Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/2CaattKCCXKIVF9xkVYTuJxwHHM.roa
File: 2CaattKCCXKIVF9xkVYTuJxwHHM.roa (raw, json)
Hash identifier: dctivd3XyJ7mzFbM4DNs+TnMvYqX3hrRfkE7YkAuJIc=
Subject key identifier: D8:26:9A:B6:D2:82:09:72:88:54:5F:71:91:56:13:B8:9C:70:1C:73
Certificate issuer: /CN=a16102e80735fec8921e9f509fc53b10e2be9505
Certificate serial: 01A17EAC072A0927FC9C26D0EBB4DAFA3BB4
Authority key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/2CaattKCCXKIVF9xkVYTuJxwHHM.roa
Signing time: Tue 27 Oct 2026 18:42:45 +0000
ROA not before: Tue 27 Oct 2026 18:42:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218482
IP address blocks: 2.152.86.0/24 maxlen: 24
2a0e:e001:50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:ac:07:2a:09:27:fc:9c:26:d0:eb:b4:da:fa:3b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16102e80735fec8921e9f509fc53b10e2be9505
Validity
Not Before: Oct 27 18:42:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8269ab6d282097288545f71915613b89c701c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:d9:4a:3a:cd:fa:f1:00:95:9e:60:e5:a9:
58:e3:d5:de:c1:f0:7a:fe:2f:55:2b:88:d3:0a:76:
7d:85:b2:3b:e8:d3:0a:1a:6b:1d:7f:33:67:70:ab:
5d:00:30:99:61:c7:8d:72:73:ad:47:4b:3d:24:d4:
a1:7a:90:77:c9:a2:44:6d:0c:2e:f2:e0:80:1e:77:
1d:2d:90:3d:e3:e7:f3:39:0d:6a:77:c8:c7:be:67:
70:bf:b0:7d:98:a1:72:42:a2:2f:28:29:38:e0:28:
77:49:3f:3f:ed:6d:d3:f9:b0:ef:b0:2a:e1:a2:63:
3e:a7:af:f3:c8:5d:b2:90:0f:42:b3:70:e2:6c:11:
4a:1e:c9:37:0f:e4:36:a2:a2:76:d8:64:95:35:dd:
67:73:d4:7b:a8:f5:f4:b1:1a:6a:52:ce:97:04:37:
f5:4e:96:ef:62:6f:ab:70:75:cd:e8:58:22:5e:68:
e7:e4:a6:f0:7f:d1:56:24:e5:84:de:59:4b:6d:e1:
c3:26:aa:f2:26:e0:79:59:6f:4e:a3:36:26:3e:ce:
e5:c1:15:78:70:5b:4c:5e:ec:74:57:87:b9:2d:5f:
bd:42:3e:6b:be:66:87:f4:63:f7:4d:a1:cf:f1:3e:
4f:47:28:6d:97:67:1b:4f:1e:02:bc:61:8f:9f:fb:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:26:9A:B6:D2:82:09:72:88:54:5F:71:91:56:13:B8:9C:70:1C:73
X509v3 Authority Key Identifier:
keyid:A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/2CaattKCCXKIVF9xkVYTuJxwHHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.86.0/24
IPv6:
2a0e:e001:50::/44
Signature Algorithm: sha256WithRSAEncryption
76:84:f1:3e:4d:30:1f:c0:9c:83:3c:03:42:cb:f1:53:a7:6b:
3b:e1:08:82:eb:8b:87:f0:91:76:b7:95:e6:72:96:97:b7:33:
2f:c6:69:88:15:0c:f1:e2:1d:e2:f5:78:e2:c0:14:56:fa:90:
8b:f9:d0:b8:51:4d:43:a1:8d:7f:43:fd:96:2f:f4:24:69:45:
2a:87:7e:b1:1c:ed:c0:00:dc:66:3f:91:4e:bf:e4:b9:42:75:
1c:d2:90:40:ae:58:29:b3:72:3b:d7:74:09:40:32:8f:a8:67:
50:e0:7e:3b:bf:ba:05:f8:84:d6:5a:bc:66:8f:36:0e:f7:d0:
c0:10:b0:a1:a3:20:db:a0:a2:1a:c8:fe:21:fe:80:60:89:98:
9f:bb:bb:16:73:1f:6b:54:28:19:68:01:6a:68:b9:83:c5:dd:
90:33:40:b5:b4:99:3c:b9:1d:d4:a3:53:dd:7d:c2:dd:7a:89:
5a:65:09:2a:4e:3d:25:e1:b9:62:be:dd:05:70:80:35:73:3a:
90:1f:29:fe:2e:a5:15:ad:97:37:25:56:b4:ae:bc:b7:6f:0c:
65:89:0f:d9:c5:3a:2d:57:1c:c2:2e:2c:ac:23:e4:33:fd:54:
27:c0:d3:e3:0b:c1:ee:87:93:ac:52:8d:05:9f:e1:d6:0b:99:
a3:07:2e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 02:18:38 2026 by rpki-client