Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2foRBLMeo0d1JGgfWn6nIOFs-vc.roa
File: 2foRBLMeo0d1JGgfWn6nIOFs-vc.roa (raw, json)
Hash identifier: VDRdt1fomluk1BQlPv1n2Ev8FVx7Mrgitk7YePdq/Qc=
Subject key identifier: D9:FA:11:04:B3:1E:A3:47:75:24:68:1F:5A:7E:A7:20:E1:6C:FA:F7
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 01A0C2F53DAF888A074C25CEFC870307620F
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2foRBLMeo0d1JGgfWn6nIOFs-vc.roa
Signing time: Mon 21 Sep 2026 07:54:06 +0000
ROA not before: Mon 21 Sep 2026 07:54:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207821
IP address blocks: 46.252.2.0/24 maxlen: 24
46.252.7.0/24 maxlen: 24
46.252.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:f5:3d:af:88:8a:07:4c:25:ce:fc:87:03:07:62:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Sep 21 07:54:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9fa1104b31ea3477524681f5a7ea720e16cfaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:4a:5b:91:89:df:9c:44:f3:90:65:94:b9:
71:63:ac:09:ef:e5:82:cd:b3:18:cc:77:33:88:74:
d1:2f:46:b9:ac:65:73:a4:52:8b:ec:51:e0:4b:39:
0a:5f:f9:b9:bd:ca:78:ba:4f:cc:a1:cf:f6:3e:b1:
3a:5d:4d:42:c1:47:17:48:8d:38:91:73:10:bf:80:
5a:87:23:1e:14:80:c4:ac:d6:57:76:39:21:f5:41:
57:c9:75:08:e0:8e:0f:35:c0:d7:f6:a1:7e:30:de:
92:de:cf:67:4e:32:b0:52:60:f2:a4:67:30:4c:54:
88:5b:c9:93:e8:d3:d7:e0:c7:19:b4:20:52:68:e2:
fc:ba:66:b4:31:90:3e:98:bc:72:31:e3:00:c5:cb:
43:bc:2c:0e:92:0c:02:c2:a8:6a:b3:67:56:1f:c7:
ea:3a:83:9f:c5:60:ae:2d:b8:5d:0e:29:c8:f7:f8:
f8:7a:88:50:5c:22:c6:ef:7c:d4:85:09:31:1a:9c:
b4:95:9b:19:7d:5e:21:f1:6a:54:af:54:2a:64:87:
30:06:f2:0b:70:83:73:d2:4c:71:74:f6:40:78:e3:
99:a2:b8:48:7e:ae:c9:aa:09:24:a4:bd:50:ab:aa:
4c:92:f1:7f:45:1c:1e:27:a0:a5:bc:5a:18:7a:a5:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:11:04:B3:1E:A3:47:75:24:68:1F:5A:7E:A7:20:E1:6C:FA:F7
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2foRBLMeo0d1JGgfWn6nIOFs-vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.2.0/24
46.252.7.0/24
46.252.11.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:2b:1b:cf:1c:75:02:77:5c:f9:56:fa:85:ce:68:0f:39:85:
0c:90:50:02:79:d2:73:34:49:dc:12:f3:e3:7e:dc:8f:a9:01:
e5:94:fb:68:4c:5a:51:b1:76:f0:0f:65:2b:77:4f:68:ee:9b:
64:88:49:df:0a:15:16:de:1a:46:6a:5b:71:e7:7c:ae:de:18:
a8:6e:bb:97:a4:38:6a:17:7d:63:22:bc:b3:34:93:7b:08:39:
a7:b9:13:93:b0:ce:70:85:5d:bc:5b:d3:51:45:ff:af:77:c0:
72:3c:c8:98:38:40:58:8e:b9:ba:3d:41:32:b8:bf:e1:fa:5f:
4b:09:95:75:60:14:e7:6b:8a:15:cd:fe:30:fe:59:3c:08:9e:
ec:88:d6:e2:87:2a:99:91:08:45:c8:8a:49:44:f0:42:88:f2:
9e:a8:0e:91:9f:7d:82:34:0c:f6:79:d4:b1:b2:a3:22:bf:f3:
ef:3b:ef:9d:64:ff:8f:91:4b:3c:ea:9f:6d:f3:81:66:2c:12:
93:05:55:08:97:51:31:5a:1a:20:c9:c3:44:5d:3a:14:47:4a:
7f:d7:11:95:d8:87:bb:e7:ec:ae:c4:ff:62:39:a2:0c:d2:7d:
65:27:15:55:f9:a3:3a:6c:92:eb:c6:57:e3:26:b9:10:02:87:
7c:fd:fc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:02:51 2026 by rpki-client