Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2bP3_1zqJmQlaoruNm5SjnrdQWM.roa
File: 2bP3_1zqJmQlaoruNm5SjnrdQWM.roa (raw, json)
Hash identifier: hyq/JZ6+AAMFZ8vhSUeMtO2whS0ms0idn/zT7KuTRNo=
Subject key identifier: D9:B3:F7:FF:5C:EA:26:64:25:6A:8A:EE:36:6E:52:8E:7A:DD:41:63
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A196588530DCB632937D651389C6C12C44
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2bP3_1zqJmQlaoruNm5SjnrdQWM.roa
Signing time: Sun 01 Nov 2026 09:02:26 +0000
ROA not before: Sun 01 Nov 2026 09:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.12.112.0/24 maxlen: 24
45.12.113.0/24 maxlen: 24
45.12.128.0/24 maxlen: 24
45.15.153.0/24 maxlen: 24
45.83.150.0/24 maxlen: 24
45.83.151.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.73.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
139.28.235.0/24 maxlen: 24
141.98.160.0/24 maxlen: 24
213.59.124.0/24 maxlen: 24
213.59.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:58:85:30:dc:b6:32:93:7d:65:13:89:c6:c1:2c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 1 09:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9b3f7ff5cea2664256a8aee366e528e7add4163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:c6:f7:d4:02:ca:a4:42:0e:37:5c:92:65:
0c:ab:b2:c8:af:68:95:d1:e5:c3:39:ce:fe:22:23:
80:89:fa:f0:df:34:03:91:d6:db:5c:80:5d:ab:e8:
2c:f3:d5:52:83:44:0a:f2:55:1c:fd:37:99:a6:31:
76:ac:68:1a:e6:81:16:3d:70:17:ff:0d:ac:66:7e:
0d:87:3f:e7:48:eb:9f:40:b0:e7:46:1b:d6:d2:ad:
93:1a:b4:73:cc:9f:50:fb:71:36:71:49:e9:5a:39:
bb:b7:49:a2:bc:da:ad:4f:bc:b2:f5:5c:29:d3:c9:
93:c4:12:7e:96:3a:2e:fc:a2:86:dc:11:50:71:d7:
dd:54:93:4d:3b:5a:8f:91:ae:99:65:57:db:1a:66:
fe:ba:70:6b:78:50:f9:09:d1:7e:2a:d2:81:f0:2a:
be:b9:fb:1a:cf:a3:a2:7a:f4:5e:38:5c:c5:ef:81:
34:e2:76:2b:08:45:f4:a0:4c:24:d5:4b:25:80:ed:
c7:e4:72:be:21:9d:98:5c:11:eb:ae:28:0e:25:67:
f2:9d:db:7f:d8:69:d2:c0:e2:bb:9f:07:a2:c6:ba:
60:c9:d1:c7:69:fb:3e:e5:36:1a:97:85:38:46:39:
fb:82:ce:e1:a9:bb:07:54:0f:21:71:a9:e6:d0:a7:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B3:F7:FF:5C:EA:26:64:25:6A:8A:EE:36:6E:52:8E:7A:DD:41:63
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2bP3_1zqJmQlaoruNm5SjnrdQWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.112.0/23
45.12.128.0/24
45.15.153.0/24
45.83.150.0/23
45.128.55.0-45.128.56.255
45.128.73.0-45.128.75.255
139.28.235.0/24
141.98.160.0/24
213.59.124.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:88:bc:72:d0:84:0f:5f:1a:f1:a9:8b:5a:3e:32:f3:80:b4:
ef:85:2e:4e:68:0d:31:13:7b:23:d6:07:83:cb:8b:72:18:13:
65:60:b3:ea:d3:e1:09:de:93:51:56:a7:23:cc:c0:db:fe:73:
fb:71:12:d2:b2:5f:ab:52:0f:63:f2:fa:5b:0e:5e:dd:56:f3:
dd:be:bb:30:6c:3e:b8:94:78:e3:67:e5:5a:9b:ce:86:bb:45:
bd:9c:e2:03:b2:a6:e4:53:e8:95:f2:ee:7c:3c:dc:b2:ee:3c:
f9:1c:4d:fd:cc:06:95:18:74:75:c3:cc:9c:01:ba:68:55:a0:
81:ce:fd:0b:bb:c4:b3:c3:be:37:9a:82:46:f2:1d:a9:53:04:
51:04:8a:f8:e2:31:0d:a4:29:c0:64:32:b3:87:ca:9a:16:47:
be:58:56:6e:00:28:08:00:fb:1a:9e:2f:18:f7:4f:e6:e8:9d:
8f:91:13:e4:ef:5f:bd:07:7a:53:e9:d1:89:1f:ec:25:dd:f3:
7a:1d:7c:3a:1f:84:eb:c5:ee:65:b7:31:54:13:76:06:f3:bc:
9e:df:a1:48:e7:49:37:61:9d:ee:7f:b5:35:77:8d:2b:ed:88:
d6:6d:4a:e7:cb:5f:6f:a5:1f:00:a6:83:29:af:2c:71:bf:b2:
0b:a3:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 23:47:18 2026 by rpki-client