Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa
File: 2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa (raw, json)
Hash identifier: go5QJk7M8VyLFJ9jDXX4X6U9kMJqLf3Q5kfqrQ3kpDA=
Subject key identifier: D9:34:85:CB:13:17:2B:84:37:1C:FA:02:D2:FC:0D:37:34:EE:89:15
Certificate issuer: /CN=113ef47427b03761ebc1380862d08695083531a9
Certificate serial: 019EB725D9A3917178612435E580D682335E
Authority key identifier: 11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa
Signing time: Thu 11 Jun 2026 14:46:11 +0000
ROA not before: Thu 11 Jun 2026 14:46:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34280
IP address blocks: 193.242.114.0/24 maxlen: 24
195.242.80.0/24 maxlen: 24
195.242.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:25:d9:a3:91:71:78:61:24:35:e5:80:d6:82:33:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113ef47427b03761ebc1380862d08695083531a9
Validity
Not Before: Jun 11 14:46:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d93485cb13172b84371cfa02d2fc0d3734ee8915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:25:89:53:f8:b8:50:34:23:82:77:9a:c6:
6c:4b:93:91:13:92:f9:b3:01:45:95:b6:d2:56:90:
5a:1d:12:22:dd:b6:58:9c:54:a5:36:80:35:36:c7:
e3:94:6d:f7:7c:97:d9:73:9a:fe:d7:db:f4:6b:61:
5f:de:f3:dd:e2:48:23:79:88:36:2c:d4:52:37:a4:
fb:e0:7a:7a:54:0a:12:c8:fc:f7:1f:b9:c1:4e:42:
0f:5c:40:fe:0d:ec:dd:9e:67:80:23:b6:f4:0c:60:
92:60:ec:2d:bd:4a:b7:c8:30:86:9b:9b:37:f5:76:
52:d4:d6:9e:aa:61:e8:f4:6c:30:13:a6:86:32:e0:
43:c1:f2:bc:16:9c:58:b5:4b:4a:90:5f:22:4f:dc:
61:ba:0c:38:ca:81:2a:bb:5f:34:1c:e8:7c:01:2b:
5b:00:74:a4:19:c9:2a:6c:cb:d4:46:c8:35:2d:cc:
3e:84:af:95:d7:12:37:00:b0:a5:b0:99:58:ac:30:
1f:99:af:3d:e7:d5:77:3a:74:9c:4a:b6:dc:f1:d9:
67:f8:f5:75:f9:a2:24:36:8f:96:0b:a0:93:38:ac:
ac:42:18:6d:44:74:84:fe:c4:47:7b:ae:e1:c9:77:
26:fb:91:23:5f:3e:05:b9:a2:d7:b0:66:66:0b:a2:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:34:85:CB:13:17:2B:84:37:1C:FA:02:D2:FC:0D:37:34:EE:89:15
X509v3 Authority Key Identifier:
keyid:11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.114.0/24
195.242.80.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:e8:ba:3f:82:cf:95:6b:6d:18:c3:17:2b:ee:70:e1:19:b1:
23:eb:53:b6:76:1a:ff:4c:79:f5:08:22:ea:f1:cd:c7:1b:05:
0f:4d:5e:d2:90:6f:c1:dd:39:15:d6:be:d0:88:df:e5:8a:e2:
61:91:a1:b4:d1:b3:97:b8:d5:0d:25:16:ae:21:7c:4f:ef:40:
98:96:52:50:e4:c3:cc:c3:37:e6:00:fb:95:53:f8:09:90:35:
92:43:6d:ae:da:97:0e:96:ee:1e:01:c0:cb:f6:25:80:fd:c2:
54:9d:43:45:e6:52:bb:74:b8:23:ce:3f:d3:9d:57:42:ff:b6:
70:8d:51:cf:9b:85:32:a2:31:99:e6:f1:6c:c0:66:a7:87:07:
85:c4:c4:bf:be:42:93:93:a0:a0:e3:bf:32:74:c9:ce:71:87:
ab:ad:6e:fb:16:d8:b9:bd:d8:1e:60:5f:61:0d:6e:93:8c:4d:
a3:5b:50:cc:4e:b1:c5:e6:69:1c:99:a6:5c:29:f9:22:6d:ba:
87:d8:58:bd:bb:55:7d:92:93:0c:21:6a:70:f7:1a:d9:b5:48:
c9:07:f2:0c:8d:b3:2e:34:2a:46:78:a6:76:98:45:4f:54:17:
5b:73:2a:50:b0:da:ec:1d:65:47:47:4b:6e:d5:15:44:70:7b:
ae:a0:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:50 2026 by rpki-client