Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/23AYOOaVoufpy4xd9Alqi_jS77E.roa
File: 23AYOOaVoufpy4xd9Alqi_jS77E.roa (raw, json)
Hash identifier: 0MJaveh/kuuBV9yvWEU4idipLN+sF7fKt/tc5Z+vmYU=
Subject key identifier: DB:70:18:38:E6:95:A2:E7:E9:CB:8C:5D:F4:09:6A:8B:F8:D2:EF:B1
Certificate issuer: /CN=fb5d3e114fbce2cf0f920431c56a7c73dfda5a7e
Certificate serial: 019B76EACC27FDE50FF5C39393DD35F0AA69
Authority key identifier: FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/23AYOOaVoufpy4xd9Alqi_jS77E.roa
Signing time: Thu 01 Jan 2026 00:17:37 +0000
ROA not before: Thu 01 Jan 2026 00:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57032
IP address blocks: 2.57.239.0/24 maxlen: 24
185.119.192.0/22 maxlen: 24
2a12:9bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:cc:27:fd:e5:0f:f5:c3:93:93:dd:35:f0:aa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5d3e114fbce2cf0f920431c56a7c73dfda5a7e
Validity
Not Before: Jan 1 00:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db701838e695a2e7e9cb8c5df4096a8bf8d2efb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:06:18:70:ab:e1:22:10:d9:b4:56:85:58:
55:12:52:f8:1b:e7:d5:0f:95:9e:4a:f7:98:7f:20:
e4:03:e2:83:c2:a1:57:d9:0f:64:c7:54:0f:44:51:
48:39:5f:49:c3:20:eb:7e:db:74:f5:d3:b1:58:7e:
bd:ec:7a:91:72:5e:97:2a:7a:b8:67:ac:21:e5:19:
14:44:71:fb:2b:9e:93:6c:f2:96:b6:11:6e:ad:14:
65:03:ce:e1:0a:7d:0b:01:d1:69:d3:5c:2b:77:cc:
12:2c:12:89:c4:a9:50:41:a2:12:c1:bc:30:80:71:
d0:2f:12:6d:c1:6e:59:0a:88:4c:91:4d:b6:29:0f:
14:98:c3:cf:19:08:61:98:9b:d2:ee:be:50:5b:b7:
43:be:04:dc:84:ad:cf:0f:7f:fe:fc:50:1d:06:e7:
0e:03:c2:ed:7e:a2:dc:36:29:e1:3c:44:92:56:a0:
f3:cd:dc:c7:6b:4d:e0:f9:26:aa:6d:ff:1e:57:cc:
10:88:7a:d3:04:64:5f:e6:e3:8d:e3:ba:87:6b:4d:
3c:ce:f5:4c:9a:af:9d:49:fc:95:7d:23:79:91:3b:
8c:b2:38:24:19:66:71:b0:24:6a:4c:96:75:7c:94:
c3:67:61:45:63:69:5d:ca:79:9f:37:97:7b:8f:80:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:70:18:38:E6:95:A2:E7:E9:CB:8C:5D:F4:09:6A:8B:F8:D2:EF:B1
X509v3 Authority Key Identifier:
keyid:FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/23AYOOaVoufpy4xd9Alqi_jS77E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.239.0/24
185.119.192.0/22
IPv6:
2a12:9bc0::/29
Signature Algorithm: sha256WithRSAEncryption
25:34:cd:db:eb:a4:1a:1c:ac:6b:67:a2:d2:03:46:07:4f:f3:
66:91:15:a9:9c:ec:f5:fb:fe:8f:ee:17:c5:a0:95:4b:96:a6:
1e:87:76:81:de:03:c1:12:df:c0:60:ac:57:51:d9:1c:8d:cc:
e8:9e:61:72:bb:04:63:dd:4d:af:9f:c6:4d:20:9e:1c:c9:c7:
ac:b8:aa:3d:a0:78:cf:b4:5a:af:9a:e1:5a:df:a8:d5:98:32:
9b:bd:b5:91:c5:08:2f:de:52:11:99:de:0a:87:c3:c0:05:4b:
3a:f9:cb:4b:a6:44:33:92:5d:d4:c8:c4:61:a1:28:bb:d3:ae:
f1:e1:be:21:0a:66:46:ae:2f:82:ef:3d:59:7b:e1:a1:76:91:
9d:09:a3:e7:0e:b4:9b:97:a2:95:6d:49:da:aa:5b:69:13:a0:
08:80:f5:a8:52:8c:5c:0e:4f:a7:9a:f0:52:c9:e3:d4:28:17:
76:f5:9f:a2:31:b3:4c:e0:8d:ff:d6:1e:ac:5a:6a:f5:cb:68:
35:b0:9d:94:51:5a:d7:a4:d5:5d:f0:05:73:59:59:88:f4:dd:
80:e7:d7:c7:6b:eb:05:4d:0e:02:c2:03:cb:8b:74:13:83:8a:
09:20:85:8c:e0:92:a9:85:d8:c0:ac:a3:c5:aa:46:f9:7b:20:
4f:20:c2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:38:24 2026 by rpki-client