Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa
File: G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa (raw, json)
Hash identifier: vsyuYrOVDwT5WEpdCQyY3/LeFAhiTt0ioFA3ViytW0w=
Subject key identifier: 1B:64:43:BF:66:D0:30:CE:95:91:33:7B:57:EE:4C:F7:26:78:B4:51
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 019C9070F1F2BB1D7C8ABF9859A89EF85926
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa
Signing time: Tue 24 Feb 2026 16:17:26 +0000
ROA not before: Tue 24 Feb 2026 16:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 192.34.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:70:f1:f2:bb:1d:7c:8a:bf:98:59:a8:9e:f8:59:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Feb 24 16:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b6443bf66d030ce9591337b57ee4cf72678b451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:38:d3:3e:65:92:e0:a6:42:ce:82:b0:11:
47:49:98:11:79:80:3b:ff:70:9f:6e:07:b5:82:00:
7f:ef:1e:58:5c:24:4a:77:d1:55:3d:f9:65:cf:1e:
d6:ff:fb:ed:1b:8c:f3:10:06:55:1b:e2:28:bf:f7:
ca:8d:fc:93:08:40:d4:21:74:a5:a1:ea:5b:42:4c:
d1:1e:de:40:e7:8b:11:86:b4:ac:eb:96:fd:c3:c3:
b4:e0:70:3e:a2:3b:d8:20:37:77:85:6a:08:ac:ec:
6e:f7:57:af:ea:78:a1:99:2f:aa:40:f3:82:a7:4f:
db:9d:0a:54:91:b3:14:59:eb:bd:92:4b:ac:f6:c6:
66:16:91:d4:1e:be:d1:3e:16:92:3b:ce:bf:55:e5:
0a:74:73:71:d9:cb:fa:42:6b:05:c0:42:c0:cd:49:
60:b8:18:71:77:c7:a8:5d:05:34:f7:81:91:f5:54:
a9:19:2a:d1:18:28:c7:5d:99:b0:a5:5f:e2:a5:4f:
92:ba:43:5e:1a:95:ea:63:51:cf:97:42:21:f0:ea:
4b:18:15:4c:d5:e0:3a:c4:e6:de:b2:69:42:6c:a8:
22:14:af:5d:a3:38:b7:0e:5d:ac:da:5b:c1:b1:60:
d3:1b:be:cc:0b:04:0d:85:83:55:9c:3b:bc:e7:25:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:64:43:BF:66:D0:30:CE:95:91:33:7B:57:EE:4C:F7:26:78:B4:51
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.34.200.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:cc:c7:66:ff:fe:16:8d:d3:c5:f0:5f:7a:7e:a6:17:cc:e6:
13:07:0d:a8:15:11:55:49:d4:7b:e1:96:78:54:b3:82:b8:9a:
4d:80:0c:37:cf:62:41:18:0e:51:1b:d3:c6:a2:49:72:12:78:
58:9c:c3:7c:1e:92:89:cf:33:ee:66:0d:66:e4:13:4d:41:4c:
b9:07:2a:75:b7:55:88:ff:59:a9:6d:3e:3e:88:1a:8f:8a:71:
f7:75:b6:d8:1d:24:54:9c:bd:87:78:da:40:0c:47:d3:71:3f:
aa:23:a5:86:d4:1b:3d:f9:20:63:2e:63:39:70:b9:ff:eb:d5:
2f:82:9a:7b:96:43:cd:0a:25:a0:3e:b5:63:0a:32:9d:c0:61:
5d:5d:a0:98:df:e2:7c:b3:2a:56:cb:f7:b4:5e:c2:34:5a:b1:
43:78:65:60:b5:83:19:b4:5e:e0:6e:d8:b9:47:d3:1a:8f:22:
38:13:75:b0:c8:1a:bc:1d:47:3b:61:75:2f:5b:c7:6a:08:d0:
d5:3a:52:d0:16:62:3f:f4:b7:51:e5:66:c0:5d:85:3c:92:d9:
09:24:4f:e0:4d:af:3f:a2:18:2c:53:51:e0:57:67:13:cc:e9:
82:3d:74:5b:c6:f9:3f:11:32:b0:fd:46:7f:84:26:bc:d0:fd:
a0:e2:69:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:09 2026 by rpki-client