Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/2S7uFkbSO-czpY7zbwj6z2QbI9I.roa
File: 2S7uFkbSO-czpY7zbwj6z2QbI9I.roa (raw, json)
Hash identifier: SH3jErffYx2mXExMTCZzsNaB8q9HLfNDIPRMlxgvCYw=
Subject key identifier: D9:2E:EE:16:46:D2:3B:E7:33:A5:8E:F3:6F:08:FA:CF:64:1B:23:D2
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A07D2EE4969A3241F9AB1898B90E758D8D
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/2S7uFkbSO-czpY7zbwj6z2QbI9I.roa
Signing time: Mon 07 Sep 2026 18:43:40 +0000
ROA not before: Mon 07 Sep 2026 18:43:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 185.67.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:2e:e4:96:9a:32:41:f9:ab:18:98:b9:0e:75:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Sep 7 18:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d92eee1646d23be733a58ef36f08facf641b23d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:3e:4f:26:4f:3b:f5:e6:83:20:a6:5c:dd:
f0:7b:79:b1:0a:f8:2a:f5:61:42:53:70:c7:d1:d1:
3d:f3:3d:cd:32:03:61:a8:23:53:9e:72:74:32:28:
aa:18:d2:47:0b:ad:68:53:9a:c5:aa:b6:ff:30:49:
6f:5a:b9:fd:5b:a5:e4:c1:ad:92:f5:8d:a7:7f:8d:
9a:12:35:05:12:9e:de:93:51:0d:d8:71:47:16:b0:
0d:a6:07:62:fa:36:99:b1:51:59:49:2d:31:8b:25:
13:56:a1:0c:55:40:1e:48:33:97:5f:4d:a4:13:c7:
7a:15:93:05:b0:4c:68:a3:c3:2e:02:aa:c8:17:c5:
4b:b6:6d:a8:df:5a:fb:24:49:18:26:04:6b:32:10:
eb:9e:4b:50:54:81:b6:68:73:83:23:c4:ac:ca:76:
8e:e3:42:a5:94:2c:4e:1c:67:3f:b8:a9:1c:88:8e:
7f:f8:c0:c5:89:e7:24:fe:83:4c:aa:9b:eb:7a:69:
46:f2:59:66:19:8b:69:b0:33:ae:cc:5c:a0:06:3b:
c3:88:56:7c:5d:1c:1a:7a:83:ac:ef:13:89:24:dd:
9a:d9:07:ab:91:fc:d1:07:b8:ef:88:ad:4a:48:e8:
c1:c9:02:1d:18:2b:f9:b6:0f:47:e5:a5:13:d0:72:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2E:EE:16:46:D2:3B:E7:33:A5:8E:F3:6F:08:FA:CF:64:1B:23:D2
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/2S7uFkbSO-czpY7zbwj6z2QbI9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.20.0/24
Signature Algorithm: sha256WithRSAEncryption
75:48:21:89:6a:d9:0e:88:06:0e:c2:73:7a:45:92:2a:74:bb:
7c:b4:dd:ef:df:45:51:8c:37:f1:4c:e4:2a:ff:a9:5a:47:58:
94:e3:87:dd:25:1c:49:1c:8f:53:a8:06:1e:6f:45:23:49:d2:
75:54:9c:de:1b:14:ec:da:de:6e:1f:ec:ba:86:a9:9e:c8:a9:
7a:70:06:e8:de:34:e7:0b:6f:be:2d:8f:06:43:42:01:6e:5b:
db:69:0e:b3:78:2f:57:19:fa:14:45:a2:23:55:59:f7:96:24:
12:af:59:30:05:c8:e3:3a:69:e8:c0:c8:fe:43:d8:f0:4f:9f:
62:5b:71:1f:c3:da:96:43:36:22:a5:d2:1e:c8:33:4a:3f:e0:
96:d2:8c:a7:c6:be:7d:6a:72:46:be:e7:e3:9b:06:e0:de:a0:
84:82:39:0a:e4:b9:5e:71:31:e4:1b:16:59:81:f9:39:ca:57:
4d:a1:0d:79:83:3f:9b:1f:cb:c7:84:53:3a:88:17:02:0b:c3:
c5:a8:2f:ed:ec:a1:94:b8:32:e2:22:90:8b:d4:9b:ec:16:db:
66:bc:a3:31:c4:27:ff:65:a0:2c:a4:cb:ec:fd:7d:4f:81:19:
a2:36:bf:8c:9f:f5:4d:8e:26:93:1f:6d:29:7c:74:f5:1c:9f:
a6:ed:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:11:00 2026 by rpki-client