Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2IiWe1A18ODcftRT6YrkMfyygcw.roa
File: 2IiWe1A18ODcftRT6YrkMfyygcw.roa (raw, json)
Hash identifier: wTczLqEW9RRWBHT/mYw12mmurAPtA5oq8MEFaFAjnu0=
Subject key identifier: D8:88:96:7B:50:35:F0:E0:DC:7E:D4:53:E9:8A:E4:31:FC:B2:81:CC
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019C9A4DF8FA75051B1AD5C8732586AC5136
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2IiWe1A18ODcftRT6YrkMfyygcw.roa
Signing time: Thu 26 Feb 2026 14:15:27 +0000
ROA not before: Thu 26 Feb 2026 14:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 85.149.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:4d:f8:fa:75:05:1b:1a:d5:c8:73:25:86:ac:51:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Feb 26 14:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d888967b5035f0e0dc7ed453e98ae431fcb281cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:c7:76:ef:1c:29:0a:93:a6:20:21:b5:c2:
64:8a:a3:85:ca:a9:f1:d9:4d:b4:56:dd:91:00:69:
bd:12:d1:49:5c:a5:c3:62:50:ec:8e:08:c9:fb:9f:
5d:47:46:a1:e3:ea:8c:83:62:c6:fa:4c:27:0a:92:
e9:e2:b7:61:fe:02:82:5a:2d:12:09:cf:75:f3:cd:
79:29:f5:15:e7:5f:61:18:a8:b9:67:4d:70:e1:cd:
be:c7:1c:d8:5b:fb:f8:ab:ec:6e:ef:a2:55:2f:45:
6d:9a:e7:f4:63:fd:1d:88:73:02:f6:5c:d7:28:bc:
71:04:cb:ca:0f:4e:c7:29:22:94:16:40:2d:2e:0f:
da:0b:14:2d:fa:60:00:bb:30:3a:34:97:aa:4c:58:
60:50:1c:21:48:39:4e:f9:cd:dc:0a:d9:26:09:74:
f0:c5:83:9c:f6:4b:6c:9e:7c:1e:fa:c0:08:aa:1f:
7e:b0:be:af:6c:1a:b5:a3:bc:72:42:05:4e:3e:d8:
2b:dc:c1:a4:be:bd:a1:ff:f5:71:83:a9:30:82:69:
40:07:16:29:04:0d:4c:48:e0:00:e3:57:a7:be:cc:
e7:d6:41:bf:3e:87:b5:c1:6a:9e:25:24:9c:14:f6:
ce:f0:16:a0:ac:a0:1a:41:dd:69:9b:40:09:7a:44:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:96:7B:50:35:F0:E0:DC:7E:D4:53:E9:8A:E4:31:FC:B2:81:CC
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2IiWe1A18ODcftRT6YrkMfyygcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.149.216.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:cd:bd:5d:e3:e8:9c:bb:3a:18:33:dc:aa:6c:f4:bf:91:f2:
ee:f6:93:e0:50:51:ac:d0:9e:9e:0e:98:7c:37:ca:31:94:9f:
fb:be:e0:6f:58:28:cd:ff:9c:c9:69:2c:1b:90:0e:1b:59:b3:
ec:bb:c5:08:9d:e0:00:91:0d:da:fc:9a:f7:17:37:bb:a4:3f:
66:c0:66:38:f7:33:85:01:bb:f4:e1:21:50:ec:65:89:b3:b7:
98:a9:3d:03:6c:83:0b:42:b0:f0:da:a5:8e:9f:96:d6:70:85:
33:62:78:ee:84:17:21:8d:8a:09:2b:82:78:15:0d:3c:05:b8:
50:89:9d:3f:72:04:85:9b:97:03:b9:71:b1:a4:b1:9c:81:3c:
3d:d8:78:c7:60:cf:c4:10:f7:a3:78:88:d5:48:f7:71:f8:94:
bc:d0:34:d3:56:01:ca:c9:ef:b8:0d:0b:0f:b0:28:54:43:bc:
d8:1f:25:da:62:e4:f4:01:de:14:17:29:2b:f0:63:c9:90:4e:
05:cc:c5:a2:85:53:97:cb:1b:a1:f2:d0:d3:0b:07:9c:9b:2b:
c7:10:fe:d6:9e:c9:d4:64:ff:2f:e7:6f:7e:cb:eb:65:aa:50:
8f:cd:c6:96:d7:92:3e:16:fe:0e:89:8e:35:04:d1:38:d8:7e:
65:2a:c6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:39 2026 by rpki-client