Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2NX_LRuE1z3jpHpzrUm898tAmis.roa
File: 2NX_LRuE1z3jpHpzrUm898tAmis.roa (raw, json)
Hash identifier: tRNjTSbl0LpDg6CSpzF45sG1AteAxwjtFdSdAvLKBUQ=
Subject key identifier: D8:D5:FF:2D:1B:84:D7:3D:E3:A4:7A:73:AD:49:BC:F7:CB:40:9A:2B
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019DFE49CD7D4A5FBDF06D4378F9059AA1E5
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2NX_LRuE1z3jpHpzrUm898tAmis.roa
Signing time: Wed 06 May 2026 17:15:42 +0000
ROA not before: Wed 06 May 2026 17:15:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203380
IP address blocks: 103.101.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:49:cd:7d:4a:5f:bd:f0:6d:43:78:f9:05:9a:a1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: May 6 17:15:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8d5ff2d1b84d73de3a47a73ad49bcf7cb409a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:27:84:52:18:cf:44:b8:34:98:14:99:f1:
ff:06:96:f3:fd:e1:8f:0c:b1:59:b0:3a:15:ad:cf:
30:b6:67:4f:11:0b:08:d0:7a:ec:d1:42:8a:a9:de:
ca:5a:3c:3d:ed:c7:b3:b9:15:cf:a0:d2:5c:48:54:
b1:ec:80:2d:08:65:38:83:67:58:ab:98:66:ab:2e:
12:a5:fe:1d:a6:fa:cc:64:4b:5f:bd:d4:82:78:2b:
a2:dc:ae:ae:10:8f:f6:30:de:6a:fd:81:90:fe:6c:
c5:ce:d5:21:fa:78:e6:89:0a:cb:57:aa:b7:bd:83:
d3:9f:e8:d1:57:71:3a:73:ee:5c:02:5e:3b:7b:f2:
d4:c0:8a:6e:40:b8:e6:9a:25:fc:a4:ac:5b:c8:d1:
a0:ea:cb:d5:41:14:8e:d2:1e:34:b6:74:94:93:ea:
56:e4:0f:bb:32:93:ec:91:e8:53:cc:a4:9d:4f:72:
0c:e7:23:e0:d8:f4:f0:48:8b:e8:52:72:76:f4:66:
a1:70:67:6b:7e:af:32:45:f7:4e:9d:b6:32:20:c0:
ed:56:64:d5:44:f6:78:af:73:47:5a:8a:33:12:58:
c2:4d:18:16:99:98:46:0b:ff:12:c6:92:75:9e:ff:
a7:94:46:70:92:5b:57:48:dc:67:4c:9a:d9:e6:7d:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:FF:2D:1B:84:D7:3D:E3:A4:7A:73:AD:49:BC:F7:CB:40:9A:2B
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2NX_LRuE1z3jpHpzrUm898tAmis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.101.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d0:5a:38:30:19:64:66:92:37:71:f3:e9:31:d8:2c:f4:27:
d6:46:f0:01:bb:1a:37:30:d3:04:fd:85:03:5a:9a:7c:e9:89:
fa:6f:24:9c:82:a9:fc:45:ff:72:81:16:c8:7e:2b:a4:6c:df:
bb:b2:71:69:41:80:00:b4:f9:18:9e:eb:a1:b2:4a:ee:4a:a5:
23:1d:ec:c6:b8:11:f2:4c:18:f9:c7:40:0a:d4:83:14:07:03:
50:2f:75:51:1d:93:66:19:82:60:b4:a9:9d:8d:bd:b8:32:4d:
04:eb:ac:1e:3c:f6:78:b1:6d:36:6e:90:43:7f:9f:0f:3c:21:
ce:d6:95:c0:27:55:b5:56:bd:af:c0:fc:93:59:b6:fe:cf:a0:
c4:ba:69:e6:45:c9:c7:d0:c6:5b:94:c6:d9:4a:3e:17:e4:d1:
32:2c:a8:56:54:04:03:2e:fe:2a:d8:38:91:f6:de:15:a6:72:
f4:62:2d:40:e8:81:22:c6:9e:cc:47:5f:0f:22:c0:15:8e:0b:
d3:ec:d8:8a:df:ce:a4:4d:0e:68:0d:14:33:00:ab:2c:c7:06:
fa:75:68:3c:17:03:30:fd:90:f6:2b:f7:93:cd:c8:5d:17:7d:
d4:92:c2:5e:19:14:63:28:6a:15:6a:2b:38:a3:ab:62:0c:f4:
01:12:9c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:05 2026 by rpki-client