Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/2onu_z04qAc5enjqVGm3DDLX__4.roa
File: 2onu_z04qAc5enjqVGm3DDLX__4.roa (raw, json)
Hash identifier: nXgE2EGxgcA4kwbwaWv6d6GLN6Gq2wzwdGKWYAFnjC8=
Subject key identifier: DA:89:EE:FF:3D:38:A8:07:39:7A:78:EA:54:69:B7:0C:32:D7:FF:FE
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 01A13E6203F487E6ECE97E0AA67DF783B4BC
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/2onu_z04qAc5enjqVGm3DDLX__4.roa
Signing time: Thu 15 Oct 2026 07:06:13 +0000
ROA not before: Thu 15 Oct 2026 07:06:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57030
IP address blocks: 45.12.37.0/24 maxlen: 24
45.12.38.0/24 maxlen: 24
45.12.39.0/24 maxlen: 24
176.62.200.0/21 maxlen: 21
185.66.0.0/22 maxlen: 22
185.177.120.0/22 maxlen: 22
195.42.150.0/24 maxlen: 24
195.42.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:62:03:f4:87:e6:ec:e9:7e:0a:a6:7d:f7:83:b4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Oct 15 07:06:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da89eeff3d38a807397a78ea5469b70c32d7fffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:80:25:89:de:16:ad:51:68:5e:f1:4b:e9:
ad:09:ef:a5:3e:7e:9c:ab:1b:64:e2:19:dd:a6:83:
73:e0:6b:4f:10:48:66:82:51:a3:a9:84:0a:25:db:
9b:a4:a4:a1:18:c4:52:2a:e1:65:2a:5b:82:5d:d2:
df:b8:79:02:29:10:23:fd:b3:1b:c5:a1:73:8b:18:
5a:d3:e2:6c:8f:67:db:57:3c:46:b6:87:ce:4a:d8:
6e:5f:1e:b8:44:ca:56:13:9b:fc:c8:e7:26:1f:61:
64:2b:12:63:12:2b:88:90:4b:9b:57:b9:21:37:82:
bd:dd:6a:1e:5e:5b:53:64:d6:6e:c3:fe:ed:6c:8e:
81:d5:9f:7d:e4:6e:c9:8b:98:46:8f:9f:47:23:77:
69:94:24:62:8d:9e:22:4e:16:28:4a:77:0d:6d:61:
f5:99:51:01:13:11:93:03:f7:83:45:8a:4a:5d:cc:
d2:e9:8a:ab:39:e5:d4:ef:c7:83:a7:33:70:c7:40:
91:fe:b6:a1:07:d6:46:5c:c7:ab:67:2b:7b:88:d6:
69:40:2d:f6:0e:e7:0c:e5:07:d0:f7:49:ac:f5:fc:
26:48:eb:c5:df:a6:35:5a:bb:7f:00:54:35:cd:d6:
d2:96:9d:d2:9b:35:ea:66:37:da:c6:60:54:c0:0f:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:89:EE:FF:3D:38:A8:07:39:7A:78:EA:54:69:B7:0C:32:D7:FF:FE
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/2onu_z04qAc5enjqVGm3DDLX__4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.37.0-45.12.39.255
176.62.200.0/21
185.66.0.0/22
185.177.120.0/22
195.42.150.0/23
Signature Algorithm: sha256WithRSAEncryption
84:42:3c:b0:3c:5e:94:bb:8e:de:28:32:f1:d9:dd:fe:61:f0:
4c:23:79:cf:40:02:4b:9a:7c:bf:cd:c6:d3:9d:17:6f:74:58:
1f:97:62:89:c0:59:a3:22:b8:05:14:c8:5f:0a:e0:e7:b8:cb:
fe:ca:2f:04:0f:69:a6:ab:5b:34:e6:9e:c9:29:4e:13:bb:5e:
5b:7c:27:e1:1c:be:37:ba:27:d0:84:53:db:d0:0b:97:95:22:
8b:5b:16:a0:bf:3a:ba:17:9d:1f:44:c0:b2:37:cf:6d:12:77:
9a:a1:ad:df:10:11:68:b9:23:45:5f:7b:b7:8d:55:b7:f6:3e:
91:2b:18:c2:05:55:31:4d:4e:0f:6a:1f:ca:4e:d5:fc:3b:05:
c3:70:e4:ed:b5:66:d9:14:2d:d3:53:fe:0f:1a:b2:b2:96:51:
e4:8d:7f:20:36:59:25:07:a9:a9:4b:44:a2:af:b4:5e:1b:d3:
64:78:ae:1e:9f:2b:0c:c5:d5:7a:57:98:1f:df:82:e1:24:24:
89:8f:b0:c7:e4:20:89:ad:09:57:16:5c:8f:6d:bd:c4:be:3e:
2e:d8:e5:07:fe:0c:9f:70:37:8e:12:a4:0c:d1:32:1e:bc:e4:
29:6b:5e:7c:98:c0:0f:1b:c8:68:e6:53:4a:c8:86:cc:c8:55:
4c:de:33:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:09:53 2026 by rpki-client