Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/2mBQIa4EEqQHmM7luEfa52lm74U.roa
File: 2mBQIa4EEqQHmM7luEfa52lm74U.roa (raw, json)
Hash identifier: YYiB1Y7kCCF2hSAn+S3jxLpyH0S46qZavrzXBYm0cQk=
Subject key identifier: DA:60:50:21:AE:04:12:A4:07:98:CE:E5:B8:47:DA:E7:69:66:EF:85
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 019EC0CDC5C2DDDF311F6EF2FE829E1278D3
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/2mBQIa4EEqQHmM7luEfa52lm74U.roa
Signing time: Sat 13 Jun 2026 11:46:11 +0000
ROA not before: Sat 13 Jun 2026 11:46:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49972
IP address blocks: 185.192.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:cd:c5:c2:dd:df:31:1f:6e:f2:fe:82:9e:12:78:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Jun 13 11:46:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da605021ae0412a40798cee5b847dae76966ef85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:c7:e9:1e:ba:88:f8:1e:e2:f3:cb:c5:7e:
98:0c:ff:99:d7:45:b4:14:29:fe:5b:8d:be:55:de:
ed:d0:19:48:57:e6:9b:6b:30:8d:d7:ff:fb:03:47:
67:7a:c3:8d:9a:7d:98:85:64:cf:1c:0f:31:4d:25:
3d:16:2e:92:36:ad:5c:3a:ae:0a:07:56:7f:79:70:
95:8e:01:35:c1:a3:af:01:cb:0c:91:36:f6:4c:a8:
b3:01:c3:69:a4:74:c1:a1:e0:98:af:47:46:19:dd:
4a:78:1d:b0:7b:a7:c3:e4:c5:78:2b:95:8a:bc:f6:
a3:10:25:61:8f:64:86:38:4a:66:b0:20:a3:2a:f5:
13:60:48:82:25:da:f8:fd:bd:1d:1f:15:f9:1c:44:
86:fa:13:65:b2:59:ca:63:c6:2c:f8:46:ae:53:4f:
cf:55:79:fe:24:e2:85:83:8f:5f:2c:05:ed:9f:fa:
d7:65:7b:1f:f6:7e:79:12:97:0d:1e:10:ae:13:77:
8b:c3:b1:ac:70:be:95:7f:69:3d:83:04:2e:81:1b:
38:44:f5:5b:a6:59:b5:64:49:1f:80:e9:6d:a3:3c:
a0:50:03:3a:e1:2d:3c:8f:24:da:1f:24:aa:71:51:
f4:7a:5b:b0:88:73:7b:cf:ba:22:72:7c:73:7a:32:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:60:50:21:AE:04:12:A4:07:98:CE:E5:B8:47:DA:E7:69:66:EF:85
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/2mBQIa4EEqQHmM7luEfa52lm74U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.113.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a0:81:10:f5:0d:b8:a0:93:ac:0e:7c:ba:dc:4f:f0:bb:fd:
c8:83:ec:9d:55:6d:12:49:e2:21:bc:24:8b:94:ea:49:dd:35:
1b:1b:0a:ad:51:ef:67:c3:a2:2d:9a:c8:eb:ee:7e:2f:b4:aa:
06:3f:6b:e0:fb:8c:17:8f:03:96:bb:30:31:d5:d9:c6:a5:53:
e2:e8:77:83:1d:2c:a5:e2:15:f8:87:a4:10:99:36:6f:44:94:
a9:5c:8a:08:3f:52:be:4c:04:50:5e:12:fc:e9:f6:c5:ba:1c:
0e:ee:c0:ac:9c:0c:83:03:a9:89:97:5e:8b:7c:5f:fd:3f:74:
6f:57:4c:6a:9e:f1:73:66:d7:23:6d:ac:0d:8a:a5:79:68:a2:
ea:3f:81:0e:0f:07:67:35:f3:e6:e8:e7:aa:ba:eb:95:a2:70:
24:d7:23:03:64:64:f3:b5:46:64:ec:ed:a0:ba:d8:11:bf:7e:
9f:5f:b7:d3:c4:13:a2:9a:f6:e5:2c:5f:6b:5f:36:c7:2f:86:
c1:c6:6e:54:aa:d5:d3:f3:16:87:18:53:d1:78:f1:9d:2e:70:
84:d4:22:47:26:00:89:fe:5d:45:60:99:5e:e6:3a:ce:83:0f:
60:6f:95:ad:82:5b:af:2b:01:ba:d5:d6:86:18:19:7b:cb:01:
2f:65:86:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7AzcXC3d8xH27y/oKeEnjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTFmZThjNTQwYzQ0ZTIzNGY5YmM2NjhmOGEzYjE2NDdh
Y2RiMDYwHhcNMjYwNjEzMTE0NjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTYwNTAyMWFlMDQxMmE0MDc5OGNlZTViODQ3ZGFlNzY5NjZlZjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A3H6R66iPge4vPLxX6YDP+Z10W0
FCn+W42+Vd7t0BlIV+abazCN1//7A0dnesONmn2YhWTPHA8xTSU9Fi6SNq1cOq4K
B1Z/eXCVjgE1waOvAcsMkTb2TKizAcNppHTBoeCYr0dGGd1KeB2we6fD5MV4K5WK
vPajECVhj2SGOEpmsCCjKvUTYEiCJdr4/b0dHxX5HESG+hNlslnKY8Ys+EauU0/P
VXn+JOKFg49fLAXtn/rXZXsf9n55EpcNHhCuE3eLw7GscL6Vf2k9gwQugRs4RPVb
plm1ZEkfgOltozygUAM64S08jyTaHySqcVH0eluwiHN7z7oicnxzejKL4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNpgUCGuBBKkB5jO5bhH2udpZu+FMB8GA1UdIwQY
MBaAFNCR/oxUDETiNPm8Zo+KOxZHrNsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgt
MDRlNmY1NzY0YzUyLzEvMm1CUUlhNEVFcVFIbU03bHVFZmE1MmxtNzRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85YTNhYWMtMmE0Yy00Mzg3LWFlYTgtMDRlNmY1NzY0YzUy
LzEvMEpILWpGUU1ST0kwLWJ4bWo0bzdGa2VzMndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucBxMA0G
CSqGSIb3DQEBCwUAA4IBAQCIoIEQ9Q24oJOsDny63E/wu/3Ig+ydVW0SSeIhvCSL
lOpJ3TUbGwqtUe9nw6Itmsjr7n4vtKoGP2vg+4wXjwOWuzAx1dnGpVPi6HeDHSyl
4hX4h6QQmTZvRJSpXIoIP1K+TARQXhL86fbFuhwO7sCsnAyDA6mJl16LfF/9P3Rv
V0xqnvFzZtcjbawNiqV5aKLqP4EODwdnNfPm6OequuuVonAk1yMDZGTztUZk7O2g
utgRv36fX7fTxBOimvblLF9rXzbHL4bBxm5UqtXT8xaHGFPRePGdLnCE1CJHJgCJ
/l1FYJle5jrOgw9gb5WtgluvKwG61daGGBl7ywEvZYbw
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:07:28 2026 by rpki-client