HvmlHyStTo-WBNLzAR8NTUQ.roa (raw, json)
Hash identifier: 3fPXfPBlzwSi3JHWyKN+vJkAotRs4RzEaoGJ/+xtt28=
Subject key identifier: D9:27:74:1E:F9:A5:1F:24:AD:4E:8F:96:04:D2:F3:01:1F:0D:4D:44
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F27156F8110B8B428A4180A3F2E38BEE5
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/2Sd0HvmlHyStTo-WBNLzAR8NTUQ.roa
Signing time: Fri 03 Jul 2026 08:25:43 +0000
ROA not before: Fri 03 Jul 2026 08:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401586
IP address blocks: 89.167.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:15:6f:81:10:b8:b4:28:a4:18:0a:3f:2e:38:be:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 3 08:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d927741ef9a51f24ad4e8f9604d2f3011f0d4d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:12:aa:0a:a4:10:0f:c3:48:fb:52:20:de:1f:
f7:41:c4:83:45:53:b2:bf:ad:63:1c:3e:f7:1d:23:
b3:16:8c:43:a1:e0:01:46:51:66:3c:09:db:e9:9c:
fc:0e:16:80:59:1e:ce:89:59:7d:13:01:ec:b3:89:
35:ab:52:d2:e4:ae:08:2f:2b:99:f1:f1:60:e9:45:
7a:e0:45:16:d1:76:c3:17:28:29:bc:ed:67:d2:22:
81:7c:6b:d6:94:dd:89:67:91:32:e5:f3:77:ce:7c:
d0:a5:ee:95:18:fc:ca:8a:d3:50:55:fd:ff:6e:ef:
f9:3e:11:b5:47:e9:50:4c:31:92:ac:d0:6b:86:9d:
ff:56:74:b9:95:8a:7c:ed:a5:77:8c:c4:e6:ce:8a:
60:d2:8e:4a:20:a9:d7:f6:8a:0c:87:c4:6c:2e:73:
a5:15:b7:67:e5:35:5b:2c:9f:ab:42:57:26:b0:88:
7d:29:d7:43:88:6b:41:26:83:9b:29:df:f0:ee:22:
5b:c5:8b:fe:48:94:0a:44:13:85:4a:5b:85:88:3c:
35:60:3b:d5:6e:a2:92:f9:bc:cb:8f:cc:24:e8:e4:
13:64:40:32:c2:1d:cd:88:f4:15:a3:2a:83:b4:fa:
e6:5f:70:2b:60:f9:0b:4f:d3:fe:db:50:d3:a9:dc:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:27:74:1E:F9:A5:1F:24:AD:4E:8F:96:04:D2:F3:01:1F:0D:4D:44
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/2Sd0HvmlHyStTo-WBNLzAR8NTUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.156.0/22
Signature Algorithm: sha256WithRSAEncryption
83:11:72:35:91:ca:da:34:16:5e:f0:fc:3b:79:fb:f0:c9:c0:
55:20:73:37:0c:cf:1a:6c:19:d0:e9:d9:00:77:ff:3c:f5:2c:
27:ad:06:13:8f:1d:f3:68:f8:97:a3:f6:22:33:f2:5b:36:c0:
fa:2e:bc:82:6f:01:16:d2:ce:ab:0f:a4:a1:68:40:10:87:1f:
06:de:92:52:1e:24:cb:f5:ac:e8:31:7f:e9:ce:ec:b8:26:27:
18:17:c1:48:b1:21:7e:a5:cd:16:bb:d1:f7:53:68:39:79:9a:
5a:67:1a:1e:90:ae:f8:7f:0e:e6:5d:73:ea:e5:3f:0d:13:fa:
d6:bb:77:ec:1b:a4:23:6d:53:dd:7e:33:03:cc:a8:18:f6:6b:
e5:31:4d:6c:d3:ca:8c:f3:66:d7:72:05:bf:36:6f:1c:37:41:
3e:9e:37:3e:ce:34:1b:33:d8:a2:fb:8b:66:f3:57:57:56:5e:
c1:fa:99:fa:67:7c:75:15:d9:9b:e8:7a:e7:69:9e:a7:4e:70:
d6:00:d2:e6:9a:8b:33:7d:01:79:24:f7:41:73:ad:07:41:c0:
d6:e5:ca:1c:1c:b0:6d:4a:3b:8d:29:5b:8f:e4:f0:84:bd:be:
8d:f0:3f:89:63:ba:b0:18:05:c4:b5:2c:9f:24:38:72:1a:0e:
bd:c9:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:37 2026 by rpki-client