Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/2cOGlH4ahQPnzpheBIuDg2DB_bs.roa
File: 2cOGlH4ahQPnzpheBIuDg2DB_bs.roa (raw, json)
Hash identifier: MTpw8IRuoip833V4lmKt21Oh/Lmjir8gm9bxVt0H2J0=
Subject key identifier: D9:C3:86:94:7E:1A:85:03:E7:CE:98:5E:04:8B:83:83:60:C1:FD:BB
Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial: 019E9D215DAD46D19CB8020A02682B0D1CC0
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/2cOGlH4ahQPnzpheBIuDg2DB_bs.roa
Signing time: Sat 06 Jun 2026 13:31:09 +0000
ROA not before: Sat 06 Jun 2026 13:31:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207471
IP address blocks: 93.115.60.0/24 maxlen: 24
93.115.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:21:5d:ad:46:d1:9c:b8:02:0a:02:68:2b:0d:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Validity
Not Before: Jun 6 13:31:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9c386947e1a8503e7ce985e048b838360c1fdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:3f:66:32:a0:72:09:a0:24:98:02:e1:68:
bd:db:bd:a7:10:9a:db:10:1a:19:64:40:e5:17:77:
5a:bb:46:94:6f:d4:1e:3f:56:37:cb:52:b8:de:ef:
ab:d5:88:24:23:d0:11:23:4c:1a:9a:8d:21:55:5e:
3c:b6:ee:4e:b4:d3:76:cc:01:2f:c8:6f:bb:5a:ba:
8f:82:a5:f3:18:a1:e8:d1:97:24:18:ed:e1:e2:82:
dc:5d:d9:29:3d:27:4e:23:1f:ff:bc:a4:08:5e:4b:
bc:9f:cd:34:d6:93:8a:15:c1:35:83:1a:a0:6e:77:
fc:dd:a3:05:4b:47:ba:8e:6f:ce:22:f7:f9:03:cc:
75:c5:aa:82:1b:8a:11:cc:a8:09:1e:b1:bf:be:cb:
d3:fe:eb:09:33:4c:1d:b4:2e:2a:f2:66:88:b7:20:
1a:88:70:28:ff:65:89:1a:e9:9d:fc:31:da:d6:6d:
d4:e2:ca:4a:9e:75:20:b4:9c:83:49:c7:d7:c6:68:
a2:6a:f2:de:fd:1b:f5:89:86:e8:40:62:fe:8b:59:
22:0d:9d:93:80:aa:09:dd:d8:96:a9:74:0f:5b:e9:
79:7d:55:75:10:42:b4:2a:c8:40:e3:56:38:27:65:
e6:83:ad:4c:7a:0e:27:60:81:c4:3f:30:8e:a6:e2:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C3:86:94:7E:1A:85:03:E7:CE:98:5E:04:8B:83:83:60:C1:FD:BB
X509v3 Authority Key Identifier:
keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/2cOGlH4ahQPnzpheBIuDg2DB_bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.60.0/23
Signature Algorithm: sha256WithRSAEncryption
48:dc:22:41:40:db:8c:af:40:ca:d8:60:25:89:5a:a9:cb:8c:
55:1d:d1:40:47:43:46:08:12:41:3a:f8:7d:22:3b:ff:84:30:
35:8a:d7:c1:08:e7:36:b2:2d:c1:34:94:86:bd:b4:42:fb:f2:
89:f9:63:34:9b:87:40:28:80:3a:52:06:ff:96:52:78:1a:2b:
1b:f7:09:68:b2:eb:55:f5:4d:0f:e0:d1:60:55:52:13:f3:96:
6b:7e:f5:06:d5:b1:f3:52:8f:81:e9:98:07:55:ff:f5:53:6c:
c4:a3:df:68:6e:3f:ad:b9:8b:32:e4:5f:22:8f:ba:e4:c2:6e:
68:b6:a4:f9:5d:a7:7f:ab:33:bd:37:bf:46:c5:f6:6c:7a:6f:
ed:ae:e3:c1:b8:71:86:69:1a:91:a2:96:08:44:13:3c:c5:58:
f2:dc:0c:3c:85:9b:a0:00:e6:18:9d:d3:ae:2b:53:32:f6:3f:
a4:71:3d:70:72:4a:6d:ac:90:63:e8:da:35:8b:12:1a:39:d9:
71:18:ba:c7:98:e9:d6:ed:e6:43:54:a5:c9:0c:a6:60:57:a7:
f7:e2:43:63:56:07:26:92:ec:1a:24:c3:1c:5e:e2:45:3f:7f:
21:7a:4a:0d:70:c1:23:47:31:94:28:22:4e:b1:5f:b4:a2:d0:
c6:b1:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:29:43 2026 by rpki-client