Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/l-2H50X-00hqRbXcinxXRtfOf8E.roa
File: l-2H50X-00hqRbXcinxXRtfOf8E.roa (raw, json)
Hash identifier: He9ZZQ/4dfXZbCStMS8Lcu6gvV1X94SjwWPCQNPvzbs=
Subject key identifier: 97:ED:87:E7:45:FE:D3:48:6A:45:B5:DC:8A:7C:57:46:D7:CE:7F:C1
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 01A0CD335039D6E8F6E1E80232B374BBCC61
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/l-2H50X-00hqRbXcinxXRtfOf8E.roa
Signing time: Wed 23 Sep 2026 07:38:07 +0000
ROA not before: Wed 23 Sep 2026 07:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 45.9.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:33:50:39:d6:e8:f6:e1:e8:02:32:b3:74:bb:cc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Sep 23 07:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97ed87e745fed3486a45b5dc8a7c5746d7ce7fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:b0:4e:e5:aa:8d:6b:8f:b3:6f:8e:07:11:
21:0d:93:5d:6f:dc:f5:c7:f5:11:10:4e:9a:72:3a:
20:d4:58:d6:9b:98:1f:5b:35:3b:89:90:d3:32:e5:
e6:25:4e:0d:25:43:75:68:e1:40:6a:e7:3b:38:04:
45:90:52:54:64:f6:5a:b2:ad:ab:fb:49:95:29:b3:
b6:77:3d:55:84:06:a4:67:7a:82:db:a3:9b:d0:30:
60:f2:f8:e5:af:b1:9a:79:fd:dd:cf:7c:07:06:2d:
2b:7d:f3:70:51:2e:c8:f5:dd:13:17:62:8f:db:f0:
01:2f:22:96:d9:be:40:6f:67:df:db:8f:bc:1d:1c:
0e:f5:ce:01:4c:6d:df:b6:45:e4:bd:2c:ec:01:e7:
e0:86:78:f3:d1:fd:37:48:cb:b4:ed:09:7e:1c:25:
15:fb:ba:3f:42:29:f7:85:db:85:f5:a1:27:d1:ff:
f2:45:4c:fd:de:1b:35:fa:8c:38:be:87:64:d5:0c:
25:05:ab:b4:ab:5e:6b:67:12:3a:3f:dc:5f:3c:b5:
60:5d:65:25:d5:bd:85:cb:da:8c:76:25:f3:9d:da:
4b:21:a7:06:82:0f:eb:da:7c:f3:d5:24:cc:34:bb:
a7:ae:a4:ca:f9:91:43:26:d9:1f:f7:27:b7:f7:c2:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:ED:87:E7:45:FE:D3:48:6A:45:B5:DC:8A:7C:57:46:D7:CE:7F:C1
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/l-2H50X-00hqRbXcinxXRtfOf8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:12:70:5e:09:d7:47:22:05:67:fd:c9:07:86:04:81:85:db:
3f:f1:22:49:0e:63:43:a6:51:12:88:d8:b4:cc:03:28:54:f1:
a8:a6:db:e4:df:f1:16:4b:04:dd:6e:c2:61:ad:5c:6f:bb:7c:
2f:67:7f:cf:2b:a5:50:80:ad:8d:b7:89:04:b0:ea:c0:41:f8:
e8:64:88:0b:e3:3e:8a:1b:40:d2:34:09:1b:67:b4:8e:4c:44:
12:aa:4a:5f:b3:31:74:33:55:6d:be:b1:1c:d8:57:15:35:0d:
19:62:3c:de:54:87:30:99:1f:c9:53:88:f6:2c:b6:e0:11:28:
ff:6b:b8:15:9c:38:29:0b:89:f4:82:f7:23:50:07:c9:72:19:
14:53:1a:db:15:81:38:9f:aa:7a:be:cd:68:c2:f2:5c:bf:4e:
e3:4c:1c:e3:40:bb:9d:8e:1c:f8:88:41:a8:99:39:aa:75:2c:
6e:24:7a:c9:aa:ff:00:55:61:d8:24:c3:83:72:ab:07:a0:fb:
39:54:15:56:f2:de:cb:6b:e4:1d:b4:4f:53:62:a3:f0:69:96:
7f:c6:46:16:d3:a0:1b:82:9a:89:80:37:7b:2e:36:26:da:71:
38:d1:b3:2d:88:f3:02:bd:95:37:32:79:74:87:fa:66:ac:12:
92:75:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:48:03 2026 by rpki-client