Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/2Flghv3nkFBa2H_Ijw3g_aSvL-w.roa
File: 2Flghv3nkFBa2H_Ijw3g_aSvL-w.roa (raw, json)
Hash identifier: yWA2vEhzjdiuvg64SVlxPsstMAivpK4ptWndEP6MttQ=
Subject key identifier: D8:59:60:86:FD:E7:90:50:5A:D8:7F:C8:8F:0D:E0:FD:A4:AF:2F:EC
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01A17E0AE5F2C6384B30E0E090171EEC7A50
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/2Flghv3nkFBa2H_Ijw3g_aSvL-w.roa
Signing time: Tue 27 Oct 2026 15:46:45 +0000
ROA not before: Tue 27 Oct 2026 15:46:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198855
IP address blocks: 91.108.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:0a:e5:f2:c6:38:4b:30:e0:e0:90:17:1e:ec:7a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Oct 27 15:46:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8596086fde790505ad87fc88f0de0fda4af2fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:ef:7d:71:b3:ae:4b:da:e7:c1:05:05:0f:
10:4b:1e:eb:22:66:2d:a3:db:be:14:97:d5:b7:0a:
50:f0:d4:4f:80:d6:d2:73:7a:d1:3e:ec:8c:2b:ed:
b5:60:d3:db:5f:24:dc:dc:a2:c3:ce:d9:c2:83:12:
b4:aa:16:97:f9:a3:28:27:99:a6:5d:f5:fc:1f:c4:
1c:cb:33:5f:ec:2b:62:92:be:bc:84:6b:07:5c:99:
56:d9:9b:ef:3b:bd:38:0a:a4:03:65:96:c0:35:37:
76:5c:d1:88:f4:50:dd:36:84:78:8e:43:52:44:71:
3d:1b:94:a3:cb:80:12:ad:f2:43:63:d4:cf:91:60:
3d:77:14:9b:eb:20:9d:a5:1e:5f:06:28:5e:42:d4:
a5:59:89:07:b3:78:bb:a1:b9:04:2d:37:e7:82:ec:
86:6f:a9:ff:0b:cd:c1:17:be:26:ef:75:81:f2:55:
24:d5:28:d8:b9:a7:c0:aa:a2:1c:e1:3c:4e:42:10:
46:07:d6:88:0d:79:be:e6:5d:f2:35:45:51:84:c1:
49:f1:82:66:97:7b:78:c0:16:ba:53:22:18:f3:a7:
c6:a6:05:48:ae:75:ac:4e:47:db:c5:8b:34:70:59:
6a:c3:a4:77:29:72:76:ae:42:de:fe:b2:33:e7:b4:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:60:86:FD:E7:90:50:5A:D8:7F:C8:8F:0D:E0:FD:A4:AF:2F:EC
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/2Flghv3nkFBa2H_Ijw3g_aSvL-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.249.0/24
Signature Algorithm: sha256WithRSAEncryption
32:4d:0e:bc:3f:98:6c:c2:84:11:ec:95:cd:10:b3:fb:5a:54:
a5:72:3f:d5:56:e6:5c:70:9d:33:46:9f:50:74:4b:20:d1:c6:
c7:fb:7a:8c:98:d4:c4:6c:19:38:cc:87:3d:88:ae:f1:09:48:
a4:b9:b3:7f:d9:6a:25:1c:c4:90:53:32:e8:13:f4:57:71:e8:
ee:64:e7:bb:ee:b3:04:22:73:05:4c:e9:b4:28:c2:a8:7e:62:
9b:c1:75:8c:49:a6:2c:72:82:8c:e3:22:2e:90:1c:c5:63:ab:
db:6b:44:99:63:8e:61:a9:6a:ef:04:d6:1c:8d:6e:65:c6:7b:
ac:64:f2:c1:31:7f:66:a8:24:fb:e7:f1:41:cc:26:f5:dc:4a:
1a:e2:a3:05:78:c0:0f:36:3f:ec:b5:13:b6:59:e6:77:b7:78:
b7:17:50:39:9a:73:5b:da:06:a7:32:18:e7:6a:d4:1f:62:0a:
55:0d:75:30:8b:a8:a0:50:39:e4:14:5b:12:19:30:96:26:2f:
0e:9e:a5:d6:a6:f5:07:67:0e:28:a5:59:62:6c:e1:4c:19:fd:
6c:26:75:ec:78:92:65:38:ac:c2:d4:4f:0b:82:d7:c7:5a:cc:
b9:af:5e:16:0a:3e:ff:3b:83:3a:5f:94:d3:96:c8:89:d6:cb:
7b:eb:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:40:35 2026 by rpki-client