Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/BX2CRlWDANixGG_i82RpRcEDTUI.roa
File: BX2CRlWDANixGG_i82RpRcEDTUI.roa (raw, json)
Hash identifier: v212TAVopFCCJuPVnKGeWAYgeO7EWEy/vQmFRELOJbc=
Subject key identifier: 05:7D:82:46:55:83:00:D8:B1:18:6F:E2:F3:64:69:45:C1:03:4D:42
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01A0A1378CD7D29A7D02D3FAD909A131DAEA
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/BX2CRlWDANixGG_i82RpRcEDTUI.roa
Signing time: Mon 14 Sep 2026 18:39:27 +0000
ROA not before: Mon 14 Sep 2026 18:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56414
IP address blocks: 45.15.16.0/22 maxlen: 24
62.204.40.0/24 maxlen: 24
194.26.217.0/24 maxlen: 24
2a12:7800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:37:8c:d7:d2:9a:7d:02:d3:fa:d9:09:a1:31:da:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Sep 14 18:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=057d8246558300d8b1186fe2f3646945c1034d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:e4:ce:da:ca:66:50:8d:d9:84:8f:87:5e:
a9:8d:d9:8e:f6:07:c8:21:24:3d:fd:50:7c:89:ac:
4b:5f:35:ed:45:a9:69:dd:77:f9:32:50:a0:83:f6:
7e:2e:e1:6a:98:25:ac:f7:ef:07:f9:08:6c:59:1f:
22:cc:fb:b4:b5:9f:e2:9b:98:b1:2e:12:13:84:6a:
49:e8:b7:9f:99:17:e7:fe:bb:3a:f7:25:14:1e:30:
03:29:98:97:51:b9:77:be:5c:92:6b:3c:29:86:9c:
57:8f:91:4e:58:a7:cd:e3:bb:43:3d:09:87:a4:40:
77:f8:20:3e:73:04:d2:84:d0:b7:79:e2:ab:12:e5:
fc:01:6f:5b:70:6c:8f:84:79:9d:06:a3:c8:ec:f5:
a8:fc:6d:08:73:b0:3c:a7:05:5f:70:92:70:11:bd:
93:6d:bc:ed:cf:fc:73:3b:c9:a3:e5:a4:15:3a:a1:
48:49:db:e8:41:52:06:5b:1e:3f:e7:fa:b7:bd:e6:
df:76:21:43:07:52:0d:59:18:01:f3:1d:29:a3:9a:
cb:01:30:e6:92:6a:cb:39:69:27:e1:66:ef:6f:00:
f3:c6:35:03:dc:06:1e:6c:6b:48:3e:d7:8b:be:f7:
a1:a6:57:f7:ba:7b:84:84:b7:2f:56:0d:4f:e4:da:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7D:82:46:55:83:00:D8:B1:18:6F:E2:F3:64:69:45:C1:03:4D:42
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/BX2CRlWDANixGG_i82RpRcEDTUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.16.0/22
62.204.40.0/24
194.26.217.0/24
IPv6:
2a12:7800::/29
Signature Algorithm: sha256WithRSAEncryption
76:e0:e5:7a:8f:4f:82:7a:62:e1:aa:b6:f7:0f:17:c6:34:96:
d1:64:4a:e2:86:8e:e1:93:ae:bd:d8:ea:ff:d1:c0:21:d7:1c:
c3:c4:31:93:1b:b4:5b:45:22:f2:5b:ad:17:e2:a4:92:0a:a5:
f6:5e:ba:f8:c4:34:b6:cf:fd:7d:dc:d8:81:1a:a8:50:29:de:
99:04:86:aa:c0:ef:04:6c:0d:36:cf:57:9d:4e:db:bd:8c:5d:
d3:8b:c2:7b:3e:8a:f3:0c:f1:57:de:06:74:ef:44:d2:64:e3:
4a:ac:d9:08:02:53:26:a7:64:34:c6:59:02:eb:1a:29:d5:a5:
12:2c:2d:ec:8f:27:15:77:7d:c5:b9:6f:34:45:4c:4b:bb:60:
2d:29:b3:d6:a3:6a:09:07:e9:b2:9e:dc:2f:1a:26:56:b1:b2:
f0:7f:76:98:29:ad:df:87:72:04:17:02:00:00:4a:1e:1d:c3:
60:59:61:d2:03:b7:b7:31:5d:d5:4c:5e:bf:7e:6f:05:10:7e:
95:72:2e:2e:ae:91:22:4d:e5:b6:c8:9f:15:42:49:14:1f:6c:
86:ac:31:db:94:eb:db:9a:f4:cf:ec:91:50:f5:f2:d5:0d:87:
77:02:b0:32:2a:04:e4:c1:b4:1f:b2:48:b9:8e:d0:87:b4:76:
6a:0e:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:14:57 2026 by rpki-client