Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa
File: k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa (raw, json)
Hash identifier: 9Q1EqZG/a6iEl1F6uqJOmdn36R+djh5MF5HhvgX3ijc=
Subject key identifier: 93:65:62:06:7A:2F:05:2A:C9:EB:E4:33:52:58:7F:4A:07:D4:41:37
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 019B7D5B89F397479E30E54CBBD3CED7AAFA
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa
Signing time: Fri 02 Jan 2026 06:18:29 +0000
ROA not before: Fri 02 Jan 2026 06:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202907
IP address blocks: 185.150.144.0/22 maxlen: 22
2a07:7140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:89:f3:97:47:9e:30:e5:4c:bb:d3:ce:d7:aa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Jan 2 06:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=936562067a2f052ac9ebe43352587f4a07d44137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dc:ce:7a:43:8c:45:18:75:02:b3:b5:9a:a0:
21:fb:ce:27:13:ff:24:d3:ea:dd:eb:c3:39:3b:47:
8b:a3:60:9e:f4:97:f5:7d:27:d1:29:b5:30:68:32:
06:a3:bb:00:79:8d:13:05:e0:32:c6:79:c1:ce:b3:
a8:3d:47:00:55:e2:1a:98:0d:7f:75:6e:79:16:23:
70:b3:3d:60:b5:75:90:63:1f:17:5b:3b:9f:3e:f6:
72:9d:b6:a8:0c:36:7e:34:9f:c8:73:16:9b:68:18:
45:ef:e5:5f:a0:5e:33:95:c2:a1:2c:6a:8f:c6:4a:
b4:5f:de:ab:6b:b8:95:3b:b6:cb:d1:ea:50:d9:54:
fa:fc:25:d5:98:c3:79:4f:18:7f:ab:fe:d3:17:ec:
fa:0f:0a:20:4c:79:1f:a4:8c:4e:b4:c1:e0:d1:05:
fc:3c:a9:6d:80:f0:75:69:14:f6:ef:cd:d3:f9:49:
04:fc:65:8b:c7:d6:b9:fa:07:ef:75:4e:c9:37:91:
7d:bc:65:0a:fc:53:31:13:82:46:75:48:dc:33:be:
96:22:91:f6:81:ae:94:26:87:88:cf:05:63:77:e0:
4e:e0:d4:ce:f0:29:b7:04:2b:e0:c6:9a:18:6b:31:
3a:93:b9:cd:26:c5:92:44:0b:a1:a0:b9:33:fc:62:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:62:06:7A:2F:05:2A:C9:EB:E4:33:52:58:7F:4A:07:D4:41:37
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.144.0/22
IPv6:
2a07:7140::/29
Signature Algorithm: sha256WithRSAEncryption
7f:61:98:3b:e3:5f:91:1b:e6:dd:cb:3b:2f:52:57:04:3c:31:
9e:2b:1e:34:7e:94:a2:7a:ac:dd:59:90:1e:d1:d5:93:61:a9:
46:06:e2:62:a0:3b:e9:3c:d6:37:34:ae:bb:20:e9:ba:1e:77:
10:5d:fa:9a:f8:14:a3:69:85:1e:d5:27:3b:ee:14:35:58:6b:
cc:58:ed:82:59:61:ca:43:25:2d:e5:7f:87:e8:d6:06:e2:c8:
ef:97:7a:24:47:04:f9:5a:eb:b0:72:c5:be:c4:32:1f:22:3f:
3d:28:3f:68:a5:26:af:03:d8:16:ac:8e:01:3b:cd:3b:21:f4:
1c:ae:0d:9b:9d:00:e4:7d:33:07:6f:70:6c:9d:f4:0a:56:b8:
4b:76:02:60:9a:c9:be:a3:7e:db:8b:94:1d:ea:7d:e4:68:b2:
18:c8:86:bc:dc:db:99:c6:35:ce:dd:2a:33:f1:c0:6e:3f:b8:
03:47:cd:f9:48:b2:ef:91:83:cb:cf:b7:16:5b:b3:ed:3e:3f:
0e:34:98:c6:35:9d:09:2f:1d:26:9e:bd:ce:df:86:eb:e9:98:
9d:6f:67:66:b5:f2:28:b7:cf:d8:74:ba:39:bb:ee:83:6e:c9:
d2:5f:81:01:b5:0e:c9:80:c2:79:52:80:6c:a4:f5:38:3e:80:
dd:07:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:11:35 2026 by rpki-client