Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/2dBky218zKrn4OXnjm-ilSH34qs.roa
File: 2dBky218zKrn4OXnjm-ilSH34qs.roa (raw, json)
Hash identifier: ZKNPqv0RgWGaqgp7Tv/SGKJZsZs3Pf6psFQxyyjEa10=
Subject key identifier: D9:D0:64:CB:6D:7C:CC:AA:E7:E0:E5:E7:8E:6F:A2:95:21:F7:E2:AB
Certificate issuer: /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Certificate serial: 019FCCF420BE781E194AFCD2BC676932929A
Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/2dBky218zKrn4OXnjm-ilSH34qs.roa
Signing time: Tue 04 Aug 2026 13:26:19 +0000
ROA not before: Tue 04 Aug 2026 13:26:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34606
IP address blocks: 77.72.32.0/21 maxlen: 21
77.108.0.0/18 maxlen: 18
81.30.0.0/20 maxlen: 20
82.215.128.0/18 maxlen: 18
82.215.128.0/22 maxlen: 22
85.159.176.0/21 maxlen: 21
85.208.232.0/22 maxlen: 22
88.87.96.0/19 maxlen: 19
94.100.34.0/23 maxlen: 23
95.140.136.0/21 maxlen: 21
185.73.244.0/22 maxlen: 22
185.117.216.0/22 maxlen: 22
185.127.32.0/22 maxlen: 22
185.167.20.0/22 maxlen: 24
194.116.0.0/18 maxlen: 18
194.176.126.0/24 maxlen: 24
2a02:260::/32 maxlen: 32
2a03:4560::/32 maxlen: 32
2a06:8580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:f4:20:be:78:1e:19:4a:fc:d2:bc:67:69:32:92:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Validity
Not Before: Aug 4 13:26:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9d064cb6d7cccaae7e0e5e78e6fa29521f7e2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:44:fc:78:b8:c7:ea:db:c8:4d:0c:9f:ec:
8a:35:96:0f:08:1d:ec:18:71:66:6c:36:b1:a6:2d:
a5:91:8b:bd:3b:d0:de:54:3e:c8:eb:d7:7c:ea:1a:
37:73:38:41:b2:2c:08:c8:ab:2f:06:b1:c5:7e:5c:
e5:2a:32:3e:9b:13:0e:d9:e8:73:70:2a:ca:81:34:
b1:05:db:21:bd:c1:da:45:27:f9:a6:08:5e:63:f6:
f3:8e:19:b1:da:2e:46:de:92:6c:d0:df:8c:f0:1d:
e6:1e:7b:3c:6b:6f:da:27:fa:dc:35:35:79:e8:a7:
59:ca:4e:1b:d4:69:95:43:42:0c:96:e4:cf:2c:c5:
f6:57:52:f6:74:2b:4f:28:78:bd:04:12:86:d0:18:
8d:04:b6:ab:70:2a:ad:e1:67:1c:87:9e:d5:c9:09:
5f:55:6b:0f:00:4b:2e:02:6b:4b:38:57:95:8d:42:
79:92:62:c3:9f:aa:a7:c6:18:32:3e:5b:c6:7c:5e:
db:40:ca:48:a9:cb:51:a9:dd:d4:c4:f6:f7:d6:8a:
ab:5a:78:fa:72:5c:58:17:d8:e7:2e:82:ea:a7:fe:
5b:4f:98:e4:2e:ac:74:54:e2:15:ac:b5:86:8c:20:
f6:9a:a0:ae:66:ed:77:ab:9f:ea:90:79:8c:03:b4:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D0:64:CB:6D:7C:CC:AA:E7:E0:E5:E7:8E:6F:A2:95:21:F7:E2:AB
X509v3 Authority Key Identifier:
keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/2dBky218zKrn4OXnjm-ilSH34qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.32.0/21
77.108.0.0/18
81.30.0.0/20
82.215.128.0/18
85.159.176.0/21
85.208.232.0/22
88.87.96.0/19
94.100.34.0/23
95.140.136.0/21
185.73.244.0/22
185.117.216.0/22
185.127.32.0/22
185.167.20.0/22
194.116.0.0/18
194.176.126.0/24
IPv6:
2a02:260::/32
2a03:4560::/32
2a06:8580::/29
Signature Algorithm: sha256WithRSAEncryption
37:cb:77:0d:04:4e:df:f3:d5:1d:27:50:06:1c:7a:49:07:7c:
75:13:31:01:4f:41:6f:c4:5a:24:08:8c:84:cc:6b:b3:5e:22:
63:a0:94:a1:ff:7e:00:ab:9b:11:14:b3:f6:80:ec:90:5d:ca:
8b:a4:31:3c:ae:e6:28:7c:80:3d:d4:ac:fd:95:39:ce:10:32:
2a:09:d2:d6:5d:f5:c1:de:cd:d0:f8:c5:0e:f2:5f:cc:37:1e:
74:8b:7a:f0:c0:fd:80:37:d9:a5:a8:8d:38:aa:a8:33:dc:22:
da:d6:17:ff:a3:3d:40:f0:f7:88:c2:43:c8:93:2a:26:a1:1f:
6b:9a:ee:6c:54:1d:c5:b8:e1:eb:6e:2a:df:8a:9c:6b:20:8e:
0a:39:8b:90:46:3e:24:33:1f:30:f7:b6:f2:7a:0e:c8:db:d8:
a6:27:39:10:71:2a:f0:12:c2:73:66:5a:97:21:b4:cd:70:cd:
39:89:c4:40:c3:92:e4:be:4b:d1:e9:2c:8f:41:b1:5a:b7:a2:
67:36:c6:d8:71:78:4b:61:24:60:d0:25:55:fe:25:17:34:e9:
f2:42:80:93:6d:c2:21:57:31:35:8c:7c:2a:3e:01:c5:dc:0b:
a1:ce:85:1d:b0:25:0a:8a:68:21:f1:f4:54:43:53:a5:fe:72:
eb:fd:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:54 2026 by rpki-client