Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2rM-6U_L--GfPxihFtf3ZY8O-x4.roa
File: 2rM-6U_L--GfPxihFtf3ZY8O-x4.roa (raw, json)
Hash identifier: gPjquVskfU8eiHVcJZ76VhnCKWSgCT1UPEE/cxuhBuA=
Subject key identifier: DA:B3:3E:E9:4F:CB:FB:E1:9F:3F:18:A1:16:D7:F7:65:8F:0E:FB:1E
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019C299876E9D72BCAEE6E198A981F59F186
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2rM-6U_L--GfPxihFtf3ZY8O-x4.roa
Signing time: Wed 04 Feb 2026 16:59:43 +0000
ROA not before: Wed 04 Feb 2026 16:59:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203911
IP address blocks: 45.151.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:29:98:76:e9:d7:2b:ca:ee:6e:19:8a:98:1f:59:f1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Feb 4 16:59:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dab33ee94fcbfbe19f3f18a116d7f7658f0efb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:c6:f5:05:9d:1b:54:5a:52:47:5d:59:bf:
b7:b8:39:40:5c:cf:24:05:32:8b:94:56:78:d2:7a:
e3:41:a3:ce:b8:83:7d:ab:9c:b4:05:b2:c3:ad:ad:
c6:2d:92:fe:57:b2:66:13:c8:64:41:0f:8e:8f:db:
cc:10:00:ec:ed:89:9a:99:52:4c:72:f1:83:2e:55:
5d:e2:f0:68:d4:c5:9f:65:95:be:f2:47:49:49:69:
f8:e0:2a:32:06:1a:24:94:03:f6:31:a8:55:b0:f9:
93:f5:b5:b6:f2:d5:ec:d6:7e:37:13:e9:e8:f0:d0:
b8:6a:ae:b4:fd:e5:29:ac:80:07:30:63:4f:9c:d8:
d5:16:e5:e1:9e:67:cf:85:80:4c:10:e1:a1:db:95:
36:bb:0e:04:26:9f:78:5a:b6:62:f0:c3:0e:26:d1:
5d:db:6e:11:9f:d0:3e:44:40:4a:36:d1:01:2e:e7:
10:28:9e:3d:d9:c8:52:1c:40:b6:20:0f:d0:b0:bc:
b1:8c:66:b0:80:0a:0d:db:32:8b:56:af:5a:30:53:
ec:df:7b:1b:f9:4d:15:8f:a4:0a:ab:d9:f6:b5:e7:
e2:d5:39:16:eb:0c:95:22:89:27:14:d3:23:6c:0f:
e4:a4:c4:85:0e:d0:df:84:40:58:6b:a5:25:f4:6a:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B3:3E:E9:4F:CB:FB:E1:9F:3F:18:A1:16:D7:F7:65:8F:0E:FB:1E
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2rM-6U_L--GfPxihFtf3ZY8O-x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.52.0/23
Signature Algorithm: sha256WithRSAEncryption
50:12:2c:59:27:3d:7f:35:22:1c:53:f8:4e:7b:45:1c:83:af:
2b:6d:13:1e:d0:6b:14:97:4c:83:6b:d8:af:db:90:30:c3:e1:
0f:a1:84:74:18:83:6d:aa:93:97:c8:f6:e5:03:ef:d3:20:7d:
15:b7:0b:75:e6:1e:15:3f:c2:09:cf:a8:25:85:ff:79:91:fa:
4c:6f:75:89:49:c0:63:23:d8:87:bb:a0:12:fa:fa:92:06:67:
b4:a4:e2:f3:b5:00:46:c3:93:52:37:a3:2c:eb:47:51:50:8f:
09:fb:43:ea:90:37:48:b6:28:6d:02:9b:1b:af:33:2d:d5:98:
b4:5d:99:29:e4:42:a8:6c:96:45:28:12:3b:fe:72:51:8c:11:
8e:0f:5e:cb:96:7b:0e:a6:d4:64:2c:16:0c:d1:25:b6:5a:80:
1b:03:7a:89:8f:6a:18:22:0a:22:65:88:2b:2a:57:4a:a6:04:
09:9b:97:7c:8f:f6:08:12:53:ff:d7:ea:92:18:6b:c3:1b:3f:
80:2d:f8:cd:e2:a9:db:34:76:83:51:5c:db:26:36:5f:0f:ad:
32:b6:d5:49:56:5c:c7:3a:5a:29:88:9b:ec:09:e6:a2:ab:44:
77:d8:6e:f9:d3:69:58:21:79:bd:46:7a:a9:1d:65:25:98:c3:
d4:92:3e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:10 2026 by rpki-client