Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/2mmNYgAAnRwmcSYBM0IDngosLA4.roa
File: 2mmNYgAAnRwmcSYBM0IDngosLA4.roa (raw, json)
Hash identifier: nY1bukKyfttyC/3iq1POePricYqJ+1Tih3NnE1gnsUY=
Subject key identifier: DA:69:8D:62:00:00:9D:1C:26:71:26:01:33:42:03:9E:0A:2C:2C:0E
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 019C9F59C7FEE76A5B269D67766DCEAA69BA
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/2mmNYgAAnRwmcSYBM0IDngosLA4.roa
Signing time: Fri 27 Feb 2026 13:46:27 +0000
ROA not before: Fri 27 Feb 2026 13:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49434
IP address blocks: 37.44.236.0/24 maxlen: 24
37.44.237.0/24 maxlen: 24
79.110.237.0/24 maxlen: 24
185.142.52.0/24 maxlen: 24
185.142.54.0/24 maxlen: 24
185.142.55.0/24 maxlen: 24
193.177.0.0/24 maxlen: 24
193.177.162.0/24 maxlen: 24
193.177.182.0/24 maxlen: 24
193.178.0.0/24 maxlen: 24
217.119.141.0/24 maxlen: 24
2a09:ca00::/29 maxlen: 29
2a0f:9240::/32 maxlen: 32
2a0f:9240:1300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:59:c7:fe:e7:6a:5b:26:9d:67:76:6d:ce:aa:69:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Feb 27 13:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da698d6200009d1c267126013342039e0a2c2c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:00:00:4e:6e:39:fd:90:b8:17:cd:84:80:
c4:32:7e:5a:9e:6f:c8:98:06:9e:29:64:c1:c1:27:
79:6a:ca:2a:fe:97:7b:5a:2f:ed:48:5b:d9:d4:a9:
37:2f:5a:cc:13:fc:f4:37:5d:1c:1f:04:7d:ce:42:
a1:84:61:e7:e8:cd:c6:b8:5c:3e:17:ce:bd:a5:02:
65:3f:31:9b:cc:55:1d:85:5d:03:a3:ea:b0:fd:4b:
7f:9d:2c:9d:f6:27:d3:6c:f7:17:b9:b5:ed:3d:56:
d5:ed:7b:0b:cf:ec:7a:df:08:95:70:f5:96:36:f1:
8c:6b:1a:6b:fb:82:9f:2e:b3:d7:34:cf:69:c8:60:
eb:c6:0d:8b:07:2d:0c:ab:5e:fe:b4:b1:dc:fe:7b:
b4:fd:17:9e:c7:f8:e1:ed:63:14:f2:de:0a:49:18:
e7:1d:f0:1f:c2:86:53:b0:02:a2:28:4b:97:94:fd:
bd:05:c6:43:98:11:51:52:78:c8:86:53:53:7a:c1:
3e:dd:e4:86:3c:36:49:70:26:1f:66:82:83:7a:da:
95:fe:0b:d2:7f:ca:44:7b:5f:ed:0a:8d:09:2f:ca:
85:7b:a7:f8:f0:5d:fd:77:ac:2a:c6:10:3e:e6:00:
8c:5f:0d:cc:5d:e1:9b:59:50:2b:e6:f5:d0:c4:88:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:69:8D:62:00:00:9D:1C:26:71:26:01:33:42:03:9E:0A:2C:2C:0E
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/2mmNYgAAnRwmcSYBM0IDngosLA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.236.0/23
79.110.237.0/24
185.142.52.0/24
185.142.54.0/23
193.177.0.0/24
193.177.162.0/24
193.177.182.0/24
193.178.0.0/24
217.119.141.0/24
IPv6:
2a09:ca00::/29
2a0f:9240::/32
Signature Algorithm: sha256WithRSAEncryption
07:3e:7d:da:44:66:91:2e:65:4a:1c:e8:aa:d7:4f:fa:90:b8:
52:f5:4f:fe:39:43:b4:ef:cf:8c:ad:c5:ad:f7:21:75:f9:b2:
a0:a1:6c:be:d5:28:6b:2e:e8:15:c2:ea:6a:24:8c:cf:f2:59:
87:23:be:58:7b:07:e1:a2:2b:a9:14:47:58:33:50:d8:1c:72:
ad:95:27:87:10:31:0b:66:c0:77:88:ae:df:f2:ff:ff:42:46:
92:fc:39:10:90:4e:5c:42:5c:37:8f:11:ff:d9:a6:97:43:d0:
8e:1a:f2:d8:d7:a0:d7:df:8a:e4:f1:f2:ca:ff:0e:9c:fc:da:
f3:ad:fa:b7:6e:85:8d:4a:ce:de:fd:0e:5f:89:d9:5e:22:c4:
e3:a6:24:cd:d8:b1:d4:53:73:7c:68:24:4e:29:e4:df:6e:5a:
59:53:71:26:36:b9:af:e8:75:44:9c:cc:46:ba:8a:ac:32:f2:
aa:90:bb:6c:fc:35:8f:34:8b:2c:c6:a7:dd:71:5e:3a:77:b1:
95:40:96:fb:d6:40:02:76:5b:e1:43:9e:6e:15:07:73:64:43:
d4:28:77:a3:0f:d2:42:50:6a:27:93:fb:d1:9d:33:9f:d6:14:
45:88:b7:ff:c0:c9:b4:58:38:88:ed:35:8d:d8:73:f5:5e:f6:
4c:23:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:08:04 2026 by rpki-client