Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2VzxNAD5xu9qC7p4x02lMD0GwhQ.roa
File: 2VzxNAD5xu9qC7p4x02lMD0GwhQ.roa (raw, json)
Hash identifier: CAlmRrgnozD3WhBbxiuTcmh3DcHksqgcq9qNexpG6IE=
Subject key identifier: D9:5C:F1:34:00:F9:C6:EF:6A:0B:BA:78:C7:4D:A5:30:3D:06:C2:14
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01A051602CF6EC197152B83962EA1F62133F
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2VzxNAD5xu9qC7p4x02lMD0GwhQ.roa
Signing time: Sun 30 Aug 2026 06:34:12 +0000
ROA not before: Sun 30 Aug 2026 06:34:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219180
IP address blocks: 45.12.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:60:2c:f6:ec:19:71:52:b8:39:62:ea:1f:62:13:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Aug 30 06:34:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d95cf13400f9c6ef6a0bba78c74da5303d06c214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:38:07:a2:73:39:a8:38:44:2c:24:2b:4b:
5b:ca:84:46:c1:5f:bb:bc:de:46:b9:21:a2:d2:72:
f0:81:74:b3:f3:c2:18:ef:b5:8f:0f:b7:e4:84:0b:
34:13:a9:28:1a:98:de:fe:01:96:4e:88:86:ba:4b:
1e:04:a3:39:ea:5d:63:8b:f4:27:77:f8:23:5f:ed:
67:bd:f9:8a:a4:04:59:4b:36:27:a9:38:c6:bb:27:
9c:ad:8e:a2:a6:31:e6:7c:12:28:fb:e5:3b:de:1a:
8e:24:e1:a6:54:79:1c:b1:2e:01:fb:a7:55:d9:b9:
7e:38:de:41:02:71:9f:e4:1e:14:95:33:df:9b:34:
88:10:c9:f4:90:3b:8c:77:8d:09:18:8b:b6:e3:c9:
a9:27:c4:b7:a9:f3:30:6f:70:ee:67:96:bc:8f:67:
5b:29:fb:84:6a:26:b9:a6:86:3f:49:5c:7e:b9:3f:
17:f6:46:cc:3e:59:af:14:8e:58:e2:7d:e9:ca:f1:
bf:82:4d:88:a7:57:3a:67:6c:18:23:8c:66:02:db:
87:7c:ee:e3:d9:45:cd:63:9e:a2:2b:d7:04:2d:77:
af:55:ff:72:94:d0:64:38:2f:2e:37:7f:26:4b:4b:
95:8c:0c:f3:9e:5e:79:ee:45:18:b8:be:e3:41:63:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5C:F1:34:00:F9:C6:EF:6A:0B:BA:78:C7:4D:A5:30:3D:06:C2:14
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2VzxNAD5xu9qC7p4x02lMD0GwhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:03:b9:af:54:46:3a:fb:11:eb:78:cf:98:e5:3c:8e:a0:2c:
77:b5:8b:3b:7b:16:b1:77:c0:ab:d0:28:59:46:ef:29:ae:b9:
32:a8:1b:bb:3a:5a:40:46:77:18:2a:4d:60:34:a9:93:2f:2a:
e2:34:18:67:bf:74:ac:55:23:0d:ba:8b:d1:2d:5c:ff:30:e9:
e6:c8:93:d1:91:41:9e:37:f9:3d:1f:fe:84:6c:87:af:ab:68:
c8:15:ca:43:e0:f2:b5:7e:8e:67:e1:a7:1e:e9:5f:6b:14:cc:
53:ba:a7:1d:07:55:32:62:73:66:f5:2b:70:08:a8:d1:9b:cc:
98:31:f4:c8:11:b9:73:62:e0:00:73:87:af:d2:7f:f0:51:b3:
dc:6c:39:98:68:a3:7c:1e:24:24:dc:d6:7c:06:dc:46:01:b2:
21:b0:6a:b9:de:36:94:83:71:fa:b7:3a:85:95:f2:d9:b6:9c:
46:90:0d:c6:46:29:fc:0f:74:05:ce:3c:ee:57:47:60:75:bd:
53:d7:df:cf:bf:1a:4c:e4:28:ff:5d:d1:b2:ae:17:e8:94:7a:
bb:73:0d:d8:59:bd:1f:f8:f2:35:86:f8:94:3a:11:88:71:8e:
65:97:8d:c8:5c:6e:9f:96:79:6e:5e:33:2f:1f:d1:17:6b:6f:
f6:57:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:51:55 2026 by rpki-client