Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2vjgabAF2pLDeBWG1-5Rp86rqZk.roa
File: 2vjgabAF2pLDeBWG1-5Rp86rqZk.roa (raw, json)
Hash identifier: d0bh/wzq070sTN//oB+Tszupuo47TRXXFm4ToCTCAZE=
Subject key identifier: DA:F8:E0:69:B0:05:DA:92:C3:78:15:86:D7:EE:51:A7:CE:AB:A9:99
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019BFB2DA41B27521E2787BDA26516CB879C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2vjgabAF2pLDeBWG1-5Rp86rqZk.roa
Signing time: Mon 26 Jan 2026 16:40:30 +0000
ROA not before: Mon 26 Jan 2026 16:40:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273265
IP address blocks: 45.137.12.0/23 maxlen: 23
45.137.12.0/24 maxlen: 24
45.137.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:2d:a4:1b:27:52:1e:27:87:bd:a2:65:16:cb:87:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 26 16:40:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daf8e069b005da92c3781586d7ee51a7ceaba999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:7b:c2:e6:78:b3:1a:32:da:d3:c5:57:81:
a1:1e:28:92:08:1b:df:88:76:e8:aa:cd:12:93:29:
9d:7b:97:c6:98:91:46:2d:ad:a1:5d:f9:b8:0d:29:
d4:47:f1:4e:77:3f:f1:33:0b:e3:8f:ae:4f:3a:5b:
56:93:91:a7:c1:70:04:35:e4:54:8d:40:a3:ea:a3:
d8:e1:b5:06:31:cf:e1:e6:0f:4b:6f:db:bc:a2:bd:
9a:f3:c8:8e:2b:db:eb:96:40:e3:f3:75:43:ff:80:
7f:89:92:45:e4:70:6d:24:1f:32:a6:07:b8:1e:8d:
34:99:95:8a:c2:a6:8e:d8:98:6c:2b:7b:e1:1b:a5:
b9:7c:9f:55:6a:7a:ca:db:c4:42:09:40:97:1e:4c:
22:a7:df:13:e9:64:4a:1f:d3:b7:14:30:cb:db:d9:
9c:ad:ce:a6:b6:4e:cf:dc:05:3e:b7:74:d5:54:4f:
0c:e0:1b:25:c7:87:69:a6:b8:a9:ad:50:b8:94:8d:
d2:6e:f2:a0:2f:ec:e1:f5:e8:33:25:a4:d5:9d:c3:
44:66:f0:74:bd:64:5f:e5:95:28:16:bb:fd:2c:47:
f7:69:65:16:21:0d:ff:bd:37:8b:bb:d2:9b:b1:13:
6c:4f:ed:ca:e1:8e:50:b0:8f:d8:2b:74:1d:d8:8e:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:E0:69:B0:05:DA:92:C3:78:15:86:D7:EE:51:A7:CE:AB:A9:99
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2vjgabAF2pLDeBWG1-5Rp86rqZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.12.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:d6:27:38:30:22:69:ac:da:c4:42:28:e7:8d:e4:47:4e:5a:
68:57:26:10:ec:65:0c:d4:36:bb:5e:6d:04:84:7a:36:e2:1c:
14:bb:c6:55:52:fd:69:62:33:45:c3:4f:72:16:3f:c0:10:2b:
3e:09:99:17:eb:25:04:5f:f9:01:a2:43:a7:4c:fb:35:01:7c:
af:e5:7b:02:c2:05:b2:f3:ab:31:4f:dd:21:2b:15:de:ac:67:
9b:0a:0d:99:8b:4d:5d:d4:28:18:66:c9:80:b5:6e:da:c4:e8:
01:6e:97:39:09:99:7f:d5:fc:ba:22:34:ff:0d:88:1f:34:d9:
2f:5c:aa:e8:11:d6:09:63:a0:42:68:f5:1d:65:ad:0b:f8:0e:
0c:55:e5:0b:54:fd:ae:81:97:50:09:9f:c2:a4:8f:f0:56:3b:
f0:55:76:ff:82:c6:4c:1e:6b:a1:7e:29:a3:dc:a9:f6:b1:08:
d6:d4:d9:9d:1f:0a:a0:84:3a:9b:f5:18:64:fa:1c:44:66:79:
6c:05:a4:52:e8:46:89:d5:9e:80:87:be:66:40:f6:35:92:61:
5c:c2:92:2f:01:10:54:fc:a4:24:55:5c:19:e8:ae:96:c4:1e:
81:8a:25:d4:53:d9:c6:aa:53:ef:01:1c:8b:69:76:ed:b2:4b:
bc:4a:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:50:05 2026 by rpki-client