Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/2y3USkC1qAnwGYPO7a4mEoHqQAA.roa
File: 2y3USkC1qAnwGYPO7a4mEoHqQAA.roa (raw, json)
Hash identifier: 7RoT/7hhVt5dU4N+8wMTREMvwqSNhTnBukVmTpE6rtc=
Subject key identifier: DB:2D:D4:4A:40:B5:A8:09:F0:19:83:CE:ED:AE:26:12:81:EA:40:00
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 019E96C20A8AB9B5A47F579EBEDDC78E3205
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/2y3USkC1qAnwGYPO7a4mEoHqQAA.roa
Signing time: Fri 05 Jun 2026 07:49:19 +0000
ROA not before: Fri 05 Jun 2026 07:49:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50873
IP address blocks: 37.228.130.0/24 maxlen: 24
94.247.143.0/24 maxlen: 24
185.97.4.0/22 maxlen: 22
185.97.6.0/24 maxlen: 24
194.104.114.0/23 maxlen: 23
194.104.149.0/24 maxlen: 24
2a06:1c0::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:96:c2:0a:8a:b9:b5:a4:7f:57:9e:be:dd:c7:8e:32:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Jun 5 07:49:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db2dd44a40b5a809f01983ceedae261281ea4000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:ba:a4:fe:b0:29:70:ac:4a:54:ba:e7:b4:
5a:3f:79:6d:be:c8:83:d8:2e:76:a1:fe:f4:73:d0:
ca:c7:43:32:4d:06:fe:b1:c8:e4:d2:0e:6c:23:b0:
25:c2:d5:72:5d:b6:f1:da:46:4d:93:55:a3:b3:fb:
6b:0b:bb:53:e1:ef:af:e1:95:06:8e:24:e6:8a:2f:
fa:9c:b1:9d:19:1c:39:a1:09:e7:41:a0:8e:0d:81:
45:e5:9d:15:ca:e4:94:d1:5a:10:ee:60:21:ca:7e:
4c:64:42:71:4a:4a:5e:7a:cf:07:51:74:db:02:3c:
f3:42:7e:c1:86:84:16:84:10:5b:9f:f4:31:22:df:
c4:af:97:ca:5d:b8:c0:ea:ab:b2:9c:c2:6b:f3:3c:
4b:6e:34:4d:7b:f7:12:25:40:89:b9:0a:4f:04:87:
14:0f:4f:64:9b:f4:4c:75:cc:25:c0:d2:62:95:29:
e8:cb:93:59:01:93:7d:c2:dd:fb:74:f4:8d:0f:84:
15:bf:7e:17:80:fb:bc:62:15:97:1f:e1:6a:07:4e:
96:0b:a5:5b:da:64:2a:a5:cd:b6:4e:06:cb:c3:1d:
23:a3:06:f6:bd:c9:80:a6:36:a0:2b:21:90:26:88:
15:52:2d:f0:c5:aa:21:64:33:99:a3:91:56:bc:60:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2D:D4:4A:40:B5:A8:09:F0:19:83:CE:ED:AE:26:12:81:EA:40:00
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/2y3USkC1qAnwGYPO7a4mEoHqQAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.130.0/24
94.247.143.0/24
185.97.4.0/22
194.104.114.0/23
194.104.149.0/24
IPv6:
2a06:1c0::/30
Signature Algorithm: sha256WithRSAEncryption
1f:9b:32:50:3e:5d:1b:06:f5:86:0d:35:1d:b0:fb:69:7c:2b:
01:58:0b:4b:b8:64:7d:36:d2:d5:3d:a6:9d:8d:e0:c8:07:3e:
6c:61:2d:68:07:35:90:a0:4f:75:ff:93:36:ff:9c:75:41:bc:
96:27:42:bd:30:ee:b4:b8:7c:c6:8f:c3:ce:68:02:f2:d1:02:
b3:23:9b:45:8e:51:3a:c4:a8:3e:1a:5f:23:e6:8a:32:5d:1a:
7a:8a:fc:89:d8:dc:90:85:1d:72:92:e3:e3:06:07:96:de:39:
1f:e8:86:90:e4:1a:91:40:04:c9:62:f4:7a:ab:d7:40:de:dd:
2d:04:8c:cc:8e:ac:6a:fc:c4:6d:e4:34:04:9f:20:14:43:15:
49:0a:6f:ed:42:73:1a:fc:09:05:c6:4d:d3:78:69:aa:77:29:
50:dc:ac:70:79:3c:08:04:72:47:ef:55:c5:69:24:65:39:a5:
7e:62:92:37:7c:91:e5:3f:c7:f0:b5:c7:78:61:2a:5a:78:05:
14:c2:e6:66:a5:a8:57:15:03:fb:bf:ad:3b:18:6e:9f:3a:a0:
21:24:c9:f3:20:3a:6c:33:c0:f0:31:66:d5:b1:55:ee:5f:9d:
0f:9a:53:38:4c:67:5e:5c:33:7f:42:2b:6b:70:41:ae:0d:53:
6d:23:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:07:38 2026 by rpki-client