Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/2N3mFTgRGbmrw_7vATxV81Kq2dE.roa
File: 2N3mFTgRGbmrw_7vATxV81Kq2dE.roa (raw, json)
Hash identifier: /FX8Wxrk3OXbha8szh70fBjGa2R8m1TJYbOuwC3Rhiw=
Subject key identifier: D8:DD:E6:15:38:11:19:B9:AB:C3:FE:EF:01:3C:55:F3:52:AA:D9:D1
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 019B7D5CF9C9DDC032ACDFEC51416B2DF68B
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/2N3mFTgRGbmrw_7vATxV81Kq2dE.roa
Signing time: Fri 02 Jan 2026 06:20:03 +0000
ROA not before: Fri 02 Jan 2026 06:20:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47282
IP address blocks: 185.99.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:f9:c9:dd:c0:32:ac:df:ec:51:41:6b:2d:f6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Jan 2 06:20:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8dde615381119b9abc3feef013c55f352aad9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:ed:3b:76:d8:95:c3:1c:78:49:aa:8f:50:
a4:f6:7a:7a:a4:a6:4e:6b:01:d9:93:42:ff:fd:9f:
62:c8:67:20:98:34:23:ef:1d:f6:35:c9:01:2b:4c:
0a:b6:c0:33:19:4b:a4:4e:70:b1:01:c8:b8:e1:95:
a0:b0:d0:35:87:ff:5c:15:e8:98:9b:12:6c:dd:77:
86:64:38:6a:b0:9e:4c:6b:01:5a:54:e3:7f:8b:44:
4f:9a:12:67:27:bd:44:2b:81:16:d4:73:4f:82:7b:
80:d0:69:ba:d7:ae:0e:b8:12:bb:be:5b:60:c2:6f:
19:b0:83:2d:4b:5e:bb:1a:8e:3f:21:0a:0b:71:e4:
74:dc:6d:43:c3:a5:a5:35:44:d3:79:cd:ae:c2:08:
3f:30:8f:bb:f3:0e:c9:d6:bc:dc:1a:d6:58:05:ed:
ae:7d:92:35:a3:ad:cb:32:f7:81:68:ce:93:82:dd:
95:83:84:6a:66:52:b8:df:88:2c:3a:b8:ed:7d:4e:
f3:64:79:8b:90:b5:c8:68:e9:31:5c:54:31:a9:e2:
1e:7b:42:d4:59:b3:75:c0:26:57:92:d9:d6:61:74:
47:66:3a:c2:10:49:4a:f4:f4:76:c8:a6:24:98:83:
c0:6a:3f:56:ff:a8:1d:de:3b:e8:23:e0:97:50:de:
cb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DD:E6:15:38:11:19:B9:AB:C3:FE:EF:01:3C:55:F3:52:AA:D9:D1
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/2N3mFTgRGbmrw_7vATxV81Kq2dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.7.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5e:f8:33:cb:2d:8f:14:50:d2:91:82:81:7b:ad:4e:b0:cd:
f2:f4:52:6d:d5:b6:b5:cf:e3:a5:6a:62:35:fd:98:08:c6:b9:
9c:0d:f0:4d:24:22:1e:c7:1f:ed:21:bf:40:e9:64:28:f9:a1:
b9:ad:99:cf:c1:5b:b9:09:c4:b0:eb:7f:15:24:53:b2:7a:e5:
a6:73:b2:26:fa:fb:3a:e2:49:7c:c8:81:2b:c6:21:b3:a8:93:
c9:cc:9a:fe:8a:87:58:10:1d:5b:7f:9b:f3:f0:96:61:4e:f2:
5b:78:87:ae:5a:9d:15:45:ac:1f:3d:2c:3c:40:ed:eb:b3:b7:
5c:91:c2:56:02:8c:9e:fe:86:d2:8b:f0:79:e9:ba:7a:d8:0f:
42:44:f7:4d:1c:5a:36:d8:34:85:82:65:56:55:a5:40:3e:db:
bd:21:31:a3:c4:2a:1c:cf:9c:20:da:5b:14:ac:7d:0f:17:f4:
e2:c1:15:59:66:41:fc:4d:bc:e8:9f:59:4a:61:82:c8:40:da:
86:d4:0b:2f:b0:9a:04:e0:ba:de:53:79:02:ca:35:d4:83:19:
b0:de:01:69:61:60:9d:3a:f0:98:53:7d:30:70:79:4d:c5:1b:
fe:c1:4e:eb:19:2e:c5:06:b8:80:59:0b:52:ca:ca:14:ba:18:
d0:ff:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:18:59 2026 by rpki-client