Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/2WBZQgOfYMFt8ZyhvXbEk4lZles.roa
File: 2WBZQgOfYMFt8ZyhvXbEk4lZles.roa (raw, json)
Hash identifier: HeSOR/c+q0Axb5I8xMxzC3yDKx5vk56CmCKP+bGwJFw=
Subject key identifier: D9:60:59:42:03:9F:60:C1:6D:F1:9C:A1:BD:76:C4:93:89:59:95:EB
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 019C9E75CFA32F597804877AEAF1ECC61D67
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/2WBZQgOfYMFt8ZyhvXbEk4lZles.roa
Signing time: Fri 27 Feb 2026 09:37:26 +0000
ROA not before: Fri 27 Feb 2026 09:37:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31727
IP address blocks: 46.175.50.0/24 maxlen: 24
46.175.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:75:cf:a3:2f:59:78:04:87:7a:ea:f1:ec:c6:1d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Feb 27 09:37:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9605942039f60c16df19ca1bd76c493895995eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:76:c4:8f:f0:43:4f:67:5c:54:24:03:15:
e1:79:01:da:0a:60:f2:0e:56:9d:37:c3:be:25:26:
d6:49:bb:99:b8:30:fe:74:17:ee:a2:58:49:0f:9a:
b9:46:1c:04:3c:f1:02:4d:87:0e:c0:50:57:25:49:
4f:72:d1:a8:5c:e2:ff:c6:61:2b:73:c5:8c:12:35:
e3:f7:0f:e8:ac:23:1a:46:9a:ca:cc:f9:4e:32:40:
c6:43:f4:0e:1e:87:ba:ef:de:18:85:7c:c3:01:9c:
d8:e3:ce:db:2d:76:f5:b3:f1:7f:8d:3d:52:d2:40:
fb:64:76:96:02:af:9a:ca:35:27:d7:04:41:5f:d5:
09:56:e8:8e:05:36:6a:0c:9f:35:ae:7e:16:c0:25:
f2:38:b4:ad:15:c3:99:c6:3e:a5:aa:b4:d3:d9:bc:
36:f1:95:45:e3:49:d2:78:6e:11:ef:63:72:ad:4f:
f5:de:ca:13:bb:8f:dd:ba:5e:d1:29:11:03:10:a4:
3c:59:f5:1f:ea:25:d3:04:bd:fc:36:f5:58:c3:43:
ea:dd:d9:cf:80:17:ab:f0:4e:c6:cb:26:fd:46:00:
1e:47:27:55:41:e4:82:44:88:1a:bf:f1:25:d5:be:
11:2c:ad:2b:cd:19:99:3d:eb:90:a7:91:35:92:22:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:60:59:42:03:9F:60:C1:6D:F1:9C:A1:BD:76:C4:93:89:59:95:EB
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/2WBZQgOfYMFt8ZyhvXbEk4lZles.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.50.0/23
Signature Algorithm: sha256WithRSAEncryption
55:08:c0:ce:68:ae:c5:ff:ec:5e:c0:ff:72:cb:e1:2c:99:1b:
58:26:36:01:fd:f4:07:59:a2:72:01:12:ed:67:0f:44:7b:0d:
5f:9b:35:80:88:76:87:d8:e4:82:f3:6e:6c:24:b6:51:8b:05:
dd:1f:a6:57:ba:35:0c:f1:fa:5c:90:93:97:b6:b8:82:2f:55:
38:04:0b:5e:3e:65:93:3b:67:ae:16:53:a0:23:e8:31:f2:0b:
b1:17:98:98:ae:ef:d4:22:96:dd:14:68:33:c3:34:59:2f:09:
75:6a:ac:96:cb:87:a7:d8:5d:ee:32:8a:2d:9d:bf:f2:2e:c4:
a5:a4:23:12:ba:e7:f9:8e:12:4a:bb:3b:1a:bf:9e:cd:62:9f:
17:fa:81:83:75:ce:e0:05:d7:74:54:e6:94:70:a3:11:a3:45:
3e:16:0d:78:cc:6a:f6:74:d3:c1:00:84:65:3f:34:5a:e5:bf:
23:a1:c4:5f:fd:31:0a:e7:30:db:c1:e6:f8:1d:84:29:71:f5:
ba:27:cc:3d:7b:e1:9d:60:64:10:8e:6a:38:ca:a0:2c:c6:9f:
17:db:c5:d2:a7:96:d6:3c:e6:e0:dd:5f:84:27:c5:74:03:05:
c1:49:2a:65:83:2d:02:6c:4f:68:96:b0:0f:1a:f3:27:e7:d5:
24:97:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:12 2026 by rpki-client