Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/2f2KbLWLRgefrh1jMcyUmlWtbBM.roa
File: 2f2KbLWLRgefrh1jMcyUmlWtbBM.roa (raw, json)
Hash identifier: 7abS44zNq2ylx4BaFqOQr8b/IG7Bh+rBDu/FXXp3Wbc=
Subject key identifier: D9:FD:8A:6C:B5:8B:46:07:9F:AE:1D:63:31:CC:94:9A:55:AD:6C:13
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A08CF3454AE3ED3B2F6FB06EA6709A8ED8
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/2f2KbLWLRgefrh1jMcyUmlWtbBM.roa
Signing time: Thu 10 Sep 2026 20:12:28 +0000
ROA not before: Thu 10 Sep 2026 20:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7843
IP address blocks: 194.38.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:f3:45:4a:e3:ed:3b:2f:6f:b0:6e:a6:70:9a:8e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 10 20:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9fd8a6cb58b46079fae1d6331cc949a55ad6c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:b6:7a:6c:9c:42:d0:37:6c:5e:7c:9b:b7:
6a:a4:ae:35:b8:4c:be:5c:a8:bb:10:64:36:1d:1a:
e7:10:d0:2b:45:30:0d:6f:15:2d:fc:f7:fb:20:bd:
34:40:e4:38:03:3d:91:45:1e:2f:60:ec:36:2f:89:
1f:f6:45:63:e7:45:8d:de:9f:e7:ed:cd:f8:bc:3f:
b4:2d:dd:15:64:59:c3:10:d4:8e:52:b2:01:5e:37:
90:c4:37:64:58:b6:b7:22:7f:e8:60:db:ce:38:9b:
58:ad:6b:98:7c:68:57:3f:d7:3d:f2:92:8d:ac:b6:
c3:2b:4a:7c:77:f5:dd:e2:b6:ce:34:94:b8:99:35:
49:27:16:da:e5:14:fa:7d:ca:05:c6:1f:0e:25:07:
95:43:1e:29:e0:52:a6:48:f0:75:ee:7a:e7:c7:7c:
5b:f1:25:f0:d3:0a:82:c8:7d:7f:2b:d4:55:de:6d:
e3:a4:98:ed:54:3a:53:bd:3c:ed:77:db:99:31:63:
0f:56:02:b3:55:2e:1b:0e:e5:3f:bf:c3:27:da:d5:
ff:e3:d9:f5:29:d5:a2:8f:ef:56:62:ce:c4:7f:7c:
21:ea:3d:f0:d8:e0:cf:1a:3b:60:9d:56:3a:e5:8f:
ee:ad:ef:87:78:41:a0:b4:17:3a:99:0d:48:38:c6:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FD:8A:6C:B5:8B:46:07:9F:AE:1D:63:31:CC:94:9A:55:AD:6C:13
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/2f2KbLWLRgefrh1jMcyUmlWtbBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.50.0/24
Signature Algorithm: sha256WithRSAEncryption
32:25:69:12:e9:82:26:61:2c:3c:91:82:ae:5c:1b:f4:8b:21:
0a:41:cd:1f:48:66:f6:bc:e0:ff:aa:80:55:6c:e8:88:92:1f:
c4:2e:96:06:6f:dc:b4:0f:67:d2:2b:ab:81:fd:7d:ba:09:0b:
af:24:00:4b:fa:7e:07:67:56:1b:f9:a1:6c:22:23:1c:a9:18:
67:92:b0:8f:ee:c4:76:fd:2b:d7:ac:35:e6:cc:86:b9:9e:11:
0b:b2:d2:83:86:40:ab:17:fb:47:87:55:83:e6:f7:6b:62:16:
64:02:b5:0a:1a:d2:60:aa:b8:fc:ac:0d:ff:ff:dd:71:1b:94:
41:d8:03:f8:3d:a8:9b:25:d8:bd:c9:d0:65:9a:3a:7e:b3:e7:
a7:89:76:e6:73:5d:59:b4:ed:60:57:a1:a8:6e:57:2a:aa:98:
57:bf:c8:a6:36:3c:9c:53:8f:a6:35:3e:c1:66:57:61:50:fe:
f8:19:cb:2c:41:69:5f:39:b0:05:74:2a:72:b9:11:13:1c:c9:
ae:f1:23:9e:1e:d6:0b:d3:1b:7f:bf:5a:86:e1:e5:88:5d:ce:
a7:37:59:04:80:ca:fc:bb:80:1e:07:df:9b:16:5c:f0:a8:25:
fc:8d:73:74:76:49:df:d5:5c:8c:af:62:30:43:71:f5:21:b6:
e3:61:84:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCM80VK4+07L2+wbqZwmo7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwOTEwMjAxMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWZkOGE2Y2I1OGI0NjA3OWZhZTFkNjMzMWNjOTQ5YTU1YWQ2YzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozm2emycQtA3bF58m7dqpK41uEy+
XKi7EGQ2HRrnENArRTANbxUt/Pf7IL00QOQ4Az2RRR4vYOw2L4kf9kVj50WN3p/n
7c34vD+0Ld0VZFnDENSOUrIBXjeQxDdkWLa3In/oYNvOOJtYrWuYfGhXP9c98pKN
rLbDK0p8d/Xd4rbONJS4mTVJJxba5RT6fcoFxh8OJQeVQx4p4FKmSPB17nrnx3xb
8SXw0wqCyH1/K9RV3m3jpJjtVDpTvTztd9uZMWMPVgKzVS4bDuU/v8Mn2tX/49n1
KdWij+9WYs7Ef3wh6j3w2ODPGjtgnVY65Y/ure+HeEGgtBc6mQ1IOMbUGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNn9imy1i0YHn64dYzHMlJpVrWwTMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvMmYyS2JMV0xSZ2Vmcmgxak1jeVVtbFd0YkJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiYyMA0G
CSqGSIb3DQEBCwUAA4IBAQAyJWkS6YImYSw8kYKuXBv0iyEKQc0fSGb2vOD/qoBV
bOiIkh/ELpYGb9y0D2fSK6uB/X26CQuvJABL+n4HZ1Yb+aFsIiMcqRhnkrCP7sR2
/SvXrDXmzIa5nhELstKDhkCrF/tHh1WD5vdrYhZkArUKGtJgqrj8rA3//91xG5RB
2AP4PaibJdi9ydBlmjp+s+eniXbmc11ZtO1gV6GoblcqqphXv8imNjycU4+mNT7B
ZldhUP74GcssQWlfObAFdCpyuRETHMmu8SOeHtYL0xt/v1qG4eWIXc6nN1kEgMr8
u4AeB9+bFlzwqCX8jXN0dknf1VyMr2IwQ3H1IbbjYYQX
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:02 2026 by rpki-client