Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/2pUPqV7OgxFjRiMhnV8NKkzdRtw.roa
File: 2pUPqV7OgxFjRiMhnV8NKkzdRtw.roa (raw, json)
Hash identifier: JlZOYlUa3gvPfLbDGilMzkwg5yfZLlY9/knETwZ36LQ=
Subject key identifier: DA:95:0F:A9:5E:CE:83:11:63:46:23:21:9D:5F:0D:2A:4C:DD:46:DC
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 01A0B327667D0008BAB963670071CC127228
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/2pUPqV7OgxFjRiMhnV8NKkzdRtw.roa
Signing time: Fri 18 Sep 2026 06:14:58 +0000
ROA not before: Fri 18 Sep 2026 06:14:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 147.189.42.0/24 maxlen: 24
147.189.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:27:66:7d:00:08:ba:b9:63:67:00:71:cc:12:72:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Sep 18 06:14:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da950fa95ece8311634623219d5f0d2a4cdd46dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:7a:4e:b1:1c:4f:0d:6e:f0:3b:35:85:71:
76:96:7c:f8:98:c5:03:a0:df:0a:05:44:fe:70:e8:
11:89:a1:79:11:6a:e7:97:d8:93:77:cf:07:c1:d4:
28:9c:1e:ee:c3:ad:67:8a:bb:c1:4f:1b:11:2c:96:
e6:d4:c4:76:e8:43:03:c1:22:9b:5b:6a:00:2f:d6:
43:64:7c:c0:d1:4a:e9:9d:d7:a9:51:5f:d5:53:47:
83:28:17:99:39:62:98:79:d0:49:9c:c7:8a:33:b0:
cc:45:8e:cd:b1:fd:e1:de:b0:87:69:19:07:ef:78:
c2:93:90:da:d5:7f:d5:2c:67:e1:61:dd:67:d0:b1:
ed:07:32:a8:e4:d1:8f:bc:39:ed:74:2f:70:3f:1a:
d7:58:3b:ba:20:90:27:b5:5e:84:cb:50:55:71:56:
eb:b7:20:10:62:98:e9:ff:e0:50:ec:63:5f:11:95:
5b:4c:78:45:88:80:75:69:c8:04:3e:0f:8f:b4:85:
10:95:20:7b:b5:c7:06:bf:c1:cb:0d:7b:b4:05:a3:
98:be:4b:f8:5b:19:9e:c6:6e:59:30:5f:86:a4:c5:
8d:3f:c6:ec:9c:f3:56:d6:41:b1:a4:0e:b2:13:ef:
19:64:85:4b:6d:44:b5:ed:09:d8:e4:e6:b2:67:98:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:95:0F:A9:5E:CE:83:11:63:46:23:21:9D:5F:0D:2A:4C:DD:46:DC
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/2pUPqV7OgxFjRiMhnV8NKkzdRtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.42.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:b7:2c:5b:ce:e7:7d:ce:20:44:3b:83:ec:18:1e:cc:ea:62:
00:1b:49:1c:7e:fa:9a:fc:8f:01:f5:b6:af:10:1e:d4:b1:18:
09:d6:d4:36:63:28:1f:ef:49:2c:38:97:df:dd:c1:38:72:4a:
db:59:29:b6:d7:6f:8b:46:d3:b6:be:cf:3d:38:8d:bc:67:40:
b1:82:69:e4:73:3f:6a:d7:8a:f6:a9:d4:24:d3:2c:c5:94:57:
aa:19:58:b9:b7:d5:21:5f:0d:a5:49:d6:0a:54:29:39:2a:b5:
34:6d:00:c9:13:16:38:fd:bb:6d:5a:6f:57:ad:71:6e:a3:a4:
c9:dd:f0:0a:3b:92:85:52:1b:0d:bc:7c:29:5b:6f:c0:6b:8a:
e5:d6:90:28:d2:56:a2:d6:1c:8d:5a:9c:08:04:ec:0c:97:f8:
f3:40:46:41:1d:15:17:ee:be:f5:5b:0f:87:d5:bb:c4:b1:12:
ac:68:a6:2e:1a:8c:fb:a8:9f:c2:e3:98:29:55:d4:80:0e:25:
34:e9:48:b6:fc:5f:29:4b:6d:e7:43:c0:95:01:42:7e:2d:3f:
26:0e:2a:45:89:e2:f1:93:32:77:a4:37:29:f6:ae:49:36:9c:
7b:a1:4e:bb:fa:81:59:5a:97:55:e7:aa:56:8e:f1:08:9a:6f:
16:1a:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:47:42 2026 by rpki-client