Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/2hZ530f2raEI-bxy4Ge1DWkjBYo.roa
File: 2hZ530f2raEI-bxy4Ge1DWkjBYo.roa (raw, json)
Hash identifier: Bao5s0a1GnYLM+RTX8Ltx08DQ1ef+ti6Rlh4XL0TsXg=
Subject key identifier: DA:16:79:DF:47:F6:AD:A1:08:F9:BC:72:E0:67:B5:0D:69:23:05:8A
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019FA9D853451601B150BDB488FD7F074F01
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/2hZ530f2raEI-bxy4Ge1DWkjBYo.roa
Signing time: Tue 28 Jul 2026 17:49:14 +0000
ROA not before: Tue 28 Jul 2026 17:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399631
IP address blocks: 91.92.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:d8:53:45:16:01:b1:50:bd:b4:88:fd:7f:07:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 28 17:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da1679df47f6ada108f9bc72e067b50d6923058a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:82:b9:6e:c8:9d:3a:e1:43:d7:28:f3:ae:
8e:b2:5d:a3:37:a0:1b:1a:a4:21:38:97:f9:4e:dd:
2a:82:18:b7:ac:92:83:cd:2d:d2:cb:86:ea:2f:59:
94:cf:17:fb:20:c6:3a:b3:7c:c5:d4:73:4e:65:cb:
16:56:dd:c4:d9:f1:de:bf:81:0d:ec:fe:2e:e6:90:
ee:b2:96:76:97:39:26:04:0f:14:57:97:65:4f:38:
03:a8:cc:55:c0:3e:3b:36:4c:80:bc:99:36:e2:d2:
cf:ab:84:b4:f8:08:5f:fb:b1:c3:eb:c0:4f:a5:2e:
b0:a6:f2:80:6d:28:47:f8:68:3f:c8:1e:b4:b8:4d:
b4:31:bc:7a:3c:e1:02:b0:79:54:c6:cd:11:8a:0c:
bd:c3:5e:7a:fd:f7:5e:a2:86:cb:66:7a:be:47:ec:
da:aa:16:2b:9c:ab:6a:2a:6f:da:9a:ea:c9:11:a9:
ee:c0:20:5c:5f:df:7a:a8:68:5a:88:16:fb:74:1e:
61:69:0d:df:b2:a1:71:a0:0d:14:67:a6:b5:b6:a2:
7f:d0:47:6c:08:f9:b9:40:b7:26:54:be:fc:e1:df:
75:97:6c:9b:e6:27:71:fd:08:96:1a:ec:e1:14:aa:
5b:05:0f:f6:bd:73:7e:cc:57:f9:95:f0:2f:f7:6c:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:16:79:DF:47:F6:AD:A1:08:F9:BC:72:E0:67:B5:0D:69:23:05:8A
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/2hZ530f2raEI-bxy4Ge1DWkjBYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.49.0/24
Signature Algorithm: sha256WithRSAEncryption
27:4c:37:02:9c:c1:be:b6:ce:d0:90:c4:74:49:59:e4:4d:f2:
3d:51:a3:05:b0:c6:ed:4c:82:6a:ce:32:8a:9e:24:57:bb:6f:
be:fb:07:d3:9c:a6:22:81:e7:f1:4c:2e:7d:04:8b:69:4a:04:
a5:35:df:56:5e:73:7c:30:b2:e1:b6:52:36:30:fa:0e:ec:82:
02:5f:66:ab:f8:e4:eb:84:e3:13:65:bf:68:c0:5a:0b:92:3d:
54:6f:76:f8:cc:f0:52:25:a3:5b:cf:03:a0:5a:b8:7e:d7:36:
d1:1e:43:e8:b2:49:62:13:ff:b6:e9:33:dd:61:8e:4a:31:75:
9c:56:92:f3:f4:7e:c8:3c:19:37:95:f6:18:d4:b9:8f:cd:9f:
45:d7:c8:a8:3d:c0:09:ec:04:7c:a6:d1:df:69:8f:78:87:d3:
32:9a:5a:b1:8c:a5:f1:74:3e:f2:d5:96:de:3d:f8:11:37:65:
24:1a:ba:2a:65:87:88:61:4e:2e:b1:13:af:77:b6:84:12:76:
4f:94:ba:f3:5e:bf:e5:36:69:c8:69:03:0f:c6:89:6c:4d:b7:
fe:01:73:26:50:23:22:6a:4b:76:5e:4d:90:9b:b9:42:38:9f:
b6:08:d0:20:c7:a1:30:cd:8b:6c:f9:f2:aa:3d:c6:38:51:a3:
78:cc:31:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:24:28 2026 by rpki-client