Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2REdwqNFBvG4eDjY_p5i49vAEFU.roa
File: 2REdwqNFBvG4eDjY_p5i49vAEFU.roa (raw, json)
Hash identifier: DV37yEWU0eXunPppY34wNIKvAYXlIippTNYacs/KPg0=
Subject key identifier: D9:11:1D:C2:A3:45:06:F1:B8:78:38:D8:FE:9E:62:E3:DB:C0:10:55
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368DCF1238CD979344A7780DE06E2E0
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2REdwqNFBvG4eDjY_p5i49vAEFU.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210899
IP address blocks: 45.137.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dc:f1:23:8c:d9:79:34:4a:77:80:de:06:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9111dc2a34506f1b87838d8fe9e62e3dbc01055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:b8:b4:80:1a:3c:04:17:42:54:1a:79:0e:
9d:d3:3d:e8:fb:2c:30:55:7c:55:36:ab:91:ce:f0:
12:b1:50:ce:7d:14:ba:5a:ed:31:2b:ea:bc:e8:3d:
c3:5e:e9:f9:ef:23:c6:36:24:98:69:0e:fd:4a:81:
1b:f2:0b:20:ed:85:b9:fc:f2:5b:70:81:e7:a3:4f:
14:8d:49:88:4d:a4:a1:5d:24:a6:b0:9a:b5:c5:31:
08:63:2b:24:f8:9f:05:fa:df:93:ca:24:8b:52:c8:
78:74:95:9b:f8:52:21:49:bd:df:2c:04:41:7b:c0:
1d:2f:72:ba:05:11:5c:d7:31:ad:49:5d:a3:2d:d6:
0c:25:59:f5:94:2e:6c:7e:fb:a3:6c:cd:3a:3a:97:
2c:12:66:99:43:7b:ba:a2:dd:e6:87:89:f1:fd:fa:
4e:21:1f:5b:9c:c0:c6:fd:5a:35:1c:1b:0e:72:f8:
3f:bd:77:48:b8:93:6a:e9:a7:7f:0e:0e:7a:8b:34:
93:0a:41:2f:54:64:f6:9f:e6:64:c0:89:ec:bf:06:
c5:3a:a6:fb:22:d7:bc:f5:f1:81:6f:f0:ef:28:2c:
9d:36:b9:30:af:df:f6:27:59:5b:d7:af:70:24:74:
a2:00:62:ee:21:29:cb:17:60:bd:d8:21:ad:7a:81:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:11:1D:C2:A3:45:06:F1:B8:78:38:D8:FE:9E:62:E3:DB:C0:10:55
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/2REdwqNFBvG4eDjY_p5i49vAEFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a1:ff:15:f0:86:2a:ed:8a:bc:d4:20:22:eb:c8:15:32:db:
70:21:c2:46:4f:d9:85:e6:43:2e:8a:1e:b4:94:e1:20:85:3c:
e2:a6:98:0e:25:d4:0f:b0:1e:6e:ba:ed:1a:18:74:eb:59:6a:
de:c1:85:39:1f:07:47:31:31:35:28:f1:0f:4b:65:ae:24:e6:
80:51:aa:b8:41:84:ba:00:3d:17:28:9d:34:39:f8:06:d9:a8:
66:0b:e8:c8:b1:1c:bb:cc:ad:cf:bd:b1:c9:8c:65:10:12:27:
f6:d0:57:a7:35:8b:a8:f5:f3:85:be:d7:b9:1d:e0:83:07:b7:
33:f1:36:0b:09:3c:96:af:c2:f4:94:24:6c:6f:ee:fa:4c:5a:
69:51:01:53:f3:16:08:f3:be:c3:ac:f7:0f:7a:68:d7:ac:70:
0e:1c:10:0e:77:2d:9f:b4:3b:3d:fa:bb:e8:ca:34:37:af:0e:
7c:86:c2:54:2e:da:d7:1c:2f:25:db:c6:ae:08:e1:87:61:be:
2e:42:36:28:1e:66:73:c4:d8:24:23:2c:eb:99:62:88:0d:b5:
f6:70:af:41:72:74:d2:4e:56:5e:35:db:cf:05:bd:cd:3c:d7:
73:62:2e:56:f3:09:04:9e:a9:42:f5:65:76:d6:58:0e:f3:81:
ba:08:f4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:11 2026 by rpki-client