Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/2RmDwdBocbeYniqIlR1_ddT_Q-A.roa
File: 2RmDwdBocbeYniqIlR1_ddT_Q-A.roa (raw, json)
Hash identifier: LzekZx034SPw+c2u91glofL6zXYiIB9TeGWs6V0XID8=
Subject key identifier: D9:19:83:C1:D0:68:71:B7:98:9E:2A:88:95:1D:7F:75:D4:FF:43:E0
Certificate issuer: /CN=31ef8c7f2cbae9ab2c8f9de4938b6ec71c2a07c6
Certificate serial: 019D90A9312FDA75CC60BFCB1801B0D4C530
Authority key identifier: 31:EF:8C:7F:2C:BA:E9:AB:2C:8F:9D:E4:93:8B:6E:C7:1C:2A:07:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Me-Mfyy66assj53kk4tuxxwqB8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/2RmDwdBocbeYniqIlR1_ddT_Q-A.roa
Signing time: Wed 15 Apr 2026 10:21:40 +0000
ROA not before: Wed 15 Apr 2026 10:21:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39557
IP address blocks: 194.50.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/Me-Mfyy66assj53kk4tuxxwqB8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/Me-Mfyy66assj53kk4tuxxwqB8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Me-Mfyy66assj53kk4tuxxwqB8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:a9:31:2f:da:75:cc:60:bf:cb:18:01:b0:d4:c5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31ef8c7f2cbae9ab2c8f9de4938b6ec71c2a07c6
Validity
Not Before: Apr 15 10:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d91983c1d06871b7989e2a88951d7f75d4ff43e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:22:19:a5:09:31:ab:3a:6d:ba:4e:b2:a0:
34:36:73:ed:fe:b3:7e:da:9b:93:83:b0:7a:68:05:
38:e2:9d:c8:39:51:7d:32:b5:c6:bb:d6:d1:1f:76:
c4:58:56:61:4d:34:10:35:12:ce:4d:0e:9f:9d:e9:
3b:ee:c8:1f:6c:7e:78:11:da:db:89:79:3b:5d:13:
ab:17:ef:10:53:b9:3e:1f:00:d6:b9:53:04:7d:9b:
b8:3a:c9:e1:77:f0:01:6e:e3:77:3d:b7:68:68:e4:
19:c3:ce:b1:61:08:63:8e:2e:cb:e1:d0:f3:1e:0b:
96:2f:3b:9b:56:66:b0:fa:b3:cb:6e:d0:fd:42:69:
3c:62:25:4d:27:e0:70:f0:f3:0f:30:66:ad:2d:ea:
a9:3a:87:ac:d2:c9:5a:54:59:7d:da:57:4d:99:3b:
11:97:0d:0d:68:c7:72:6e:4a:bc:dc:71:76:e6:3c:
25:49:4a:e7:87:95:86:c7:27:c6:fc:69:39:73:99:
ab:49:9b:ca:83:e6:41:38:40:31:dc:14:fd:68:d0:
ce:e4:72:09:f9:b1:12:32:12:89:f1:7f:3f:a8:55:
c8:cb:2d:2f:e7:0c:61:2e:04:40:ba:b0:ab:9c:44:
37:10:f4:ac:19:ab:95:a9:8d:5c:87:e1:c6:a0:9d:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:19:83:C1:D0:68:71:B7:98:9E:2A:88:95:1D:7F:75:D4:FF:43:E0
X509v3 Authority Key Identifier:
keyid:31:EF:8C:7F:2C:BA:E9:AB:2C:8F:9D:E4:93:8B:6E:C7:1C:2A:07:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Me-Mfyy66assj53kk4tuxxwqB8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/2RmDwdBocbeYniqIlR1_ddT_Q-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e098b-e122-4d1d-9126-3ba7cfeda8a5/1/Me-Mfyy66assj53kk4tuxxwqB8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.51.0/24
Signature Algorithm: sha256WithRSAEncryption
04:69:9b:57:4c:b6:a5:4d:c9:10:fc:ad:bb:eb:f0:7b:9a:bf:
0d:5c:93:74:88:89:fd:ca:19:20:e0:94:9b:6c:fd:2d:fa:2c:
b1:b8:8d:f4:eb:4f:79:c4:aa:b9:65:7d:5a:fa:cc:b2:4a:b8:
24:eb:0d:6e:84:d7:28:54:ee:9e:1d:ce:68:3a:45:20:2e:fd:
ed:fd:82:7f:b3:04:18:e4:be:61:98:7a:16:0d:d7:cc:0e:e7:
34:72:8f:97:ef:6a:82:23:d3:53:50:5a:49:3b:dd:01:30:7c:
72:13:75:c9:79:87:aa:84:00:f8:43:95:2b:f1:c8:4d:ae:4b:
01:e0:78:8a:92:32:db:e5:c7:ba:f4:56:53:9c:12:4a:09:36:
b2:47:34:6f:d0:bb:e3:be:2d:5a:07:ef:4e:c5:02:5e:e8:cf:
f2:8d:22:23:de:fa:53:14:bf:f1:38:c2:6b:bd:b9:e4:21:4b:
c2:6c:91:e6:99:13:b6:03:07:c7:98:80:3c:e5:7d:a3:de:36:
2d:e5:e0:29:61:c7:76:26:cd:68:48:2f:63:30:df:05:c2:42:
2c:32:39:90:49:b8:e8:dc:b5:f0:97:3d:c2:32:9f:d9:a7:1a:
11:59:88:1b:b6:ae:fb:e9:af:0b:86:4b:9c:a1:0f:af:5a:ff:
b9:2a:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:19 2026 by rpki-client