Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/2p6X0AtouCzVNKAMw7m3iePnGWs.roa
File: 2p6X0AtouCzVNKAMw7m3iePnGWs.roa (raw, json)
Hash identifier: JTFFGaqq0yiZYLYTUwYMgBzV4FH4zB+/tPL4IXev7Po=
Subject key identifier: DA:9E:97:D0:0B:68:B8:2C:D5:34:A0:0C:C3:B9:B7:89:E3:E7:19:6B
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019D7CA3C2AA03CBFC13E3C2D27392C86397
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/2p6X0AtouCzVNKAMw7m3iePnGWs.roa
Signing time: Sat 11 Apr 2026 13:03:20 +0000
ROA not before: Sat 11 Apr 2026 13:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201703
IP address blocks: 85.133.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7c:a3:c2:aa:03:cb:fc:13:e3:c2:d2:73:92:c8:63:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 11 13:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da9e97d00b68b82cd534a00cc3b9b789e3e7196b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:80:57:e2:8b:39:0c:28:3d:c1:ab:01:ac:
4e:44:06:41:a8:02:8a:99:b2:05:54:4d:b2:8d:67:
9c:0e:ab:ea:bb:4e:37:56:94:22:6d:4f:58:03:ea:
f0:3c:0f:72:55:89:24:3b:53:d0:99:f2:68:7f:2e:
d3:e6:39:b5:f5:9a:54:0c:d6:4b:5e:14:7d:81:95:
14:a3:f4:a2:6f:e0:26:12:5c:3d:a1:d9:95:a5:cf:
bd:dd:c1:c1:dd:34:cc:7a:c3:56:9c:0d:a7:e0:fe:
65:12:50:bf:09:71:e5:1e:e5:d9:2c:61:f3:9d:28:
a1:d0:af:50:86:7d:4b:e1:02:da:4f:8a:d2:34:89:
c0:2a:41:01:27:08:95:18:c6:13:4d:c1:9b:e2:f1:
a3:b1:ce:89:7a:91:2e:5d:4c:1e:e9:ae:3d:70:11:
04:65:a6:55:fe:0e:87:3a:e2:e6:49:42:e8:e8:27:
d7:e9:d8:41:a5:cc:46:8f:bc:eb:e3:ba:81:aa:b6:
31:3c:61:98:3d:7d:e9:40:a9:86:81:61:5f:84:ba:
1e:65:9a:3c:c3:04:2c:e3:78:78:76:f4:52:0a:cc:
9f:92:56:e5:ed:b5:9c:2c:a6:61:35:36:3f:e4:18:
71:9a:d0:a6:6b:8d:10:81:e0:f4:ba:55:2f:41:5a:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9E:97:D0:0B:68:B8:2C:D5:34:A0:0C:C3:B9:B7:89:E3:E7:19:6B
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/2p6X0AtouCzVNKAMw7m3iePnGWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.233.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ad:71:d2:af:b9:1f:09:a1:c3:e0:41:cb:b9:e3:82:9d:5d:
af:dc:02:f6:ed:a9:0b:41:de:ce:7e:d2:fa:c2:56:b1:83:2d:
61:5b:a8:e8:94:69:ef:b9:d2:e2:1b:60:7c:eb:c8:45:22:af:
0a:08:67:60:cc:b2:ea:85:e1:4d:31:3a:03:dd:1f:1b:6e:fe:
13:5f:73:81:cd:30:da:bb:48:b2:b1:e9:61:eb:85:09:d1:ff:
0d:bf:e3:13:3c:d9:60:e4:73:f2:d9:b1:9c:3a:66:c7:0c:db:
00:ee:46:d5:ee:f0:aa:f3:ce:49:4d:ef:e4:e3:96:fb:80:8c:
ce:6e:f6:56:a6:13:b3:79:eb:ca:8d:01:d1:c7:e0:9e:91:33:
a7:34:fc:f2:55:da:20:c2:bd:80:b5:34:b3:cd:84:46:eb:f4:
a6:75:73:ce:40:49:c8:64:02:58:01:32:e2:c6:6c:82:04:80:
37:79:75:26:48:86:82:d2:fd:b8:43:b6:37:21:ba:28:72:aa:
b9:de:ba:ce:0b:80:78:58:d6:2d:9d:b8:57:45:ce:52:a5:12:
a3:1b:a1:98:8f:c0:ae:09:69:a4:ad:46:1b:b9:e3:ba:4f:13:
01:56:12:22:56:f2:45:19:dc:39:85:e7:fa:20:89:e0:49:68:
a3:80:f0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:28:14 2026 by rpki-client