Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/2kdzmxuCafuUiO69QodWAP3jjNo.roa
File: 2kdzmxuCafuUiO69QodWAP3jjNo.roa (raw, json)
Hash identifier: n+PmPuSrz+Vmqyv/TxJNc5zJxBUqdGdTO/p9uF5xXVM=
Subject key identifier: DA:47:73:9B:1B:82:69:FB:94:88:EE:BD:42:87:56:00:FD:E3:8C:DA
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A046BEE022AD08970E1DC206D9CBEA548E
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/2kdzmxuCafuUiO69QodWAP3jjNo.roa
Signing time: Fri 28 Aug 2026 05:01:49 +0000
ROA not before: Fri 28 Aug 2026 05:01:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218865
IP address blocks: 87.192.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:46:be:e0:22:ad:08:97:0e:1d:c2:06:d9:cb:ea:54:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Aug 28 05:01:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da47739b1b8269fb9488eebd42875600fde38cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:e1:f7:d7:10:ec:7d:fe:c5:ae:06:27:5f:
73:2d:22:ac:7e:89:87:42:8e:31:f5:80:ea:1b:b1:
e0:f6:87:cc:85:cb:7a:af:b4:bf:ee:8a:aa:bc:45:
e3:ce:f5:d1:22:14:db:94:21:38:45:29:f7:2f:2d:
0b:3a:54:8a:d6:9b:6d:64:69:33:42:99:91:00:0f:
32:fe:e1:7e:be:da:f2:37:19:39:0f:48:91:b2:b0:
3d:a6:6b:12:fc:36:23:56:75:46:e4:c5:04:0f:d3:
df:e4:1f:b5:ec:40:a8:ee:02:c8:08:05:5a:cb:2e:
3e:92:8e:b2:5b:62:2e:14:a5:3a:42:28:eb:ba:76:
0d:8e:16:20:76:02:0b:b5:22:2c:64:9e:6b:45:4c:
76:87:bc:73:1c:ef:7f:9a:46:49:4c:53:eb:d0:93:
49:2a:81:39:a2:5b:0e:8b:75:dd:19:52:fb:1c:97:
bd:12:1f:83:ef:f4:d0:25:be:64:f1:68:80:92:b6:
38:1d:00:17:6a:7c:13:38:e9:d4:c5:b0:4d:f1:bb:
ba:89:46:c8:0e:cd:97:4c:36:b2:81:fa:48:ab:66:
22:7b:58:c8:e7:ef:d0:b8:e5:eb:2e:af:37:4b:b4:
de:15:89:9c:ae:47:fe:38:f0:e4:64:37:8c:95:65:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:47:73:9B:1B:82:69:FB:94:88:EE:BD:42:87:56:00:FD:E3:8C:DA
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/2kdzmxuCafuUiO69QodWAP3jjNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.32.0/22
Signature Algorithm: sha256WithRSAEncryption
70:ba:67:a1:04:b8:1c:f5:68:cd:54:16:d8:6c:d2:c4:2b:79:
85:35:c5:c0:1f:b0:67:6f:08:89:24:0e:07:07:00:96:ed:1d:
c4:92:aa:05:c0:6e:90:83:f8:39:56:fe:3b:48:e8:57:b5:a8:
df:09:0e:41:c9:cc:69:84:be:9f:be:b2:3d:e3:cf:f9:74:96:
0f:13:68:ba:52:28:3c:0c:02:1c:bb:72:76:27:13:45:c4:43:
95:f2:b0:f3:98:24:96:54:20:d5:b9:49:4b:90:d7:ce:e2:d9:
fc:b7:db:9f:f0:ec:60:a5:34:4b:1a:b1:6d:8f:76:eb:d1:51:
0e:b5:87:24:48:6e:ac:ef:2d:72:b3:b2:50:77:3b:52:b1:a7:
91:7c:e9:cb:0e:0b:99:1b:7e:28:b0:ed:36:e9:65:a8:d9:04:
0a:09:93:30:01:cd:30:ac:b7:48:6a:ad:b8:ca:6f:98:56:a2:
39:db:7d:46:e8:f5:97:b1:73:47:af:97:c8:d1:8e:a8:be:03:
2c:61:a2:66:78:8a:2c:5e:44:7c:c9:36:4e:7d:85:8c:f1:e8:
e3:73:f7:d6:f4:99:f4:03:3a:48:d9:48:1e:80:3a:e3:3b:62:
b1:2c:a0:a4:cd:0f:18:11:2e:9b:3b:65:d1:d2:f9:17:b2:73:
5b:81:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:47:32 2026 by rpki-client