Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/2CfrJfmqDWYORQ5Kb8OSQ41bbRU.roa
File: 2CfrJfmqDWYORQ5Kb8OSQ41bbRU.roa (raw, json)
Hash identifier: cwU5pAf2dP5NYzTVspwr70DBPw/O8TM1hJgcxejxVzw=
Subject key identifier: D8:27:EB:25:F9:AA:0D:66:0E:45:0E:4A:6F:C3:92:43:8D:5B:6D:15
Certificate issuer: /CN=1573c6f67b1e38fbc112e3eefdd58ce8f1819a18
Certificate serial: 01A07CCFAD6A896C7D1DC36C058B41C22723
Authority key identifier: 15:73:C6:F6:7B:1E:38:FB:C1:12:E3:EE:FD:D5:8C:E8:F1:81:9A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/2CfrJfmqDWYORQ5Kb8OSQ41bbRU.roa
Signing time: Mon 07 Sep 2026 16:59:40 +0000
ROA not before: Mon 07 Sep 2026 16:59:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202084
IP address blocks: 2a01:e440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:cf:ad:6a:89:6c:7d:1d:c3:6c:05:8b:41:c2:27:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1573c6f67b1e38fbc112e3eefdd58ce8f1819a18
Validity
Not Before: Sep 7 16:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d827eb25f9aa0d660e450e4a6fc392438d5b6d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:a1:b1:0b:5f:a0:6c:31:a9:09:fa:28:24:
90:61:d3:ec:69:ee:1c:8f:a5:13:f5:fe:ae:59:26:
ee:44:3d:04:1a:7b:5e:38:10:a4:59:35:12:19:c8:
46:02:a2:4a:0a:2c:31:0b:cd:ef:29:85:5a:82:12:
dd:dd:20:4a:be:5a:63:4d:81:4f:ee:2c:d3:5b:41:
60:35:b3:ad:ac:44:5e:4f:15:66:0d:fe:bc:ed:03:
23:f2:35:54:90:59:b0:76:da:76:6f:43:e9:b2:7e:
e6:87:71:d4:fa:05:ed:be:83:63:ad:c2:a3:f1:ce:
7d:98:f0:4f:e1:4d:e7:84:42:fb:b9:1e:01:2a:5e:
b9:53:41:ae:8c:e4:20:9b:fc:1e:17:f6:15:f7:77:
f8:c7:37:b9:7d:c0:41:db:dc:53:87:c9:76:51:89:
ac:a3:6a:45:a6:4a:da:c6:9e:02:77:76:37:ce:1e:
48:98:15:da:84:a4:6a:09:01:72:5f:ec:76:78:e2:
8a:69:64:07:9a:6c:11:6a:87:58:a0:09:de:87:55:
6e:92:8b:c8:44:12:13:c7:0c:fa:5a:17:e1:b9:f5:
48:44:56:37:8b:c8:3f:32:69:50:79:2d:a5:39:15:
52:02:ce:e4:03:17:37:d9:11:30:52:5b:0f:b5:ab:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:27:EB:25:F9:AA:0D:66:0E:45:0E:4A:6F:C3:92:43:8D:5B:6D:15
X509v3 Authority Key Identifier:
keyid:15:73:C6:F6:7B:1E:38:FB:C1:12:E3:EE:FD:D5:8C:E8:F1:81:9A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXPG9nseOPvBEuPu_dWM6PGBmhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/2CfrJfmqDWYORQ5Kb8OSQ41bbRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f767ca-97c4-45cf-80d4-53e4385a76d4/1/FXPG9nseOPvBEuPu_dWM6PGBmhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e440::/32
Signature Algorithm: sha256WithRSAEncryption
07:66:c0:48:07:9b:b6:92:15:33:ac:d9:4a:e3:a5:fa:bb:9e:
4b:cb:51:85:19:7b:86:7c:d7:a7:94:96:c0:93:ef:98:be:38:
b1:94:c6:2c:57:5d:59:fd:a5:41:f7:d4:c4:59:24:bc:eb:29:
cb:dd:6e:52:a7:98:91:e5:54:b5:ec:ad:bd:01:77:18:b2:10:
de:5d:d0:11:5f:8d:e1:1b:c1:b6:f1:4e:82:09:64:fb:b7:ba:
f1:c1:7e:a8:2d:6d:72:6b:ab:4b:46:d8:d2:0b:af:3e:f4:a8:
27:c0:b5:98:6c:34:db:07:65:ca:9e:06:70:03:34:55:e6:20:
9b:eb:7b:b2:ad:6a:5b:8e:15:e2:07:b0:00:af:32:06:bc:72:
a5:4a:9c:13:da:21:39:5a:96:84:91:52:cf:31:b0:b7:98:5f:
45:0d:d0:61:df:2c:c4:f0:c8:a0:58:01:17:72:c7:f1:c1:23:
90:33:8f:55:22:d8:66:99:d7:d8:1b:8e:eb:06:b2:98:17:73:
8f:4a:4e:99:7a:38:91:e6:d1:aa:dd:2d:d1:3b:91:d7:bc:1c:
b2:97:fb:58:43:8f:d1:14:03:13:bf:b3:5b:98:aa:54:3a:0b:
d2:0f:66:f4:cc:b2:3a:ee:25:c8:7e:9d:9a:4b:f6:94:88:9c:
3c:af:18:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:18 2026 by rpki-client