Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa
File: 2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa (raw, json)
Hash identifier: JPioNw406pRxJydsBBDsLTocLaIvgiBjIbhi/i3xRcw=
Subject key identifier: D8:84:4C:D1:10:24:C1:2D:A8:01:9D:81:0D:BF:2E:7F:60:A1:8C:24
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 019D8C3A8B3FF2685405EF01BE51ED685465
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa
Signing time: Tue 14 Apr 2026 13:42:20 +0000
ROA not before: Tue 14 Apr 2026 13:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50920
IP address blocks: 176.61.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:3a:8b:3f:f2:68:54:05:ef:01:be:51:ed:68:54:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Apr 14 13:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8844cd11024c12da8019d810dbf2e7f60a18c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:f7:f7:08:20:f2:38:aa:29:31:a0:05:3d:
bc:6c:c1:16:c8:c1:6b:b3:95:ec:d3:0d:30:5b:85:
6f:9e:5f:b5:ae:89:99:48:99:75:28:46:ae:df:63:
8e:cb:9f:87:98:4d:dc:13:07:6f:51:7b:4c:ef:88:
3f:2e:67:70:b6:db:39:a0:99:60:fb:ed:6a:77:c8:
88:93:92:cf:17:f9:ee:22:ab:33:7a:9a:b2:d4:fb:
05:20:93:f6:97:ed:77:cc:3b:6d:43:43:5f:dd:4b:
c7:cc:83:d1:77:4b:e9:2a:5c:92:e4:de:fb:34:44:
1e:8b:34:1a:ba:2e:ce:64:4f:f7:7c:91:76:d4:8f:
bf:7f:cd:24:2e:e4:11:2e:2e:5e:37:39:92:7c:c1:
9b:e1:f0:c0:23:f0:16:1c:ac:38:e4:bb:bd:25:af:
b2:f4:3f:c6:8a:69:77:9b:50:6c:fd:ce:ac:75:af:
9b:0e:2b:56:47:ec:5f:4e:58:3e:a9:20:98:b0:ee:
0f:18:0e:19:17:72:c3:83:aa:7e:8e:62:a8:3e:19:
25:de:4a:b1:7e:85:db:8f:e0:a5:a7:ed:8a:e4:62:
79:7c:1b:21:bf:cd:0e:7f:01:5d:b3:93:06:ae:c1:
5e:92:de:51:cf:b2:c8:e1:e9:5d:2e:f3:64:9c:3a:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:4C:D1:10:24:C1:2D:A8:01:9D:81:0D:BF:2E:7F:60:A1:8C:24
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.61.160.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:bb:38:c7:13:4e:4b:0a:82:c1:0b:06:ff:4b:31:bf:6b:1e:
ac:4c:38:9a:05:0c:17:94:b8:9e:72:bd:2d:6c:da:0d:7b:bf:
df:59:13:36:5d:07:25:2b:cb:a2:b9:f7:fd:fa:a1:99:a6:f3:
4f:96:36:21:08:b0:4d:cf:80:7b:13:f1:93:92:aa:0c:0a:05:
3a:e9:92:60:85:d7:cd:5b:ac:76:79:19:16:d5:2c:2c:b0:4e:
bf:d8:7a:6e:01:f5:b4:36:98:88:1a:93:c6:dd:90:5e:ba:91:
d8:00:ec:a6:b3:ff:c7:91:77:25:6e:5e:ce:75:53:71:f8:0f:
3c:f2:b2:fc:93:ce:42:ba:8f:07:ed:7b:6e:92:21:8e:60:7c:
c7:63:07:4d:02:9c:5e:16:ce:28:14:fe:7f:7a:53:5e:e2:f0:
ab:06:82:21:a0:8b:d5:29:98:f4:3d:9d:63:17:ef:a8:28:e5:
ab:3f:af:21:cd:c8:20:c6:a7:99:53:dc:46:c2:3e:07:ea:41:
15:69:94:5c:23:fb:5a:36:e2:03:62:42:d4:87:81:cc:d8:3f:
6d:ab:89:3f:c9:bb:00:b9:08:f8:0f:51:df:e4:25:c3:2d:1d:
4e:30:b9:a5:e0:53:b3:c7:7c:7f:a7:c4:ad:77:a4:ab:92:89:
75:5a:a6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:14 2026 by rpki-client