Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/z2A2T1nq3TaPFhF11ccXgPg0K_M.roa
File: z2A2T1nq3TaPFhF11ccXgPg0K_M.roa (raw, json)
Hash identifier: FIAAHyPL1J0jzI8B5mvusigwqLIBDgZSTDh7qjXNzTM=
Subject key identifier: CF:60:36:4F:59:EA:DD:36:8F:16:11:75:D5:C7:17:80:F8:34:2B:F3
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 019C4C64FE16A3C803AF534807B7370B7E04
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/z2A2T1nq3TaPFhF11ccXgPg0K_M.roa
Signing time: Wed 11 Feb 2026 11:10:12 +0000
ROA not before: Wed 11 Feb 2026 11:10:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31225
IP address blocks: 83.219.229.0/24 maxlen: 24
83.219.230.0/24 maxlen: 24
83.219.231.0/24 maxlen: 24
83.219.232.0/24 maxlen: 24
83.219.233.0/24 maxlen: 24
83.219.235.0/24 maxlen: 24
83.219.238.0/24 maxlen: 24
83.219.239.0/24 maxlen: 24
83.219.240.0/24 maxlen: 24
83.219.241.0/24 maxlen: 24
83.219.242.0/24 maxlen: 24
83.219.246.0/24 maxlen: 24
83.219.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:64:fe:16:a3:c8:03:af:53:48:07:b7:37:0b:7e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Feb 11 11:10:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf60364f59eadd368f161175d5c71780f8342bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:b7:c9:e5:3b:93:4c:4c:51:13:01:d1:17:
cd:48:01:ae:6b:e0:5b:e5:9c:e5:95:84:24:60:2b:
b9:be:b5:b8:25:7f:7c:84:a5:27:f3:30:2b:32:4a:
d8:72:43:15:4e:2d:b1:73:89:96:c2:8d:32:3e:8b:
0a:64:d1:c9:cd:dd:5d:55:5f:33:ee:32:45:31:b4:
73:8c:f7:0c:2c:7e:65:6d:01:2b:eb:95:cb:fd:83:
57:13:1b:1c:23:ef:5c:a3:8e:0b:c3:dc:73:aa:20:
61:95:12:75:5c:68:c5:13:d3:c2:63:ca:ac:a7:41:
96:b8:87:c1:39:af:ac:16:be:a4:1e:88:dc:08:09:
1f:8f:b4:47:49:06:5f:dd:26:c5:df:63:c2:aa:0d:
1f:c5:74:7b:af:25:d2:da:3a:d6:b0:2d:e3:0c:28:
c7:bf:44:2d:9a:55:5e:c5:1d:7e:83:8b:52:1b:38:
46:98:66:f6:c2:ad:2a:a8:e1:c7:e8:9f:30:43:9d:
20:46:4a:6c:6d:28:c0:f4:20:fa:d0:82:cd:5d:41:
62:00:02:8c:b3:6e:7a:ee:0d:86:23:df:4b:34:8a:
9f:66:3a:07:b8:5d:c8:14:2c:67:76:62:6d:d3:67:
58:aa:e2:3a:60:8c:be:c4:c8:be:a2:a8:af:aa:60:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:60:36:4F:59:EA:DD:36:8F:16:11:75:D5:C7:17:80:F8:34:2B:F3
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/z2A2T1nq3TaPFhF11ccXgPg0K_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.229.0-83.219.233.255
83.219.235.0/24
83.219.238.0-83.219.242.255
83.219.246.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:40:06:d6:f0:f0:f8:a1:cc:57:ac:49:14:ae:c2:9f:48:1b:
96:cc:7a:85:39:60:f5:bd:2f:a4:85:0c:f5:0b:a3:a7:b9:de:
ae:a1:bd:37:db:da:60:cd:38:48:b7:41:61:13:90:cf:4b:1f:
c2:1d:fe:54:8f:84:da:9c:11:ea:c8:f2:ba:7c:7e:43:40:0b:
df:95:56:9b:77:3c:f2:9e:e5:86:89:0a:4f:0c:d8:ed:17:a1:
58:26:d1:49:58:85:48:d6:80:0a:e5:82:0d:e9:b4:54:90:9a:
9c:99:80:e8:59:4b:7d:5f:0d:a6:80:b6:be:2a:c7:7c:f7:6b:
ed:93:8b:77:e9:fc:fc:ba:c4:58:c2:48:69:51:f9:d9:3b:ca:
05:21:11:a3:c2:b2:7a:17:0d:ee:66:b2:9e:8f:9b:07:a2:bd:
85:64:30:33:06:41:d1:08:83:1f:ac:e9:7f:8f:02:81:95:61:
6d:e9:f6:c3:80:95:eb:0a:0a:32:da:c1:f3:db:4a:ea:bf:b7:
2b:b5:93:72:f5:02:13:c1:fb:fb:89:40:d5:3d:81:90:40:b6:
f6:07:bb:e7:33:20:ff:f3:a1:34:05:df:26:0c:af:9c:f3:b9:
13:be:95:9d:be:46:b9:c7:58:1f:99:7a:3c:d9:a6:d5:5d:47:
b5:aa:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:18 2026 by rpki-client