Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Ur4D00JpYfxi4JhE0_xU7u_gCrM.roa
File: Ur4D00JpYfxi4JhE0_xU7u_gCrM.roa (raw, json)
Hash identifier: YQtrA08K4IKbYy6I/RT5uZs8zCmn62RY1Bdz1n/3+lQ=
Subject key identifier: 52:BE:03:D3:42:69:61:FC:62:E0:98:44:D3:FC:54:EE:EF:E0:0A:B3
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019FA8893F0964B9206EA3CA1951B0BBB406
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Ur4D00JpYfxi4JhE0_xU7u_gCrM.roa
Signing time: Tue 28 Jul 2026 11:43:14 +0000
ROA not before: Tue 28 Jul 2026 11:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197401
IP address blocks: 170.168.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:89:3f:09:64:b9:20:6e:a3:ca:19:51:b0:bb:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 28 11:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52be03d3426961fc62e09844d3fc54eeefe00ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:22:9b:0f:6c:95:a0:87:34:a1:d2:e8:90:
f5:8d:3e:b9:41:35:fb:23:9f:ef:54:23:65:02:e1:
ec:ed:df:9d:f6:cb:67:90:c6:6b:a0:c9:29:ba:e3:
83:d9:3f:4b:ae:d6:f6:4e:d3:4b:10:68:f1:3e:85:
1e:0d:09:01:75:51:7a:66:24:51:e3:1f:83:1d:f6:
0d:83:af:bb:95:8e:8f:9b:a5:5a:9a:e9:32:25:85:
c3:66:db:b9:b1:91:b8:e5:6f:23:62:39:d2:22:a6:
f9:2a:6f:e6:5b:3c:b6:c0:dc:02:3a:d2:c8:20:81:
c0:f9:d2:19:4c:69:84:e0:eb:04:96:c5:0e:27:8d:
0b:67:36:10:f2:1e:26:2f:d1:09:b7:0b:62:1f:20:
35:9f:66:bc:28:9b:67:b7:c7:6e:d9:17:eb:79:15:
40:4c:d9:f0:db:be:b7:e4:8c:43:6c:3f:92:ae:47:
78:51:ea:66:f4:e5:98:71:db:ac:5f:99:d8:13:d7:
5d:73:27:72:63:8c:b8:b0:62:9d:43:9a:fd:4c:42:
80:35:2f:bf:e0:fe:d3:20:08:3c:5f:f8:ad:22:28:
87:8d:f2:36:14:c9:1d:f3:97:06:52:82:1b:ee:50:
1d:b4:d6:1a:69:c7:64:09:dd:da:f9:78:94:59:a6:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BE:03:D3:42:69:61:FC:62:E0:98:44:D3:FC:54:EE:EF:E0:0A:B3
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Ur4D00JpYfxi4JhE0_xU7u_gCrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.90.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f1:e2:25:8c:df:fc:31:89:7f:10:d0:78:dd:2c:0c:2a:6b:
46:fd:23:ec:d3:79:37:2c:f0:af:5a:ed:4a:9e:a1:5a:34:0c:
0f:bb:6d:37:ba:3b:fa:04:dc:6e:9a:de:40:08:17:b8:c2:8e:
4b:2c:68:e9:19:d7:5a:93:7c:6a:c2:c7:38:88:f4:aa:26:04:
0c:15:81:96:c2:7b:be:c9:96:b4:2e:f7:5c:7c:ae:25:c1:74:
68:4f:aa:24:95:33:ff:d2:9a:6d:39:a6:1d:9c:f2:80:d8:1b:
87:dd:f3:28:fb:f2:09:93:70:e8:9b:76:73:72:ed:4d:2f:3f:
e5:ea:59:83:f6:5e:0b:87:44:e9:a6:b0:91:ad:01:97:7e:20:
b9:f3:8a:9d:f7:c4:89:a7:dd:0c:62:87:da:08:55:06:53:f2:
4e:41:ba:64:a8:c8:0b:9c:37:c7:aa:9b:75:19:1b:eb:39:08:
2d:bb:b3:da:da:15:b7:5f:6e:67:8c:a6:10:f3:a1:47:8f:f4:
cb:dd:54:06:2e:d2:e6:e8:89:ec:1a:e2:9c:24:fb:e9:14:00:
d2:51:07:87:02:9c:8b:10:85:79:5e:da:75:00:fe:20:17:d0:
3f:16:4b:64:2f:ac:64:ea:29:70:3d:10:82:e7:0b:68:23:59:
13:3f:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:59:44 2026 by rpki-client