Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/2_cvz6D9pSRXH3JvxyHd7c81FF0.roa
File: 2_cvz6D9pSRXH3JvxyHd7c81FF0.roa (raw, json)
Hash identifier: zk9dbjzt7GrGJFcExlsnVL8+hMzQCq9y8eRk95K4UnU=
Subject key identifier: DB:F7:2F:CF:A0:FD:A5:24:57:1F:72:6F:C7:21:DD:ED:CF:35:14:5D
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019F752F2E9E27FBA20356A07D9BAA5BC7F1
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/2_cvz6D9pSRXH3JvxyHd7c81FF0.roa
Signing time: Sat 18 Jul 2026 12:24:14 +0000
ROA not before: Sat 18 Jul 2026 12:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 147.78.52.0/22 maxlen: 24
185.226.80.0/22 maxlen: 24
193.37.52.0/22 maxlen: 24
193.38.240.0/22 maxlen: 24
194.26.176.0/22 maxlen: 24
194.55.80.0/22 maxlen: 24
194.93.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:2f:2e:9e:27:fb:a2:03:56:a0:7d:9b:aa:5b:c7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Jul 18 12:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbf72fcfa0fda524571f726fc721ddedcf35145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:51:55:b9:c6:88:8f:c2:01:a3:4c:04:0f:
59:df:5b:60:90:1b:85:78:dc:83:0e:55:2f:1d:c6:
c4:78:c9:0e:f4:18:85:79:87:39:4e:87:8d:d5:2a:
05:b3:13:cf:d5:12:19:ab:a1:83:7e:6b:9c:4b:04:
a4:e5:c0:54:4f:a8:02:2f:e4:97:f3:63:29:d6:6f:
8a:74:49:27:56:e6:1b:a5:f9:ef:93:fc:a2:47:ff:
25:ce:36:1f:26:27:14:7e:11:77:e9:28:20:e6:ec:
b4:c1:09:35:0c:2d:42:5d:5a:a6:39:b5:1b:60:1e:
72:30:e1:c4:c7:fe:f7:2b:05:42:9a:97:15:f9:47:
3b:91:b9:26:ab:c2:21:6a:4d:57:80:2f:d1:38:ae:
1c:e4:7e:56:4d:02:49:93:12:78:53:51:55:fa:9d:
45:a8:c1:51:2d:0b:ab:1b:3a:71:81:f9:8a:88:86:
a9:45:ce:de:55:41:42:0a:ca:6a:f7:c7:76:cb:2e:
8f:44:b0:5f:87:23:e4:3a:16:c5:8a:b7:b8:06:27:
87:f6:fa:7c:41:81:9c:ac:a9:8b:5f:f5:76:a1:e6:
3c:13:14:0a:cf:16:8f:3a:45:6c:01:fe:25:d7:84:
ad:87:05:93:b0:0b:59:fe:e7:57:05:f6:56:8a:dc:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F7:2F:CF:A0:FD:A5:24:57:1F:72:6F:C7:21:DD:ED:CF:35:14:5D
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/2_cvz6D9pSRXH3JvxyHd7c81FF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.52.0/22
185.226.80.0/22
193.37.52.0/22
193.38.240.0/22
194.26.176.0/22
194.55.80.0/22
194.93.36.0/22
Signature Algorithm: sha256WithRSAEncryption
84:ba:a7:72:ff:1c:5d:43:64:13:ad:2c:4c:70:63:a4:a6:39:
19:72:55:6b:7b:8b:b6:d1:87:8c:7d:1c:51:33:47:97:77:74:
da:e0:88:20:45:bb:0b:b5:14:49:ed:a7:1b:01:7c:4c:84:ff:
60:f3:98:10:7d:1b:af:d0:d2:f8:d1:38:99:43:96:d8:16:55:
fe:95:f5:1e:14:aa:40:72:36:8b:9c:f9:92:9e:df:50:73:0c:
e1:41:50:5f:95:ef:7b:bf:73:4a:16:8d:80:f8:29:db:8b:1d:
79:4b:42:75:9a:8c:2b:55:46:a2:29:23:0e:2b:4b:df:44:4a:
32:b8:30:4b:35:a3:81:f5:48:ef:61:53:07:06:ea:82:17:81:
fd:ea:de:6c:82:2f:73:ae:8e:a8:0a:d7:bb:0c:a1:df:a0:b0:
e5:6f:c7:8c:56:5e:2b:a8:86:6f:28:46:2f:f4:ed:c2:12:d5:
29:8b:72:4c:03:04:76:1a:1b:f1:70:9e:17:06:c0:ef:f8:2c:
c7:9d:21:de:11:47:ff:36:c8:ff:c7:82:55:8c:86:da:36:12:
07:d5:4e:74:94:2c:0f:1e:87:4d:c1:d6:84:90:97:32:78:09:
c2:cd:26:ed:26:f3:3c:a8:85:82:35:e8:d1:1d:67:81:37:5f:
02:14:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:16 2026 by rpki-client