Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/2wVqGk6AbYESqyQxARKZDNQW2QQ.roa
File: 2wVqGk6AbYESqyQxARKZDNQW2QQ.roa (raw, json)
Hash identifier: FUC56YwLhblEO2nyGhzzY6G808Ssz4UfeZmgnIVvLic=
Subject key identifier: DB:05:6A:1A:4E:80:6D:81:12:AB:24:31:01:12:99:0C:D4:16:D9:04
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019C8FDDEF3E3F58DABCA3A482A17D9D73C0
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/2wVqGk6AbYESqyQxARKZDNQW2QQ.roa
Signing time: Tue 24 Feb 2026 13:36:52 +0000
ROA not before: Tue 24 Feb 2026 13:36:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215120
IP address blocks: 91.227.33.0/24 maxlen: 24
91.244.70.0/24 maxlen: 24
91.244.71.0/24 maxlen: 24
93.157.138.0/24 maxlen: 24
93.157.139.0/24 maxlen: 24
193.178.186.0/24 maxlen: 24
2a07:cec0:4300::/48 maxlen: 48
2a07:cec0:4500::/48 maxlen: 48
2a07:cec4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:dd:ef:3e:3f:58:da:bc:a3:a4:82:a1:7d:9d:73:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Feb 24 13:36:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db056a1a4e806d8112ab24310112990cd416d904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:a0:9e:f6:a4:7e:5d:79:44:3f:37:67:a3:
42:16:87:8b:d0:47:e7:5c:15:17:b9:58:20:6f:74:
3b:8d:15:00:93:ec:65:d2:82:00:43:02:66:a6:c0:
49:2e:7b:39:fe:25:a1:c6:5c:0f:ab:c9:b8:7a:45:
77:b5:cf:e6:18:32:5a:bc:6e:56:be:4b:30:55:07:
db:0b:01:ca:34:7b:40:07:7d:5f:ac:9b:cf:fe:2b:
a6:8a:83:b4:58:56:43:7a:66:d4:14:8c:f3:e6:9c:
5c:ba:b0:ff:89:84:d3:9a:20:5d:2d:4f:5e:76:1d:
c9:bc:a6:33:79:06:bb:f4:b5:f0:a7:b4:ee:4e:08:
1d:d3:ae:2a:ac:40:6d:77:05:af:2d:fc:41:20:25:
e7:98:df:08:82:27:17:9e:73:ca:6a:41:35:63:59:
cc:40:2f:a5:92:e1:92:4c:a6:e6:1e:3f:74:fb:ae:
a6:8f:f6:19:76:2f:47:54:6c:d4:bc:d8:e1:6a:51:
40:e6:9f:e8:09:aa:47:4e:a9:35:42:4c:c8:95:f7:
46:ce:f1:f3:d0:45:1c:a5:7f:d5:6f:92:20:97:d6:
fa:1e:91:aa:7d:87:2b:58:e1:67:ed:9f:d7:cd:e1:
b3:01:5a:c0:a4:96:23:8a:77:4e:d3:7f:92:1f:f0:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:05:6A:1A:4E:80:6D:81:12:AB:24:31:01:12:99:0C:D4:16:D9:04
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/2wVqGk6AbYESqyQxARKZDNQW2QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.33.0/24
91.244.70.0/23
93.157.138.0/23
193.178.186.0/24
IPv6:
2a07:cec0:4300::/48
2a07:cec0:4500::/48
2a07:cec4::/30
Signature Algorithm: sha256WithRSAEncryption
62:ef:b6:b3:cb:85:3d:f9:40:35:b8:80:d6:b6:29:6a:f5:82:
08:81:31:af:ec:b4:64:90:77:23:91:6f:e5:4c:89:47:be:4d:
76:f5:d6:81:63:93:e6:d4:06:03:03:81:5a:d3:c6:ff:90:a6:
7c:91:5e:cd:94:71:2c:10:0f:ca:44:59:a0:2f:e2:99:a7:89:
d9:cc:e7:19:69:97:26:57:8d:59:5c:6a:ef:ab:2b:93:9f:af:
d5:90:91:09:eb:74:0c:cb:83:79:b1:78:44:04:ec:f1:06:ad:
a0:7f:13:c6:2b:a1:40:9a:a0:35:e0:82:ee:35:c3:65:23:80:
f4:37:73:9c:29:41:a4:aa:0e:c4:c1:4f:9c:94:5b:70:ca:91:
6c:6c:10:62:c9:82:94:15:76:60:84:21:82:4d:a6:6d:8a:28:
23:62:89:d4:52:63:d7:e9:3b:4d:e1:f5:5c:97:e1:c3:c7:9d:
24:36:c6:1e:50:17:50:3c:42:40:e6:35:eb:76:de:ea:0c:4d:
fa:8b:de:b5:c1:e6:ee:9c:97:a5:bf:52:bb:73:8b:91:63:1b:
03:d6:13:2a:0d:e7:99:07:ee:1d:81:48:7b:50:8b:01:86:0c:
2e:77:c8:b8:e6:4b:f8:43:a0:48:69:43:40:23:32:ac:d3:7e:
b2:6e:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:54 2026 by rpki-client