Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/2u60Uo74AxJ11UUuctV2OGQc0ZE.roa
File: 2u60Uo74AxJ11UUuctV2OGQc0ZE.roa (raw, json)
Hash identifier: Vit2+XrBImMYaenWXBqa8hfnQViB75dhJdFUDZSO/+s=
Subject key identifier: DA:EE:B4:52:8E:F8:03:12:75:D5:45:2E:72:D5:76:38:64:1C:D1:91
Certificate issuer: /CN=02cb8efbafeb21e322d753fd72362086484f929b
Certificate serial: 01A0822FE6A918C6ECEBFB9FF6B313D0087C
Authority key identifier: 02:CB:8E:FB:AF:EB:21:E3:22:D7:53:FD:72:36:20:86:48:4F:92:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsuO-6_rIeMi11P9cjYghkhPkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/2u60Uo74AxJ11UUuctV2OGQc0ZE.roa
Signing time: Tue 08 Sep 2026 18:02:52 +0000
ROA not before: Tue 08 Sep 2026 18:02:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35280
IP address blocks: 164.37.50.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsuO-6_rIeMi11P9cjYghkhPkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:2f:e6:a9:18:c6:ec:eb:fb:9f:f6:b3:13:d0:08:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cb8efbafeb21e322d753fd72362086484f929b
Validity
Not Before: Sep 8 18:02:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daeeb4528ef8031275d5452e72d57638641cd191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:84:f9:91:85:d9:83:dc:34:70:36:97:e4:43:
04:4f:45:79:41:d3:8e:a9:d8:c5:0b:8d:2a:a2:49:
60:82:8c:0c:f4:32:da:68:0f:67:aa:c5:75:1d:2d:
3e:4e:77:e3:6e:74:c1:f4:d2:ca:ba:93:39:0b:7e:
15:62:09:b0:e8:35:e9:5e:83:e3:58:0c:17:29:fe:
72:55:50:35:ca:2c:59:c6:78:0d:e3:18:72:be:3a:
fe:10:c4:e4:a3:c0:37:5a:b0:66:b8:20:36:98:da:
33:12:b1:44:3a:86:f7:5d:ea:51:8b:89:26:56:31:
1f:48:0e:65:e1:a0:3d:09:bc:18:f1:b9:a3:b1:47:
06:ea:8c:5c:ad:c9:7f:aa:e2:b2:82:a9:8f:42:3e:
b6:8d:64:34:d2:d5:e7:50:20:07:1b:7f:f4:38:d7:
86:05:c0:8b:8d:c4:fd:f9:a3:15:00:7c:6b:03:67:
f4:2d:24:b8:6a:9f:fc:7b:44:a0:a2:2a:a3:e8:c5:
71:90:ba:e1:e9:2a:58:67:1d:82:e7:12:65:6f:3c:
36:f9:2b:f4:d4:49:f7:2b:4a:cc:e9:00:39:ae:13:
98:b7:e3:ed:98:b6:ad:a6:ff:ed:08:79:8b:01:71:
6d:d5:fd:b5:f7:a3:ae:88:1c:b3:5e:ec:33:58:a5:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EE:B4:52:8E:F8:03:12:75:D5:45:2E:72:D5:76:38:64:1C:D1:91
X509v3 Authority Key Identifier:
keyid:02:CB:8E:FB:AF:EB:21:E3:22:D7:53:FD:72:36:20:86:48:4F:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsuO-6_rIeMi11P9cjYghkhPkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/2u60Uo74AxJ11UUuctV2OGQc0ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.50.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:59:90:a6:9c:bf:d2:8c:50:d3:19:e8:4c:e2:19:c0:0a:17:
ce:bc:ef:f8:d7:c0:ef:50:88:c3:ca:79:a6:86:be:c0:da:4f:
9f:e3:a4:ae:1c:b4:95:41:ca:e4:f8:f9:c5:11:7f:34:66:3a:
18:77:3a:3d:5f:4c:94:08:6b:8a:ff:74:de:36:80:ea:e3:5e:
61:49:ad:21:60:3b:b5:50:7f:d3:6f:54:d9:e6:fc:88:5c:a9:
5b:47:75:1e:f8:2f:3c:75:4e:e9:75:9c:b4:20:57:cb:bd:a1:
92:c7:f2:da:c9:63:c7:f7:38:c2:5c:14:8c:34:e6:78:4c:b7:
20:d0:4f:11:66:29:e8:4b:3f:cc:43:9c:e3:27:d0:d0:7d:22:
64:44:c0:2d:32:e9:72:20:d6:fc:c5:3b:0f:00:05:dd:c0:81:
e8:dc:15:2d:59:b6:5b:b6:a6:27:aa:8a:c7:13:85:18:ff:4a:
fe:eb:fd:3d:f6:19:be:c2:01:00:a3:d6:24:c7:58:b2:64:d9:
db:83:27:10:7b:c6:6a:e9:42:13:f7:b8:00:ea:f8:51:89:f1:
4e:fe:65:0b:e8:c1:b0:b5:0b:33:5b:57:24:f5:e3:41:85:6b:
48:b8:97:81:44:82:b4:36:54:47:98:da:42:f0:ae:0c:6f:55:
a3:a4:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:06 2026 by rpki-client