Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/2jr96T6NWCWExh7kLrHI5diyCUE.roa
File: 2jr96T6NWCWExh7kLrHI5diyCUE.roa (raw, json)
Hash identifier: Zge4KJnVPt8pB6ejzrNYi8em+mcBZDIbd6MDQo6I2B4=
Subject key identifier: DA:3A:FD:E9:3E:8D:58:25:84:C6:1E:E4:2E:B1:C8:E5:D8:B2:09:41
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019ECA795BF92780E668F524744DC57EDC88
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/2jr96T6NWCWExh7kLrHI5diyCUE.roa
Signing time: Mon 15 Jun 2026 08:50:11 +0000
ROA not before: Mon 15 Jun 2026 08:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203576
IP address blocks: 194.110.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:79:5b:f9:27:80:e6:68:f5:24:74:4d:c5:7e:dc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jun 15 08:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da3afde93e8d582584c61ee42eb1c8e5d8b20941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:9b:b2:70:1a:53:3b:f9:4e:91:21:e4:7e:
59:4e:bd:ab:e6:ba:c4:5b:d4:f7:56:80:b9:37:c6:
e5:b1:35:ac:28:7a:c0:4f:3b:47:94:b6:0f:ce:cf:
09:8e:82:6d:73:93:33:f9:b1:6e:55:22:92:d8:75:
52:37:03:c9:21:d7:fc:83:09:43:de:0c:0c:7d:d1:
16:8b:49:ae:63:73:34:13:61:5b:50:73:cc:fa:45:
b1:81:17:5f:7e:8f:1b:b4:e9:12:28:ae:82:7b:6a:
d4:46:fa:ac:de:a8:1d:4c:09:c3:4f:a0:fc:25:90:
e4:f1:75:a0:6c:fc:df:94:4e:33:dc:e8:e3:01:1e:
83:88:1d:3f:55:91:18:68:19:49:87:90:62:d7:bd:
8f:e9:d4:e6:65:1b:f6:21:c1:22:b9:92:d3:48:c7:
19:f7:62:96:e6:60:13:ec:f9:bf:c0:61:b0:9c:73:
90:2a:9e:e7:b3:6e:fd:6c:64:ff:61:47:15:c3:24:
ff:72:e4:7d:32:b9:3f:77:b4:f3:13:7b:fb:d0:b8:
f0:aa:2d:b1:f6:69:5f:bc:95:16:0d:b2:29:d3:ed:
e7:de:51:20:85:12:6c:57:c6:eb:e5:e5:8f:d0:14:
54:8f:61:03:d3:dd:d5:d9:4d:3d:3c:54:a1:e5:ea:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3A:FD:E9:3E:8D:58:25:84:C6:1E:E4:2E:B1:C8:E5:D8:B2:09:41
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/2jr96T6NWCWExh7kLrHI5diyCUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.169.0/24
Signature Algorithm: sha256WithRSAEncryption
21:38:09:59:69:3d:cd:93:9e:ff:0d:65:d8:fa:ed:ff:a4:bf:
81:1e:db:9d:e7:aa:5a:d8:84:b9:b1:e3:b4:38:df:aa:bc:98:
28:f9:34:6d:57:45:58:7a:a0:13:ec:3c:6a:58:fa:40:69:ed:
03:3e:c0:90:0a:f4:94:84:c8:4a:fc:ae:01:97:24:5a:bf:69:
cb:d1:21:da:87:44:f4:be:99:33:11:07:a4:bb:c5:c8:d2:d4:
46:fe:9e:fa:7b:d9:01:49:f1:ae:a3:8c:86:32:63:93:7f:b7:
96:b6:5e:47:1b:09:9f:80:f8:fa:14:45:54:c0:ef:f3:b5:71:
13:9e:46:b3:66:b9:c0:4b:0e:6c:0c:13:97:ce:f4:c4:7b:fa:
84:b6:47:5c:35:ec:79:d9:72:eb:48:15:f5:84:6f:d2:37:6c:
90:3e:0c:b6:1a:7b:6e:b1:8a:5f:47:65:c0:ed:ea:74:bd:9f:
22:10:af:2c:12:ba:e4:7a:91:07:d9:59:dc:9b:48:33:68:f5:
34:6e:b7:24:b8:ce:13:30:18:e5:26:6e:81:4f:a7:81:0f:a5:
80:7c:dc:2a:44:40:e6:17:dc:7a:7f:52:bc:4a:10:d6:d5:25:
2f:03:be:4f:29:93:e0:7d:f4:4e:a4:c6:f3:37:77:8a:c8:c1:
54:d4:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:55:28 2026 by rpki-client