Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/2ocJnrKYRe3zKZci6rQMXjSGrqI.roa
File: 2ocJnrKYRe3zKZci6rQMXjSGrqI.roa (raw, json)
Hash identifier: 9Ph1zNpQRXznlTIJmQawq72adyHVEEo9MJswFzGJ9NM=
Subject key identifier: DA:87:09:9E:B2:98:45:ED:F3:29:97:22:EA:B4:0C:5E:34:86:AE:A2
Certificate issuer: /CN=4ba7c9a0c64f6c1df72dd80105d0e636f3c3a02d
Certificate serial: 01A067F750DE8A0028FD406D5AD4226A164C
Authority key identifier: 4B:A7:C9:A0:C6:4F:6C:1D:F7:2D:D8:01:05:D0:E6:36:F3:C3:A0:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6fJoMZPbB33LdgBBdDmNvPDoC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/2ocJnrKYRe3zKZci6rQMXjSGrqI.roa
Signing time: Thu 03 Sep 2026 15:50:56 +0000
ROA not before: Thu 03 Sep 2026 15:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 224
IP address blocks: 157.249.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6fJoMZPbB33LdgBBdDmNvPDoC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:f7:50:de:8a:00:28:fd:40:6d:5a:d4:22:6a:16:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba7c9a0c64f6c1df72dd80105d0e636f3c3a02d
Validity
Not Before: Sep 3 15:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da87099eb29845edf3299722eab40c5e3486aea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:de:56:fb:16:19:39:34:f7:b2:b7:f5:b7:
2f:94:b3:a3:fa:8a:06:bd:99:02:3d:cc:18:47:30:
af:d7:e1:3f:04:29:a9:c8:8e:a2:be:5b:2a:33:80:
c1:8f:17:48:52:1b:be:1f:70:1a:42:a7:4d:84:09:
82:fa:61:48:30:3d:2b:ba:96:43:e7:52:ef:2b:c8:
62:b9:5e:ad:c5:40:a5:a7:b6:39:1b:f0:17:70:f6:
b2:f7:03:a6:c9:94:02:ec:39:07:9d:ba:f7:fa:5a:
bd:10:7b:60:28:0f:cb:d4:b2:84:df:d3:ce:41:b8:
e1:a5:ef:e9:c1:e8:8e:9b:46:6b:3b:be:76:15:68:
40:8d:38:c3:e8:a3:c1:47:0d:bd:00:05:4b:90:98:
c6:7f:d6:fb:5f:c4:8e:5f:4a:fb:f2:0b:60:71:03:
70:2e:e5:f5:bf:df:c3:42:f5:84:25:f2:ae:c4:96:
28:bc:4f:36:1e:78:d4:f8:f3:59:41:11:bc:f5:c4:
9f:16:4b:ca:8e:7b:db:56:25:25:4f:d1:54:90:e7:
55:a7:e0:5e:14:65:8b:e0:27:6f:9d:c2:36:62:fc:
86:f2:dd:52:cb:f7:ca:56:3d:5c:d2:5d:d7:b8:32:
95:ed:93:48:95:ac:78:be:04:fd:8a:33:30:29:6a:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:87:09:9E:B2:98:45:ED:F3:29:97:22:EA:B4:0C:5E:34:86:AE:A2
X509v3 Authority Key Identifier:
keyid:4B:A7:C9:A0:C6:4F:6C:1D:F7:2D:D8:01:05:D0:E6:36:F3:C3:A0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6fJoMZPbB33LdgBBdDmNvPDoC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/2ocJnrKYRe3zKZci6rQMXjSGrqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:73:58:51:3d:6b:8e:15:63:bc:44:41:95:d6:bb:4a:6d:de:
02:8f:24:e8:03:85:da:cb:b4:63:97:14:01:04:76:3a:a4:e4:
6f:65:4f:39:fd:06:cc:59:b2:18:3d:f4:96:63:f8:56:0e:74:
3c:ba:a4:00:9a:58:e9:47:ad:ee:dc:67:7f:a8:19:fa:18:b1:
74:99:6f:e1:e7:d0:0f:ef:1f:de:dc:bb:8c:66:21:08:d0:68:
69:65:72:40:19:b3:bd:22:31:b6:33:65:0b:a9:dc:54:7d:fd:
e4:01:a0:98:0d:34:f6:05:18:b2:c4:79:6b:b7:35:68:88:5f:
dd:06:f6:66:c8:4a:be:7a:0f:9c:0d:ac:76:f9:70:98:e7:05:
1d:09:46:af:16:b4:12:46:e6:9e:87:c4:1c:67:d8:c1:94:34:
3c:0c:5f:1a:df:7e:8c:35:51:a3:17:8b:9a:c6:88:b7:c7:54:
a3:98:4a:0a:4c:fd:97:8e:ef:51:b4:ea:eb:5d:3a:cc:4d:9e:
36:fa:a5:e3:3c:13:a8:72:f0:d1:d9:90:5a:fc:50:7b:7d:19:
bb:16:99:13:44:20:eb:fa:fb:1d:80:30:ce:ba:5b:b5:ae:14:
39:08:3d:30:6b:03:f4:ed:92:1c:2e:1a:da:c9:a3:49:ab:2b:
91:18:d7:26
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAaBn91DeigAo/UBtWtQiahZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTdjOWEwYzY0ZjZjMWRmNzJkZDgwMTA1ZDBlNjM2ZjNj
M2EwMmQwHhcNMjYwOTAzMTU1MDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTg3MDk5ZWIyOTg0NWVkZjMyOTk3MjJlYWI0MGM1ZTM0ODZhZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX7eVvsWGTk097K39bcvlLOj+ooG
vZkCPcwYRzCv1+E/BCmpyI6ivlsqM4DBjxdIUhu+H3AaQqdNhAmC+mFIMD0rupZD
51LvK8hiuV6txUClp7Y5G/AXcPay9wOmyZQC7DkHnbr3+lq9EHtgKA/L1LKE39PO
Qbjhpe/pweiOm0ZrO752FWhAjTjD6KPBRw29AAVLkJjGf9b7X8SOX0r78gtgcQNw
LuX1v9/DQvWEJfKuxJYovE82HnjU+PNZQRG89cSfFkvKjnvbViUlT9FUkOdVp+Be
FGWL4CdvncI2YvyG8t1Sy/fKVj1c0l3XuDKV7ZNIlax4vgT9ijMwKWpO3QIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFNqHCZ6ymEXt8ymXIuq0DF40hq6iMB8GA1UdIwQY
MBaAFEunyaDGT2wd9y3YAQXQ5jbzw6AtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZmSm9NWlBiQjMzTGRnQkJkRG1OdlBEb0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zNzRmNzgtOGEwYy00NmQ3LWFjMzAt
MzkwNGJlNmNiNTc1LzEvMm9jSm5yS1lSZTN6S1pjaTZyUU1YalNHcnFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zNzRmNzgtOGEwYy00NmQ3LWFjMzAtMzkwNGJlNmNiNTc1
LzEvUzZmSm9NWlBiQjMzTGRnQkJkRG1OdlBEb0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnfkwDQYJ
KoZIhvcNAQELBQADggEBABJzWFE9a44VY7xEQZXWu0pt3gKPJOgDhdrLtGOXFAEE
djqk5G9lTzn9BsxZshg99JZj+FYOdDy6pACaWOlHre7cZ3+oGfoYsXSZb+Hn0A/v
H97cu4xmIQjQaGllckAZs70iMbYzZQup3FR9/eQBoJgNNPYFGLLEeWu3NWiIX90G
9mbISr56D5wNrHb5cJjnBR0JRq8WtBJG5p6HxBxn2MGUNDwMXxrffow1UaMXi5rG
iLfHVKOYSgpM/ZeO71G06utdOsxNnjb6peM8E6hy8NHZkFr8UHt9GbsWmRNEIOv6
+x2AMM66W7WuFDkIPTBrA/TtkhwuGtrJo0mrK5EY1yY=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:50:47 2026 by rpki-client