Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tVgOE-m2MHqvdbpBQwqvy1sbwc8.roa
File: tVgOE-m2MHqvdbpBQwqvy1sbwc8.roa (raw, json)
Hash identifier: k5ilIHukVm9VSI8ZQDNkAw5F8xNdR+YlZ7jncKdDFGk=
Subject key identifier: B5:58:0E:13:E9:B6:30:7A:AF:75:BA:41:43:0A:AF:CB:5B:1B:C1:CF
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019D9B16922D54C2FD7779172D3435C33B5D
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tVgOE-m2MHqvdbpBQwqvy1sbwc8.roa
Signing time: Fri 17 Apr 2026 10:57:20 +0000
ROA not before: Fri 17 Apr 2026 10:57:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57013
IP address blocks: 138.249.9.0/24 maxlen: 24
170.168.0.0/24 maxlen: 24
170.168.40.0/24 maxlen: 24
170.168.62.0/24 maxlen: 24
170.168.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:16:92:2d:54:c2:fd:77:79:17:2d:34:35:c3:3b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Apr 17 10:57:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5580e13e9b6307aaf75ba41430aafcb5b1bc1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:ff:7b:cd:9a:c7:d6:43:86:a8:aa:89:24:
7b:5b:a5:b7:ea:f9:c7:b2:e8:bf:d4:0d:6d:64:32:
a9:29:4b:f1:2b:47:2d:14:e5:12:bf:19:63:4b:6c:
7e:9a:98:98:7a:c1:49:2e:d9:87:8a:a3:db:96:c7:
c8:64:ef:3e:97:36:a5:72:0f:e4:f7:04:63:38:1c:
c8:74:b9:84:1d:d8:e7:0f:f5:d0:1c:89:13:88:66:
67:b0:72:5a:94:fc:e9:86:99:01:81:32:07:f3:cc:
7e:2f:5a:92:5c:05:7e:ce:16:41:3d:1a:f4:e5:a8:
ac:e6:d9:d9:b7:f1:65:d3:09:37:51:bd:a6:0e:1f:
03:bd:de:f4:f6:ac:b9:3b:56:83:94:3b:5d:02:3d:
d3:82:9e:52:be:72:c7:e4:58:8a:c1:86:57:e2:fa:
6a:5e:a0:00:ec:11:31:1c:41:ba:97:00:9f:06:3e:
10:3c:61:bd:99:e4:b0:fb:da:57:36:21:cb:c6:87:
95:6a:b1:37:f2:ca:a9:f3:48:f3:63:c1:43:ef:d6:
8f:3e:1f:83:83:14:07:bf:a1:fb:2e:67:2a:47:0d:
a8:9b:ac:8d:ca:40:57:96:51:53:35:d6:78:1a:00:
14:22:2c:86:f1:1e:66:87:3f:7a:13:42:d8:4f:53:
a3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:58:0E:13:E9:B6:30:7A:AF:75:BA:41:43:0A:AF:CB:5B:1B:C1:CF
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tVgOE-m2MHqvdbpBQwqvy1sbwc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.9.0/24
170.168.0.0/24
170.168.40.0/24
170.168.62.0/24
170.168.67.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d0:16:d1:67:6f:84:10:7f:7c:01:91:c4:ba:27:27:4b:53:
26:4f:f2:ce:e9:3d:23:be:94:c7:d1:f9:2e:5b:55:14:02:ca:
c7:66:2c:e0:96:17:3c:90:09:c0:d4:dc:96:12:ae:a3:fa:35:
ed:da:c5:0e:6b:ee:96:03:5e:78:e5:dd:55:e7:24:88:9b:de:
bd:d8:ac:1b:93:71:41:14:e1:b1:8a:85:54:57:c6:d9:7d:29:
d8:17:a6:1a:e3:48:8a:fc:8b:16:f8:f5:10:53:54:1d:cf:a0:
c4:bd:cb:8f:52:d8:14:7f:a0:ab:e4:ed:a3:27:ff:be:e5:a3:
c3:51:07:32:1c:b6:3a:81:22:e9:85:f5:de:f1:b7:dd:65:b3:
1e:10:40:c8:91:ae:b0:04:7b:63:6c:f1:c4:a2:40:f9:ee:0b:
c0:f2:a6:cb:09:8c:92:2e:b2:49:c4:77:68:57:26:26:df:8a:
a2:e9:91:fa:90:c4:b7:46:fb:b7:e1:9e:70:58:f6:c8:4b:77:
78:b7:98:bd:aa:d8:2a:dd:15:13:60:c3:2e:e7:31:2b:43:7c:
d9:0d:0e:02:07:db:90:be:28:27:89:21:b9:89:32:96:93:de:
cf:84:af:58:c7:2e:79:2e:39:9b:73:56:e3:4c:ec:3d:75:d0:
47:bb:03:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:47 2026 by rpki-client