Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/2zN7sfIWv-oSO5uGa8ar6NZHBVA.roa
File: 2zN7sfIWv-oSO5uGa8ar6NZHBVA.roa (raw, json)
Hash identifier: MFUYWCWRk/ai31Pux7AKFgKjp1b/iCtRQ7q1/0WV8mE=
Subject key identifier: DB:33:7B:B1:F2:16:BF:EA:12:3B:9B:86:6B:C6:AB:E8:D6:47:05:50
Certificate issuer: /CN=049899104a46611ddd1d39a0d777c0b0f2952391
Certificate serial: 019C79F210498CBC5639C52E13A95E321EA0
Authority key identifier: 04:98:99:10:4A:46:61:1D:DD:1D:39:A0:D7:77:C0:B0:F2:95:23:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/2zN7sfIWv-oSO5uGa8ar6NZHBVA.roa
Signing time: Fri 20 Feb 2026 07:27:12 +0000
ROA not before: Fri 20 Feb 2026 07:27:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211435
IP address blocks: 193.39.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:79:f2:10:49:8c:bc:56:39:c5:2e:13:a9:5e:32:1e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049899104a46611ddd1d39a0d777c0b0f2952391
Validity
Not Before: Feb 20 07:27:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db337bb1f216bfea123b9b866bc6abe8d6470550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:ea:ab:ed:31:9c:c5:d9:95:ff:be:8e:5b:
40:f8:ba:b6:04:ba:8a:c5:f7:a6:b8:e2:04:9c:81:
11:49:75:ac:ee:a9:ad:cd:66:70:c2:d1:18:68:3a:
5e:85:c5:75:44:2b:b4:ea:65:46:c3:62:98:a6:b8:
b9:eb:30:a2:de:59:8d:68:1f:f2:b4:71:ec:aa:c8:
9b:d5:c4:c3:be:57:52:9b:42:11:23:34:5c:00:d0:
36:e4:33:02:7b:2f:d8:9a:a4:1a:8c:b1:bd:c0:86:
1a:33:38:4e:b4:5d:19:f0:a1:01:4b:19:d8:52:11:
84:18:89:db:26:e0:22:58:85:ee:f4:e9:e5:b6:12:
88:e2:77:ce:0b:af:38:49:ba:a0:c5:6d:b7:39:5c:
64:a9:a9:41:6a:be:c0:8c:d8:4c:56:64:44:13:ac:
bc:ee:5b:cd:a9:d1:e3:59:95:20:2e:e7:82:41:d1:
ab:df:c0:a8:bb:14:a0:84:bb:75:70:8f:15:1b:dd:
ed:dc:d8:5e:c4:76:d7:11:93:bc:6f:4d:78:08:46:
c6:4a:7e:4b:3a:63:35:42:b5:3a:5e:c6:b9:b5:5f:
87:2e:ab:6b:f7:b3:dc:ee:84:77:3f:62:65:41:19:
b5:ca:87:d0:47:50:0b:05:e3:cf:a8:24:01:84:26:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:33:7B:B1:F2:16:BF:EA:12:3B:9B:86:6B:C6:AB:E8:D6:47:05:50
X509v3 Authority Key Identifier:
keyid:04:98:99:10:4A:46:61:1D:DD:1D:39:A0:D7:77:C0:B0:F2:95:23:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/2zN7sfIWv-oSO5uGa8ar6NZHBVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a8:83:ee:d0:c6:ef:35:8c:ba:f3:23:d5:3f:d6:e9:43:6c:
e7:f2:69:06:ca:8d:f7:50:91:ab:80:66:c5:75:75:b3:ce:be:
0c:d9:b2:ac:99:a9:c2:e7:74:da:0f:a7:2b:92:bc:82:b0:a6:
62:cd:31:05:34:e9:eb:52:b7:de:6f:30:a6:20:8a:e6:41:38:
63:ec:20:72:89:6d:fa:41:3d:6d:31:6a:fd:43:43:fb:00:30:
d9:0a:be:39:42:63:8e:80:09:46:c0:04:6d:29:f9:a2:cf:00:
6c:b3:20:82:70:d2:75:6d:06:07:0f:de:2e:5b:7a:05:95:95:
62:ea:dd:71:71:5b:58:93:ce:4f:24:8e:be:f3:62:2d:46:27:
5a:68:1e:ee:6f:d0:f3:9c:f4:b1:62:66:4f:01:a2:16:0e:80:
76:d6:be:3d:79:9e:92:e3:ac:c7:86:97:f8:18:29:a6:3b:c1:
48:01:35:96:b4:55:35:76:fb:bc:29:ce:41:ca:2f:fb:68:0e:
71:04:6e:97:ff:01:ee:06:64:0d:7e:cd:0b:7c:e3:69:52:85:
4c:28:67:e1:0d:95:36:f1:cb:d3:5a:54:94:09:d4:93:8a:6f:
de:5a:b3:ab:1a:dd:67:b4:f7:28:1e:30:a5:97:f8:10:23:80:
f0:04:e2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:03 2026 by rpki-client