Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/2xBsiBaML_prQgrfILUaFOXDCC8.roa
File: 2xBsiBaML_prQgrfILUaFOXDCC8.roa (raw, json)
Hash identifier: mcBwRAYJwP60OWfO2Vpf/nJ1l9kJ5Z50goum/596W9s=
Subject key identifier: DB:10:6C:88:16:8C:2F:FA:6B:42:0A:DF:20:B5:1A:14:E5:C3:08:2F
Certificate issuer: /CN=de4426f40c3c8250f6cfc41e1ee09f4f11f09a65
Certificate serial: 019F2368C1ACE8A488DC42F6FA1E10CC8D56
Authority key identifier: DE:44:26:F4:0C:3C:82:50:F6:CF:C4:1E:1E:E0:9F:4F:11:F0:9A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kQm9Aw8glD2z8QeHuCfTxHwmmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/2xBsiBaML_prQgrfILUaFOXDCC8.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208416
IP address blocks: 45.138.120.0/24 maxlen: 24
45.138.121.0/24 maxlen: 24
45.138.122.0/24 maxlen: 24
45.138.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kQm9Aw8glD2z8QeHuCfTxHwmmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c1:ac:e8:a4:88:dc:42:f6:fa:1e:10:cc:8d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4426f40c3c8250f6cfc41e1ee09f4f11f09a65
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db106c88168c2ffa6b420adf20b51a14e5c3082f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:29:df:d4:e0:2d:6b:1e:11:71:24:de:45:
c8:78:4c:41:df:f5:d5:80:b8:d9:ac:77:73:e0:11:
89:cd:85:5d:60:06:96:a0:3c:d2:7d:7c:41:2a:a6:
ac:d2:4b:3e:83:73:d1:02:1f:2e:d5:ee:8d:9e:65:
48:9a:dc:56:fd:0a:7f:7b:be:30:88:e6:47:11:21:
af:4c:70:7a:c6:53:3a:8c:cb:de:dc:f3:c6:a5:db:
ca:b8:e4:5f:03:95:0f:01:6e:57:4c:f7:6b:df:6a:
d8:02:93:3c:cc:d4:d6:f7:bf:b4:20:29:88:8d:f1:
c9:9a:cc:74:cb:42:83:da:1f:a1:8e:db:c3:1a:f9:
d7:49:30:50:8f:15:9b:02:67:61:d1:bb:47:65:75:
09:85:7c:8e:79:87:c6:bf:8a:b8:8e:6d:0f:a6:b2:
0a:14:a6:36:94:7f:60:c6:59:9d:ec:20:d8:05:ce:
50:f7:a0:73:13:78:f2:b2:b9:0a:73:27:6f:df:f0:
1f:f2:92:a8:0f:47:c6:4e:e4:40:30:9e:0f:47:d4:
9d:1e:b1:40:07:2c:74:39:24:e5:6f:4a:04:e1:37:
03:3f:0e:32:b7:8f:29:69:b2:e1:df:2d:5f:d1:f2:
5c:d2:0a:dd:57:39:5c:fc:bc:c5:12:93:1e:f2:8b:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:10:6C:88:16:8C:2F:FA:6B:42:0A:DF:20:B5:1A:14:E5:C3:08:2F
X509v3 Authority Key Identifier:
keyid:DE:44:26:F4:0C:3C:82:50:F6:CF:C4:1E:1E:E0:9F:4F:11:F0:9A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kQm9Aw8glD2z8QeHuCfTxHwmmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/2xBsiBaML_prQgrfILUaFOXDCC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/3kQm9Aw8glD2z8QeHuCfTxHwmmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.120.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:a4:a0:74:40:99:da:04:f4:20:f2:6b:03:f7:ee:a7:51:fb:
ea:68:24:2d:e6:9b:7d:04:7f:4c:e6:44:28:f0:c8:fb:b0:4c:
de:48:74:7e:3e:c5:49:1e:87:68:ee:f6:ab:46:40:9f:3e:85:
5f:af:9a:5a:c2:7a:61:49:18:ba:74:1c:2c:9c:c2:b4:92:de:
64:7d:c4:f1:41:78:20:e2:91:55:c5:05:de:42:97:e0:15:72:
fc:c7:03:11:4b:79:a8:b3:69:84:17:3f:66:81:da:5a:f6:c6:
63:fd:e2:58:6d:38:0c:f5:da:36:87:ec:3b:94:2e:b1:ef:3e:
b7:f1:5b:2c:ea:8e:7f:92:88:8f:9e:0a:ab:26:61:26:01:ac:
39:69:14:8c:01:a0:e0:65:5e:22:e0:8d:67:7b:17:5f:eb:29:
cb:56:ca:90:8b:7b:c5:75:37:81:56:37:81:00:22:26:d1:06:
13:0c:1d:84:50:c5:39:85:c4:3d:df:6e:b9:66:45:15:b5:55:
3d:3a:03:3c:99:52:67:00:32:88:14:dc:b7:fc:8e:8d:f4:fa:
eb:a9:5c:47:25:68:82:db:72:96:e0:96:5d:d2:62:57:89:15:
17:df:e8:bc:05:31:69:05:22:9f:f4:e9:2b:ff:e2:8a:07:80:
7d:8a:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:58 2026 by rpki-client