Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/2D7Qmm8lOUAmehGAGFV4EjXSwO4.roa
File: 2D7Qmm8lOUAmehGAGFV4EjXSwO4.roa (raw, json)
Hash identifier: 671n1l8f6dvtaMMT0K6YZEwm63zrF391tyZLMVtMits=
Subject key identifier: D8:3E:D0:9A:6F:25:39:40:26:7A:11:80:18:55:78:12:35:D2:C0:EE
Certificate issuer: /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial: 019E086991A5A2349EE67C655A86522A7F70
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/2D7Qmm8lOUAmehGAGFV4EjXSwO4.roa
Signing time: Fri 08 May 2026 16:26:36 +0000
ROA not before: Fri 08 May 2026 16:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 193.29.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:08:69:91:a5:a2:34:9e:e6:7c:65:5a:86:52:2a:7f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Validity
Not Before: May 8 16:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d83ed09a6f253940267a11801855781235d2c0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:55:c0:2b:83:8e:8f:b0:be:0c:5d:56:a4:
78:99:5e:f9:60:2a:ea:3c:5d:98:89:88:6f:42:6a:
19:7e:ba:ed:6e:01:9d:6b:12:a5:3e:53:c6:a6:9f:
ed:ea:48:49:7b:e8:f6:bb:4b:72:71:9b:e0:04:b4:
e2:78:fc:cb:dc:38:1c:15:9a:fb:3d:0a:e0:ec:11:
0f:db:ad:dd:ec:68:35:e3:44:51:51:d2:17:71:26:
3c:9f:3e:3e:50:da:f2:23:18:fd:61:72:c4:7a:dd:
a2:b8:aa:f3:af:f4:f9:f3:26:e7:4b:9b:55:49:5f:
62:ab:fa:53:6d:42:e0:d1:01:6e:b7:7a:cb:b1:9e:
9b:b5:15:d0:c3:e6:99:44:5f:e9:fd:ce:a5:79:ca:
22:ef:2e:ae:93:a3:bb:20:d0:9c:65:10:38:ba:76:
79:bc:e0:c4:6d:5f:f4:76:5c:50:47:d9:aa:cc:d1:
aa:e7:bb:66:ec:fa:99:6f:ba:db:41:d2:73:06:31:
48:57:d9:31:1e:5e:34:ed:4a:71:86:82:a4:c1:41:
b5:6a:5e:e2:94:64:3f:75:1f:8c:39:a4:96:80:87:
7a:c5:56:c7:fe:df:c0:57:c7:d7:4b:1b:f4:db:a6:
fd:34:ac:aa:76:ac:1a:87:4e:cc:e0:c5:3d:01:db:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3E:D0:9A:6F:25:39:40:26:7A:11:80:18:55:78:12:35:D2:C0:EE
X509v3 Authority Key Identifier:
keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/2D7Qmm8lOUAmehGAGFV4EjXSwO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.225.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:7e:e0:c6:57:b6:29:7d:6c:bf:ef:cd:55:62:a7:18:77:74:
51:b7:cf:bf:7b:c4:ff:24:7e:8e:96:6e:d9:ae:39:38:d9:5b:
ad:aa:40:f5:06:f4:c3:80:bd:b6:1f:da:c2:b5:c3:19:2b:19:
a8:8d:60:b7:f6:35:b4:f0:9a:41:63:39:29:4a:a8:5d:8b:76:
01:d5:ab:43:38:b7:f8:02:86:c4:88:f1:c7:ca:99:72:c5:14:
54:70:e0:8c:e6:6f:e3:39:55:0d:04:24:03:15:d6:aa:73:2a:
2f:fb:b3:63:50:af:24:62:9c:6d:a1:e9:77:03:3c:58:a1:0f:
1d:32:29:b7:7a:af:98:5a:b4:44:78:b6:52:25:c2:03:92:87:
c1:aa:d6:23:04:17:ca:67:82:89:d2:5b:f6:99:39:bd:99:df:
cc:d5:2f:70:62:ef:8e:47:3e:59:8c:d3:65:5a:2e:6e:c4:c4:
3e:07:31:79:98:28:b9:0f:16:ec:75:cc:9c:97:2e:07:ce:36:
83:d3:43:0b:ee:f4:36:cd:11:70:2a:cd:a7:8b:c3:8d:ba:32:
33:66:9b:7f:a2:1a:a4:4f:7b:70:98:a5:1e:c0:b8:85:81:75:
ad:91:92:0a:82:24:2e:c1:fb:72:bf:35:68:d8:f2:12:71:d7:
b5:72:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:53 2026 by rpki-client