Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/k2EXjym1Yd7Y9EHD-jZEwWr5Xpk.roa
File: k2EXjym1Yd7Y9EHD-jZEwWr5Xpk.roa (raw, json)
Hash identifier: 28T/aDB+4bqDiuHrW8eM3rDQ8pHQJtsvreWncRA2euw=
Subject key identifier: 93:61:17:8F:29:B5:61:DE:D8:F4:41:C3:FA:36:44:C1:6A:F9:5E:99
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 019FAA2190A81480741E1BE668DD7F5CC6A2
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/k2EXjym1Yd7Y9EHD-jZEwWr5Xpk.roa
Signing time: Tue 28 Jul 2026 19:09:14 +0000
ROA not before: Tue 28 Jul 2026 19:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61087
IP address blocks: 94.141.120.0/24 maxlen: 24
94.141.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:21:90:a8:14:80:74:1e:1b:e6:68:dd:7f:5c:c6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Jul 28 19:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9361178f29b561ded8f441c3fa3644c16af95e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:3e:12:52:12:b0:49:c2:bd:43:51:14:ce:
cc:f2:36:0a:95:6a:95:05:25:0a:8d:23:64:0d:4f:
b3:d1:8c:26:d4:4d:0b:59:38:41:a4:16:fe:99:97:
4a:bb:5a:3e:86:61:49:8f:13:9e:ec:21:6a:4c:ff:
7f:26:f2:f1:c3:ea:b3:15:c7:93:23:ea:89:bd:67:
c2:78:5d:23:b4:94:1f:8c:6a:0f:58:55:d8:3b:1d:
cb:95:84:4f:6e:a8:62:8f:70:e5:7e:a1:f2:14:ab:
e9:e0:80:68:58:e5:7c:ee:ef:2d:65:72:eb:ec:a7:
7d:8a:40:a5:a6:e0:0e:08:eb:86:08:48:c0:60:f5:
2a:3d:70:05:75:38:8f:04:67:26:da:db:84:4d:fb:
3b:21:95:7c:fb:5c:88:3c:13:d2:4e:11:f9:9e:4e:
9f:8b:60:c4:3d:80:e4:3a:b4:ca:a5:c6:62:90:75:
8e:14:cd:92:8b:d4:00:3c:d0:e5:2e:54:39:a7:fe:
87:51:f9:4f:e1:9e:c7:f8:76:c0:51:d6:c5:3b:59:
6f:dd:fd:21:57:e5:a3:53:c2:58:95:2c:3a:74:f2:
af:b6:28:35:94:56:e1:86:78:5e:c8:2a:d6:bf:be:
90:d3:24:49:f2:18:b2:94:68:3b:4b:61:91:dc:b2:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:61:17:8F:29:B5:61:DE:D8:F4:41:C3:FA:36:44:C1:6A:F9:5E:99
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/k2EXjym1Yd7Y9EHD-jZEwWr5Xpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.120.0/24
94.141.122.0/24
Signature Algorithm: sha256WithRSAEncryption
39:bf:bc:a8:42:86:a9:53:55:7e:fb:b8:23:9d:be:39:63:65:
f4:09:84:52:f2:55:99:11:ea:fb:e4:27:73:a0:06:84:e0:f5:
49:20:d0:01:e6:ce:a2:8f:f8:15:d5:89:03:7a:5b:20:20:fc:
24:6f:79:1f:80:57:21:ba:cb:64:5d:d9:9c:c9:db:bf:75:51:
ef:90:37:46:14:8f:f5:52:81:ed:60:e9:ca:08:6d:28:90:cf:
6e:66:b7:59:b3:26:4b:90:20:ff:78:26:7d:d9:ad:62:eb:16:
59:55:e3:78:cf:8e:14:07:c4:15:97:72:b7:bd:31:78:cc:e2:
6d:08:8b:49:18:41:be:07:35:20:f2:41:2e:03:73:44:4e:da:
c6:ee:1f:81:04:22:bd:30:8b:88:6e:f1:54:04:a7:c5:26:8a:
6f:a8:66:5c:19:35:d9:65:44:b3:39:b4:af:35:1f:06:9b:12:
a1:54:83:e5:47:69:11:24:8c:5a:30:8e:cf:71:8e:9f:64:6e:
57:c1:4f:b2:66:63:fd:b6:9c:cb:f6:a6:1d:4b:dc:02:82:98:
ac:98:a3:27:f6:e1:40:f6:86:6a:dd:d7:b5:9b:f5:80:58:d0:
72:b4:90:ce:87:3f:75:43:d3:6c:37:bc:93:41:61:62:de:b1:
03:18:e3:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+qIZCoFIB0HhvmaN1/XMaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmU5YmNlYmFlMjI4YjM2Yzg4M2MyN2VhNTUxOGU3MDRj
MTA5OTEwHhcNMjYwNzI4MTkwOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzYxMTc4ZjI5YjU2MWRlZDhmNDQxYzNmYTM2NDRjMTZhZjk1ZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5Q+ElISsEnCvUNRFM7M8jYKlWqV
BSUKjSNkDU+z0Ywm1E0LWThBpBb+mZdKu1o+hmFJjxOe7CFqTP9/JvLxw+qzFceT
I+qJvWfCeF0jtJQfjGoPWFXYOx3LlYRPbqhij3DlfqHyFKvp4IBoWOV87u8tZXLr
7Kd9ikClpuAOCOuGCEjAYPUqPXAFdTiPBGcm2tuETfs7IZV8+1yIPBPSThH5nk6f
i2DEPYDkOrTKpcZikHWOFM2Si9QAPNDlLlQ5p/6HUflP4Z7H+HbAUdbFO1lv3f0h
V+WjU8JYlSw6dPKvtig1lFbhhnheyCrWv76Q0yRJ8hiylGg7S2GR3LKANwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJNhF48ptWHe2PRBw/o2RMFq+V6ZMB8GA1UdIwQY
MBaAFBP+m8664iizbIg8J+pVGOcEwQmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQt
NWUyZDYwNzBlZjgzLzEvazJFWGp5bTFZZDdZOUVIRC1qWkV3V3I1WHBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQtNWUyZDYwNzBlZjgz
LzEvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXo14AwQA
Xo16MA0GCSqGSIb3DQEBCwUAA4IBAQA5v7yoQoapU1V++7gjnb45Y2X0CYRS8lWZ
Eer75CdzoAaE4PVJINAB5s6ij/gV1YkDelsgIPwkb3kfgFchustkXdmcydu/dVHv
kDdGFI/1UoHtYOnKCG0okM9uZrdZsyZLkCD/eCZ92a1i6xZZVeN4z44UB8QVl3K3
vTF4zOJtCItJGEG+BzUg8kEuA3NETtrG7h+BBCK9MIuIbvFUBKfFJopvqGZcGTXZ
ZUSzObSvNR8GmxKhVIPlR2kRJIxaMI7PcY6fZG5XwU+yZmP9tpzL9qYdS9wCgpis
mKMn9uFA9oZq3de1m/WAWNBytJDOhz91Q9NsN7yTQWFi3rEDGOOq
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:39 2026 by rpki-client