Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2tlRSzuVZJozNsm92qeC_HRS5VQ.roa
File: 2tlRSzuVZJozNsm92qeC_HRS5VQ.roa (raw, json)
Hash identifier: yueuGBaJv0Pdlqdt0T/5yTilUI/VbmcrBZHjuEAr4jI=
Subject key identifier: DA:D9:51:4B:3B:95:64:9A:33:36:C9:BD:DA:A7:82:FC:74:52:E5:54
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019C8F57E1E8ABB3CE30CB45D32EAEDD068A
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2tlRSzuVZJozNsm92qeC_HRS5VQ.roa
Signing time: Tue 24 Feb 2026 11:10:27 +0000
ROA not before: Tue 24 Feb 2026 11:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203753
IP address blocks: 46.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:57:e1:e8:ab:b3:ce:30:cb:45:d3:2e:ae:dd:06:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Feb 24 11:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dad9514b3b95649a3336c9bddaa782fc7452e554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:87:4b:8d:99:43:7f:2e:d4:f9:f4:12:08:
65:78:ae:a5:21:ef:13:95:7b:7a:b5:80:52:55:e1:
b4:e8:6b:c8:99:88:9f:62:64:e9:62:12:61:e2:53:
d6:3e:88:75:f1:79:07:6f:14:2d:01:06:e4:36:16:
cd:7e:37:59:16:c4:12:50:c1:29:6b:aa:8e:24:ee:
d1:26:c4:ee:ed:1d:39:19:dc:77:b1:f2:08:12:bb:
b7:d3:56:89:d3:d3:9c:bb:a5:e6:10:fd:de:02:6d:
f7:58:43:54:f2:7f:81:26:31:76:06:ce:77:c9:65:
fa:cd:98:9f:e8:87:5f:42:ea:2a:32:f9:ac:7d:c6:
a1:5d:88:e0:58:ac:54:24:36:99:fc:38:45:e4:31:
73:70:0a:4d:27:12:90:20:03:1f:67:1b:50:37:c1:
2e:25:be:34:b0:b2:60:bb:c2:c8:eb:f9:1b:4f:78:
73:7b:5f:a6:40:7b:7d:33:17:b8:74:e7:f8:7c:ab:
de:15:ab:05:7d:ae:8c:05:75:b3:e4:66:9c:e4:bf:
8a:af:b9:e6:7d:85:3e:01:43:59:15:b3:ad:2e:ef:
b0:48:d2:42:99:c2:5d:54:dc:12:b1:e5:01:ec:a7:
6d:34:ca:8a:23:79:b1:69:25:be:bb:cf:01:1e:4f:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D9:51:4B:3B:95:64:9A:33:36:C9:BD:DA:A7:82:FC:74:52:E5:54
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2tlRSzuVZJozNsm92qeC_HRS5VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c3:16:45:89:8f:c8:91:f9:bb:9f:46:a8:ff:7a:39:f5:a7:
4e:bc:41:d1:93:28:4b:f1:ed:6f:90:35:b8:b3:be:ff:66:99:
71:e1:19:cb:67:f6:a2:54:b0:8b:e0:78:b7:a5:1e:68:ad:0b:
a9:fc:8f:25:a4:d5:93:cd:1b:3d:33:09:b4:1a:85:94:1b:05:
e6:85:37:a6:ee:5e:d5:0a:df:3e:96:85:aa:31:e3:55:9d:6b:
3b:60:27:88:8a:3f:9e:07:8c:2f:73:9f:96:92:30:3b:ec:f7:
47:46:d8:cf:dd:65:6d:36:82:be:13:84:a6:1f:a1:3f:29:00:
32:7d:8f:4a:06:d7:ba:f6:48:dd:8b:b7:aa:ed:f4:8e:c7:be:
79:66:7d:c9:f4:f1:b0:f7:98:73:62:03:9a:49:81:9a:6e:68:
20:0b:07:c7:a1:fe:f3:a6:8e:8a:cf:d7:ce:a2:17:bc:74:9d:
d2:a1:d0:0f:44:37:aa:48:02:8b:ad:da:e9:5c:aa:05:5d:18:
10:76:89:71:e1:97:c0:84:42:78:62:0c:0a:92:37:f6:45:0f:
ba:ff:a5:63:c5:1f:54:f5:ca:67:ca:40:c1:dc:41:5f:a4:7d:
db:39:c8:59:8b:88:2f:4a:65:43:c2:ca:93:fb:42:98:37:90:
1a:d6:fb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:43 2026 by rpki-client