Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/2FZ7bGZT0r6ZI2S3NeIbZQkrv1g.roa
File: 2FZ7bGZT0r6ZI2S3NeIbZQkrv1g.roa (raw, json)
Hash identifier: ve6/VNnNzoVa8Gfg2EfkRiMaE6V/YjNFMKoutkm3z0M=
Subject key identifier: D8:56:7B:6C:66:53:D2:BE:99:23:64:B7:35:E2:1B:65:09:2B:BF:58
Certificate issuer: /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Certificate serial: 019DEDF1F0EA24B39C0323490EFE21E759CF
Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/2FZ7bGZT0r6ZI2S3NeIbZQkrv1g.roa
Signing time: Sun 03 May 2026 13:05:49 +0000
ROA not before: Sun 03 May 2026 13:05:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48756
IP address blocks: 91.212.22.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:f1:f0:ea:24:b3:9c:03:23:49:0e:fe:21:e7:59:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Validity
Not Before: May 3 13:05:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8567b6c6653d2be992364b735e21b65092bbf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:87:41:19:33:04:8e:50:83:dc:71:04:b1:
16:f1:b0:81:77:1f:17:2c:fc:89:00:7f:c9:c0:4b:
9d:73:cc:e3:d2:59:c0:0a:4d:30:49:f3:84:d7:7e:
94:f7:32:1c:96:7e:0a:40:b3:aa:61:55:1d:06:59:
f2:68:48:e9:f3:4b:d9:e0:08:7d:97:fe:da:15:c7:
69:cc:80:b6:61:aa:42:1b:b2:9a:af:31:4e:41:ad:
8b:ca:af:c2:94:36:85:9c:1f:3e:43:00:d9:f3:0a:
d4:29:c7:af:3c:5e:b5:16:63:26:9d:86:fe:25:8a:
01:ee:5d:44:24:2c:ce:a2:b0:57:b3:be:b9:04:5a:
2c:ab:65:d1:66:ac:dd:64:e2:bf:4f:92:eb:82:de:
9f:93:7b:10:c8:c4:44:62:32:09:d6:d8:7d:50:66:
33:27:aa:54:34:dc:fc:ef:c6:7c:99:f6:b7:05:9c:
1d:da:5d:e8:c7:9b:db:59:1b:32:72:5a:f2:e3:23:
74:0e:69:69:a5:ff:38:ac:68:ca:23:03:50:6c:d1:
6e:56:c6:c3:30:93:ec:46:49:8c:27:15:8e:33:3e:
a1:70:a2:d4:4c:50:2f:bb:42:25:da:ca:0e:40:01:
63:53:6a:9a:a8:6a:2e:33:8b:63:fb:00:7e:54:f8:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:7B:6C:66:53:D2:BE:99:23:64:B7:35:E2:1B:65:09:2B:BF:58
X509v3 Authority Key Identifier:
keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/2FZ7bGZT0r6ZI2S3NeIbZQkrv1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.22.0/24
Signature Algorithm: sha256WithRSAEncryption
46:59:e3:db:de:5e:c8:8e:92:e9:91:48:c8:09:30:9d:73:77:
ca:d7:58:b4:8e:30:2c:cb:6a:c8:e2:a6:77:7b:26:2d:7e:59:
d8:4b:59:ed:7e:22:9d:fc:7a:1a:b0:25:d6:fb:ee:54:f2:a9:
38:33:62:70:ef:6a:1f:fe:db:3e:8c:b9:ec:a0:59:99:0a:7a:
c2:1d:75:55:65:39:9d:73:6e:84:46:f7:b3:d5:de:af:ae:f5:
88:de:8c:b1:03:46:4a:a4:cc:9f:80:08:a6:ed:ab:08:b7:ef:
f6:01:1b:62:5a:49:e7:08:f2:c3:ca:a3:6e:84:37:06:30:af:
74:27:99:97:c4:76:05:88:fa:b9:2a:62:84:95:4c:73:93:a2:
d8:9d:cb:1a:e0:3c:d4:5f:63:e9:15:fd:82:51:83:c8:ef:4f:
ae:79:22:30:9b:bc:3e:74:70:be:3d:06:ed:c5:48:5e:a9:d5:
ee:83:5d:ad:4e:6b:5d:e3:e4:09:d7:20:f8:f2:da:c8:ef:0b:
50:60:c1:d5:b0:0a:4c:15:af:91:1d:ce:4d:6f:31:c1:2c:a4:
aa:bb:f5:48:a5:6c:35:fe:59:e7:3f:3b:98:03:0a:a4:e2:d5:
db:c5:aa:9d:73:78:92:c6:7b:56:97:0d:54:05:74:0c:86:2b:
0b:01:27:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:04:19 2026 by rpki-client