Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/2rcxBHGL4x93CfXo-NPv7qKyexI.roa
File: 2rcxBHGL4x93CfXo-NPv7qKyexI.roa (raw, json)
Hash identifier: OhrQvBYkbywXjuEYwFRQJCtO6gO1OzPsXE7KTNRfFGs=
Subject key identifier: DA:B7:31:04:71:8B:E3:1F:77:09:F5:E8:F8:D3:EF:EE:A2:B2:7B:12
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 019FAA1FBC1608C41143B4A081AB3C9EDFF0
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/2rcxBHGL4x93CfXo-NPv7qKyexI.roa
Signing time: Tue 28 Jul 2026 19:07:14 +0000
ROA not before: Tue 28 Jul 2026 19:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61087
IP address blocks: 83.217.208.0/24 maxlen: 24
83.217.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1f:bc:16:08:c4:11:43:b4:a0:81:ab:3c:9e:df:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Jul 28 19:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dab73104718be31f7709f5e8f8d3efeea2b27b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:b7:5e:41:92:6b:8a:47:c2:16:46:6e:70:
3e:00:56:f1:b3:2e:98:14:4d:e3:8a:26:6a:bf:f7:
c3:95:46:28:6b:8b:e2:3b:f5:6d:47:75:d7:2f:63:
97:19:1f:23:c6:e1:5c:bd:60:eb:4e:0e:2b:b1:ac:
fe:2f:06:a7:8d:a1:80:a6:a1:02:66:98:09:fd:f3:
9e:f3:cb:e2:81:26:a0:3b:4e:83:9f:eb:9e:fc:eb:
b9:28:c2:07:2e:7c:c2:d9:1b:44:ed:06:47:99:76:
45:78:05:6a:85:dd:16:ec:ba:8c:b6:50:4f:78:1c:
a5:fd:5a:f8:17:82:0f:ed:a8:8f:08:9a:fa:42:a1:
de:80:ad:56:ec:1c:94:81:b3:6c:ad:d5:6f:5f:b7:
e5:72:3a:d8:3a:87:a6:9d:68:fd:86:a1:6c:42:bf:
56:98:99:45:ba:c1:c6:bd:68:8f:67:e6:04:cf:dc:
92:07:9d:83:c3:5d:f4:d2:3e:b4:f9:8e:85:cd:5c:
b2:29:a0:e4:69:48:48:7c:42:d4:f4:3c:8d:1a:08:
c2:38:32:ed:2f:15:0b:7e:30:38:82:09:5b:5b:08:
d2:fd:40:86:50:bb:ab:b6:25:eb:fa:dc:7b:c1:54:
b0:91:25:fa:a9:cc:08:c8:e6:86:68:64:17:30:e4:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B7:31:04:71:8B:E3:1F:77:09:F5:E8:F8:D3:EF:EE:A2:B2:7B:12
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/2rcxBHGL4x93CfXo-NPv7qKyexI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.208.0/23
Signature Algorithm: sha256WithRSAEncryption
11:ed:63:e0:b8:88:4c:74:0f:f7:11:1d:66:12:e2:c4:50:b6:
bb:a3:8f:80:0c:c9:80:3a:f2:72:30:82:90:0a:47:1c:96:4f:
71:16:24:47:14:7a:e7:33:30:75:07:cf:f3:97:e9:a5:59:d9:
18:c1:c4:9b:cf:9c:26:36:16:99:4c:39:d4:eb:06:2c:4f:16:
21:e7:32:ec:91:8a:03:c1:6a:6d:99:b8:a4:14:8b:87:fe:de:
7a:2a:42:82:d8:bf:5c:8b:1e:23:9c:12:c5:67:a9:4e:1c:c4:
8e:03:3c:7e:40:d6:20:6d:6d:a8:a5:27:da:48:ee:ea:e1:15:
02:c2:8c:74:bd:c2:59:a9:7f:09:67:d7:0d:e5:a9:9d:21:fc:
28:b9:15:62:3b:5a:16:77:d0:a1:f6:b6:93:62:47:c0:7f:18:
ef:9a:21:30:d0:ea:43:e2:ff:03:dc:09:14:bd:63:b6:09:a3:
69:da:7c:ac:a2:b2:56:f8:ff:0d:e9:b9:f9:62:c4:10:1e:f5:
bb:98:ca:e1:98:ac:48:7e:10:30:bb:6e:52:f9:b4:29:d5:e1:
fc:42:9e:fe:a1:cf:bd:40:78:c7:26:c3:57:42:c3:0a:14:dd:
e6:a2:ae:fa:74:6e:e5:6c:ea:23:3f:18:e3:9a:ae:bd:36:4b:
e3:2e:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:55 2026 by rpki-client