Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/2x_fMam_jbeHqNmVr72GLc6t2gY.roa
File: 2x_fMam_jbeHqNmVr72GLc6t2gY.roa (raw, json)
Hash identifier: XuAz6s6pmt1TvqrrTJFFmoWGyWiOO+UCpyX+VOOM4OM=
Subject key identifier: DB:1F:DF:31:A9:BF:8D:B7:87:A8:D9:95:AF:BD:86:2D:CE:AD:DA:06
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 01A0251A2E55F6627F575FDBC6DB623D73D7
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/2x_fMam_jbeHqNmVr72GLc6t2gY.roa
Signing time: Fri 21 Aug 2026 16:14:27 +0000
ROA not before: Fri 21 Aug 2026 16:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 45.153.239.0/24 maxlen: 24
212.81.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:1a:2e:55:f6:62:7f:57:5f:db:c6:db:62:3d:73:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Aug 21 16:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db1fdf31a9bf8db787a8d995afbd862dceadda06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:16:24:c3:d1:2e:92:03:0c:3b:66:2d:19:
82:c9:97:89:96:c8:34:29:f7:da:94:a2:34:ce:f2:
5c:3e:27:c5:f6:23:11:5d:66:d9:f8:e5:64:d1:4d:
d8:b5:95:92:19:58:39:71:3a:dd:73:eb:d8:c6:21:
da:ce:0b:03:13:94:ed:b4:6a:37:c7:b1:44:54:b1:
d3:2d:d7:62:bb:7c:19:ba:44:39:2d:2d:69:b7:47:
45:fe:c1:45:ca:4f:ec:b2:94:2a:6b:12:12:de:1b:
d8:e2:2e:2d:5b:7a:ba:3b:6a:0b:db:56:46:cd:d7:
27:44:be:48:52:9b:23:a9:ac:ad:d8:83:ab:c6:c6:
97:0d:17:93:f4:a2:b3:98:fc:ed:74:e2:36:62:cc:
02:0a:5e:6a:6a:89:1e:28:ff:e7:9b:fd:65:2f:e6:
c8:35:b7:69:ce:f2:ab:70:fb:2c:80:4f:0c:8b:9e:
96:97:07:9b:26:74:02:8c:ce:cc:cd:73:1e:a0:a7:
6f:06:3f:5e:fc:80:0d:66:4f:28:7e:78:fa:37:d7:
66:65:9f:33:0e:32:73:5b:f9:f1:4a:d7:32:86:09:
bb:6e:0e:9e:3b:9d:25:30:09:33:58:d4:38:99:22:
6d:19:b9:89:b3:b1:4a:44:59:13:81:4b:9c:a0:de:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1F:DF:31:A9:BF:8D:B7:87:A8:D9:95:AF:BD:86:2D:CE:AD:DA:06
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/2x_fMam_jbeHqNmVr72GLc6t2gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.239.0/24
212.81.43.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e3:8c:8a:a2:57:72:0a:64:60:f5:4b:6e:bf:fd:66:ed:eb:
5e:08:b9:2f:6f:77:56:0f:ae:92:43:c0:20:cb:da:ea:26:42:
e4:86:1c:85:05:e3:dd:b5:c8:ba:d7:16:70:94:89:88:11:07:
d3:ce:8b:b2:bf:fe:db:76:60:47:ad:55:a7:54:4d:07:27:9f:
18:e4:0b:85:43:68:2c:8b:41:b9:1b:ab:e6:a0:0f:00:64:72:
bc:87:1c:ec:ca:d2:0e:57:0d:92:12:ea:97:91:40:a2:06:e5:
cb:14:80:d2:fa:35:88:b9:72:9a:b4:ac:a6:ec:85:47:62:0e:
8a:0e:1b:42:37:10:9b:77:e0:ab:70:dd:2b:7a:50:32:ea:05:
cd:a6:03:96:fe:6d:e3:8d:a3:ee:7a:66:53:fb:68:7d:2d:ba:
ef:c6:82:79:b6:57:10:ff:7c:02:64:0c:4f:b0:50:d6:f7:37:
99:d8:e4:3c:39:27:73:38:22:8f:e6:91:2c:8c:2d:e3:be:a0:
6d:c7:43:41:e5:e6:3e:16:7a:e9:68:0d:5e:11:52:2c:38:20:
74:e7:61:b1:fc:c7:22:6a:89:7c:45:33:be:5a:78:bb:11:36:
e4:d2:6f:da:ee:7c:39:04:5c:e3:39:6d:a7:7a:f3:6b:fd:18:
68:62:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:42 2026 by rpki-client