Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/K2gx-SW9xvojOfiI4K15jW8JgZQ.roa
File: K2gx-SW9xvojOfiI4K15jW8JgZQ.roa (raw, json)
Hash identifier: ZipVHraoigwMud7e51OnXjCqoEw9hJu978Cr0rE3QV0=
Subject key identifier: 2B:68:31:F9:25:BD:C6:FA:23:39:F8:88:E0:AD:79:8D:6F:09:81:94
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 01A04D932E733782BDCA83F748D2A50E3F1C
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/K2gx-SW9xvojOfiI4K15jW8JgZQ.roa
Signing time: Sat 29 Aug 2026 12:51:26 +0000
ROA not before: Sat 29 Aug 2026 12:51:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 45.85.12.0/24 maxlen: 24
193.43.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:93:2e:73:37:82:bd:ca:83:f7:48:d2:a5:0e:3f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Aug 29 12:51:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b6831f925bdc6fa2339f888e0ad798d6f098194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:a9:ec:e6:2b:86:99:b9:de:4d:f6:fc:34:
48:01:58:8d:d5:3a:40:16:07:1d:62:b1:1f:ae:1e:
0f:97:98:4e:ef:b5:56:1e:3d:6b:34:c6:41:f0:db:
51:01:a5:0c:23:22:64:a8:4a:94:4a:e4:34:a1:e2:
67:a7:05:0e:4d:6e:b6:42:72:71:41:9f:c5:b5:1b:
66:d3:4f:48:ab:d3:cd:3b:7a:c3:bc:b0:46:90:6d:
73:cc:f4:36:68:5c:45:fb:7d:c5:65:ce:8b:30:09:
0b:c4:f2:48:27:b8:87:db:f0:f6:24:6a:82:79:1e:
1c:f9:eb:8d:94:c8:42:ce:27:0c:d9:16:13:b3:ef:
ad:a9:c1:d6:af:30:a3:40:5c:ac:d0:af:f8:00:0c:
c7:72:c6:72:3a:c9:fa:09:2d:52:67:c8:7d:6c:41:
10:9b:7d:12:10:af:e2:95:cc:ba:2e:c4:92:6a:1f:
33:95:6a:15:e7:8b:cb:b8:69:84:d3:f0:12:ce:29:
f1:f4:42:18:18:88:e6:85:45:30:0a:f5:67:96:7f:
a2:3b:ec:6f:af:1a:b7:9f:26:11:85:0a:f1:5d:60:
75:ce:de:eb:f3:4e:15:c5:c8:d3:ce:e7:4e:74:bd:
68:d7:b3:cc:e5:e4:5d:4d:f4:a6:34:b6:45:96:9d:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:68:31:F9:25:BD:C6:FA:23:39:F8:88:E0:AD:79:8D:6F:09:81:94
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/K2gx-SW9xvojOfiI4K15jW8JgZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.12.0/24
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9c:30:83:36:09:5d:1e:3d:75:92:d0:32:13:66:1d:29:1e:
32:04:9b:96:06:10:30:59:61:31:2c:f8:da:af:09:ac:7f:51:
86:c4:90:5c:75:83:7b:05:46:bc:02:26:12:06:94:20:4b:2a:
06:2e:43:74:e5:36:30:b2:48:1b:16:89:2f:42:1a:35:eb:16:
f9:4a:40:c1:c0:2b:39:3b:55:73:d7:8f:08:e7:68:58:ec:9f:
a1:70:a7:91:4c:6f:5f:e3:73:e2:e2:46:5f:44:50:55:31:66:
8b:52:6e:69:a3:71:90:fa:7c:71:8d:a2:de:f0:5a:b5:93:a8:
51:5d:bc:5e:96:43:bf:69:62:2c:ec:5d:f8:09:6e:f2:f8:be:
92:0d:24:03:bc:d1:e1:f4:16:50:f7:8f:f3:41:8f:e2:c1:fb:
21:65:9c:1f:96:b3:6d:35:75:8c:0a:e7:07:10:45:76:00:9c:
21:8e:11:72:a3:fc:34:b9:83:32:c8:d6:b2:55:a3:b4:6a:02:
c5:41:78:ca:28:48:7c:23:e9:45:7a:5a:17:85:48:dd:1f:b4:
c1:5e:1e:ec:3e:7c:fa:13:f2:95:a4:cc:f6:30:58:91:32:80:
a4:40:20:cf:21:02:ef:2b:ac:1c:81:0c:b7:b2:c8:78:05:90:
d9:5c:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 02:46:04 2026 by rpki-client