Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/2cSsNxEkMXdX8udFtydZtUrw4eE.roa
File: 2cSsNxEkMXdX8udFtydZtUrw4eE.roa (raw, json)
Hash identifier: 0BavGB+tI61POh6iQrEJRfFZeL9cXqVHnf5DK1BoX8Y=
Subject key identifier: D9:C4:AC:37:11:24:31:77:57:F2:E7:45:B7:27:59:B5:4A:F0:E1:E1
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01A0810E694ECB1A8A5A96F038B290C2E465
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/2cSsNxEkMXdX8udFtydZtUrw4eE.roa
Signing time: Tue 08 Sep 2026 12:46:40 +0000
ROA not before: Tue 08 Sep 2026 12:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 45.86.159.0/24 maxlen: 24
85.117.243.0/24 maxlen: 24
185.236.8.0/24 maxlen: 24
185.255.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:0e:69:4e:cb:1a:8a:5a:96:f0:38:b2:90:c2:e4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Sep 8 12:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9c4ac371124317757f2e745b72759b54af0e1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:bd:01:94:73:78:0e:68:a2:15:95:c3:cc:
f3:88:6f:83:6c:1a:05:41:40:b8:cf:0d:db:2e:eb:
5f:db:85:8d:10:a6:69:60:c1:b3:a0:5e:03:6b:b6:
94:ba:ef:4f:ff:11:27:8d:73:21:69:09:db:8f:d6:
98:2f:60:30:33:6a:ee:3f:5e:0c:2f:0a:a4:5f:14:
1d:d3:55:ec:3e:57:e7:74:80:52:c7:ea:5d:9a:94:
f5:d8:c1:f6:31:22:5f:6f:00:67:ca:0c:f2:66:a7:
c4:40:3b:f4:3b:36:e4:02:91:73:76:6b:60:f5:ee:
4a:dd:8a:d8:26:7d:f3:ad:a7:49:1d:e1:42:df:fb:
2c:fa:29:ec:5d:ed:5b:ca:8e:a9:04:80:f0:19:77:
15:36:4c:ac:3e:c8:bf:2e:db:15:6d:4b:2b:a2:29:
b2:0a:43:50:e7:8e:95:b0:23:c9:4f:ef:b5:bb:2d:
51:41:cc:38:7d:27:8d:bc:32:f7:7d:88:1f:f8:46:
6d:94:bb:12:c4:96:7c:d6:15:e8:a7:5d:b1:bc:e7:
ea:f6:ae:c3:8a:e9:62:11:72:58:91:85:5b:4f:84:
e3:74:ba:0c:59:9b:22:5d:1e:b1:a1:75:d5:33:cc:
7b:14:e2:44:0f:62:fe:d6:b8:1d:10:49:af:8c:e5:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C4:AC:37:11:24:31:77:57:F2:E7:45:B7:27:59:B5:4A:F0:E1:E1
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/2cSsNxEkMXdX8udFtydZtUrw4eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.159.0/24
85.117.243.0/24
185.236.8.0/24
185.255.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8c:af:90:0a:d4:a0:0f:07:47:33:e3:73:7d:c4:84:2a:6b:
91:99:a5:4f:80:68:17:33:e0:0e:50:1a:1c:83:24:bd:09:2f:
04:ab:51:29:c4:bd:04:9e:a6:7a:b8:16:e8:8f:29:2d:16:fa:
d5:14:62:51:af:9d:df:2e:dc:22:d0:2f:78:13:bd:5d:91:a5:
e6:eb:e9:c7:70:72:86:66:b3:e3:75:93:e0:74:0a:d8:07:06:
0f:57:ca:4d:a3:d6:36:e8:b4:fd:61:5a:b8:63:5a:7a:47:eb:
3a:15:6c:b0:cd:7f:51:24:b1:1b:e6:78:8e:1a:e4:ca:d2:3a:
dd:89:f3:e4:53:6e:70:cf:6e:c6:1a:2d:41:50:2e:1a:1e:cf:
ca:3c:20:f3:5a:11:84:60:3f:7c:6c:30:50:2d:0c:eb:3e:cc:
b3:e9:d3:8d:f6:e8:2a:bd:a3:f8:34:c7:ed:f0:65:1a:ea:3a:
fd:64:65:b7:76:ee:1f:17:81:e7:26:92:3c:da:75:e8:1e:0b:
d0:60:73:e6:b7:9d:56:2a:d6:bd:a2:02:37:03:c4:81:4c:56:
ce:71:6f:19:ce:01:35:a1:53:e9:72:9b:4b:0c:eb:52:28:b6:
fe:84:1a:04:7b:39:29:4d:1c:3b:3e:36:95:b6:17:88:fc:7d:
19:6f:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:28 2026 by rpki-client