Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/mh2I82inetzsnVk-mCbUUh0Kkmc.roa
File: mh2I82inetzsnVk-mCbUUh0Kkmc.roa (raw, json)
Hash identifier: uqkrtRkvSi6Ny/xKLRzxhVpT+s0bFCyXQwFeQizhzgo=
Subject key identifier: 9A:1D:88:F3:68:A7:7A:DC:EC:9D:59:3E:98:26:D4:52:1D:0A:92:67
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A179548719EDB6A376BA79AF9BF72192D5
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/mh2I82inetzsnVk-mCbUUh0Kkmc.roa
Signing time: Mon 26 Oct 2026 17:49:05 +0000
ROA not before: Mon 26 Oct 2026 17:49:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35661
IP address blocks: 213.145.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:54:87:19:ed:b6:a3:76:ba:79:af:9b:f7:21:92:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 26 17:49:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a1d88f368a77adcec9d593e9826d4521d0a9267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:b1:2c:3b:cd:4c:de:fd:00:1e:83:ff:5c:
cc:51:88:37:1e:ee:80:69:6e:25:c2:57:5c:51:8c:
d2:50:34:2e:50:24:2c:19:b8:91:48:b2:b3:4d:63:
8a:21:f8:c3:a3:f6:80:d1:7b:51:ac:4a:a9:d9:12:
40:53:b4:b4:f0:bd:6a:f4:0d:9f:41:b3:e0:a8:91:
b9:8c:25:d9:9d:61:3e:37:33:25:a4:ed:4d:f8:64:
14:51:1e:d0:29:a9:77:f1:6b:b9:62:10:9d:e7:37:
bb:ce:71:61:86:e0:b7:a8:71:7f:5e:ce:da:40:1c:
a0:f3:95:1d:e0:99:10:ec:05:d5:1a:1f:ec:8e:cf:
61:40:90:11:3f:43:96:be:63:af:c9:a3:6c:be:ec:
f9:7d:cf:0f:e0:e9:c7:3f:46:f6:21:f3:72:ac:f2:
3a:b9:79:da:74:ff:a0:7b:ed:09:0f:5f:b5:da:be:
4f:fc:dc:ab:41:68:15:77:9f:46:06:be:48:c5:1f:
5f:f5:23:f1:5c:64:dc:a3:ca:53:63:7a:ec:46:89:
d9:10:6a:fe:74:c7:24:b7:ee:22:c0:c2:75:eb:47:
cd:21:75:70:62:54:7d:e0:85:de:e4:33:c7:cd:a7:
d0:f3:8d:17:55:a8:10:69:96:6c:2d:f1:58:14:f5:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:88:F3:68:A7:7A:DC:EC:9D:59:3E:98:26:D4:52:1D:0A:92:67
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/mh2I82inetzsnVk-mCbUUh0Kkmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d6:08:31:14:9a:db:02:b4:a2:61:22:5d:16:78:a2:f3:13:
5f:3f:dd:44:30:d2:2e:a2:09:7a:30:2b:d4:b8:c1:d0:9b:ff:
f8:4a:bc:48:69:ae:95:05:7f:a5:84:03:b9:36:7a:44:6e:d8:
7f:e3:d1:f8:27:fe:43:3c:10:68:56:ec:dd:86:11:66:d0:69:
44:cc:8e:00:55:83:8e:18:4b:33:4d:c1:b0:ea:18:fa:58:8b:
50:1a:3d:b2:23:ea:ea:3d:e4:86:7e:61:f3:83:31:3a:6f:aa:
03:f4:d3:37:52:61:59:53:b7:d3:1a:b2:ca:c4:ef:dc:fa:0d:
4d:af:fd:82:e1:33:43:f2:e6:5e:00:9f:e1:53:0f:3b:e8:7d:
79:55:3f:fa:3b:78:61:8b:4b:6c:91:1b:dc:46:34:bd:9d:3b:
c4:61:df:c8:07:a3:0d:44:90:6c:4c:0a:32:ae:8f:c8:18:53:
20:a2:54:a2:32:89:d3:4b:65:a5:dd:39:ea:0a:cd:b6:d8:34:
28:10:f7:16:e2:1f:6b:1f:88:62:a5:0d:fe:eb:7b:b5:bb:7d:
24:c4:9e:b9:5c:98:b7:13:6e:73:a2:1c:89:50:8d:bb:50:7c:
4a:89:04:b2:a3:b1:28:cf:b0:1b:08:0d:21:53:81:33:36:e6:
fd:a8:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:57:35 2026 by rpki-client