Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/2uMy4M-82lScLvQO4h9JL6UgHrs.roa
File: 2uMy4M-82lScLvQO4h9JL6UgHrs.roa (raw, json)
Hash identifier: 1SK2Ox5GjfDCB9YjDm9AoIxnblV4VhFX1E6RFNXREuQ=
Subject key identifier: DA:E3:32:E0:CF:BC:DA:54:9C:2E:F4:0E:E2:1F:49:2F:A5:20:1E:BB
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019C683E346291ED1762BA8254F3CF2360DE
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/2uMy4M-82lScLvQO4h9JL6UgHrs.roa
Signing time: Mon 16 Feb 2026 20:57:13 +0000
ROA not before: Mon 16 Feb 2026 20:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 78.108.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:68:3e:34:62:91:ed:17:62:ba:82:54:f3:cf:23:60:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Feb 16 20:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dae332e0cfbcda549c2ef40ee21f492fa5201ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:fa:28:06:27:95:03:2d:11:4f:af:1b:0f:
6f:86:c9:13:28:96:20:c0:bd:38:4c:aa:32:4e:23:
c3:d3:49:d7:6d:a4:ed:09:42:a9:0d:b3:a0:e4:76:
1e:1a:d0:bf:fe:99:7d:29:ac:f7:54:f0:23:c5:3d:
2e:a0:53:d7:cd:9a:35:2d:ef:3a:12:8d:f9:b5:c7:
21:5d:01:b7:7f:b5:d7:05:e2:11:55:e5:4d:9a:03:
28:d5:b5:44:0d:fd:2d:07:5e:15:dc:14:10:48:bf:
2e:d3:2e:8d:3e:31:84:f8:90:25:d1:91:e1:cf:3f:
94:a7:46:d2:c7:16:af:41:2a:fb:9f:89:c3:21:05:
d3:10:b8:de:ad:b3:67:1b:c3:8f:00:c8:d8:3d:71:
fb:e0:b2:e6:02:28:ba:c8:b9:a6:a4:ed:cb:b3:2d:
45:3c:2e:6c:a5:c4:fa:6c:8f:dd:16:20:c0:79:c7:
23:5c:77:c7:32:2e:fb:79:8b:93:89:b2:a3:4e:95:
51:6b:3f:c9:d0:1e:fe:44:b9:cd:61:7e:00:71:4a:
0a:4f:c2:7f:e3:e9:7f:17:ec:e0:9b:cf:dd:c6:74:
43:04:ba:8e:53:b2:d6:20:fe:c2:25:70:c4:ae:f4:
ff:51:9c:2a:9f:b6:5d:1f:bc:e1:e1:81:27:79:92:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E3:32:E0:CF:BC:DA:54:9C:2E:F4:0E:E2:1F:49:2F:A5:20:1E:BB
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/2uMy4M-82lScLvQO4h9JL6UgHrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.61.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f5:d8:bb:73:6c:f1:cc:a8:e6:a8:31:13:9c:58:1f:91:ef:
37:04:35:dd:13:67:62:ad:77:94:a2:52:fc:c3:25:b3:2a:ab:
ec:63:b3:ce:61:55:d4:fc:49:fa:e5:e9:ec:1d:81:1f:bb:15:
dd:d8:4d:62:d4:2e:9a:61:da:80:e7:9f:90:ea:a7:77:b2:b0:
2e:ea:51:1a:16:e8:8e:73:cf:1b:03:88:a0:cd:3c:13:0b:ae:
b1:ba:19:e9:90:67:dc:92:4b:e6:cc:a3:96:96:1c:10:e2:d0:
84:8f:74:80:09:aa:5a:e2:ee:7b:7c:23:dc:bf:17:d4:60:96:
d5:38:23:60:c9:ab:13:74:d2:ad:c7:71:14:7d:d9:49:e1:1f:
f0:01:4a:ef:d2:d5:3f:e6:37:f0:25:f3:dc:12:4e:cd:ac:fc:
cb:2d:9e:3a:e4:5b:2c:96:42:f6:e5:28:ec:c5:70:1b:6e:fb:
17:90:ea:ff:1d:88:f3:2c:bf:2a:cd:ac:ef:be:ac:8b:1e:1a:
9e:ba:4d:a3:7e:d1:45:85:d9:ca:92:a4:49:35:85:2e:71:c4:
e2:62:3c:f1:87:3a:7c:13:1d:04:82:7f:ff:1f:cc:65:74:a5:
a2:60:35:62:2a:04:8a:be:ab:16:38:63:d0:69:7f:02:0b:51:
f8:32:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:09:22 2026 by rpki-client