Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/2BJ_nfQkcjgB9tKKJxLg9PKuMOQ.roa
File: 2BJ_nfQkcjgB9tKKJxLg9PKuMOQ.roa (raw, json)
Hash identifier: jTJnDdSj87uLAlCnJBNX/R6CHkzsThJ9YfhavkBcAXk=
Subject key identifier: D8:12:7F:9D:F4:24:72:38:01:F6:D2:8A:27:12:E0:F4:F2:AE:30:E4
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F3D1043069AB3591FC27C2AFDD93911D2
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/2BJ_nfQkcjgB9tKKJxLg9PKuMOQ.roa
Signing time: Tue 07 Jul 2026 14:51:43 +0000
ROA not before: Tue 07 Jul 2026 14:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 89.187.9.0/24 maxlen: 24
89.187.27.0/24 maxlen: 24
89.187.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:10:43:06:9a:b3:59:1f:c2:7c:2a:fd:d9:39:11:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 7 14:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8127f9df424723801f6d28a2712e0f4f2ae30e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:10:14:4f:d4:49:aa:a6:32:5e:3b:d2:e3:
f1:8d:ca:c0:b9:ff:48:21:31:7d:8d:e9:12:fa:bc:
31:44:ab:e2:18:34:a0:2f:34:23:b2:7a:09:b4:bf:
a0:36:64:87:3e:c4:c4:32:a3:35:98:59:02:69:6b:
da:fc:15:b2:f2:c4:05:24:6a:ea:0d:5a:ad:0b:c7:
7f:1d:60:db:20:9c:0a:37:11:90:25:6a:3b:e5:ef:
44:e4:aa:95:de:79:cd:9a:8c:39:ca:e0:6d:3a:f8:
95:7d:e6:0a:46:50:78:2d:70:3d:34:8a:98:1c:9d:
0c:99:f0:c1:2a:7e:2c:fc:c3:6e:92:fc:62:cc:44:
4b:f0:45:8b:68:06:a1:51:74:47:a2:a8:06:13:c8:
ae:01:85:06:63:e0:8b:5a:cb:e8:82:26:b8:92:12:
98:a8:dc:6c:1c:82:85:db:f2:1b:5d:22:00:f1:5d:
12:5f:fd:bd:39:6b:96:2e:25:15:69:1e:ca:7f:ce:
da:de:2d:81:9a:5d:94:ed:04:80:70:51:b8:3d:75:
18:3c:06:13:3f:fb:32:34:29:34:90:c8:21:4a:00:
79:44:f3:bd:86:19:d5:ee:67:78:88:b8:e3:44:ad:
4f:53:fe:2b:40:ce:6f:d2:a7:1c:f1:a2:3c:48:2f:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:12:7F:9D:F4:24:72:38:01:F6:D2:8A:27:12:E0:F4:F2:AE:30:E4
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/2BJ_nfQkcjgB9tKKJxLg9PKuMOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.9.0/24
89.187.27.0/24
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:85:a0:05:19:cf:f2:72:a8:dc:60:d1:37:79:f6:d1:28:a8:
14:e8:ca:95:df:e9:b9:57:32:e0:31:f9:28:51:08:da:81:df:
85:3b:4a:fc:29:08:22:6c:2e:7e:85:a6:8e:6d:ca:99:d4:90:
95:a3:3e:b1:2e:6f:3e:72:3e:84:d7:6d:14:2e:7b:d2:85:82:
12:73:c7:fd:f2:0a:39:fb:71:f5:6f:1e:2f:55:75:06:ba:54:
47:c2:22:ee:52:91:9b:74:51:95:29:d7:55:c1:dd:a0:69:7a:
87:8e:45:8c:41:5d:8a:b7:d2:87:0f:b9:47:ba:ee:e8:e9:75:
6a:24:3c:26:0d:41:2d:45:57:e0:7a:a1:6e:31:e4:5e:47:cd:
ef:48:39:9c:38:7c:16:d9:50:56:45:34:0a:24:cc:9e:76:94:
3d:07:0e:13:98:88:39:e1:b2:00:0e:2b:b6:05:b7:5f:05:30:
90:3b:06:51:a9:0f:75:c3:9c:1b:0c:a8:4d:95:57:d2:d2:c1:
d8:1d:d3:79:4e:15:da:20:85:cf:45:9b:8a:96:22:c4:03:5c:
a0:b7:e8:19:cb:10:54:18:c7:38:57:53:ac:ad:9a:a8:4b:f0:
ad:aa:b0:80:9f:e2:64:63:1a:11:f6:c8:d1:77:73:6f:61:e4:
bc:77:f1:37
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ89EEMGmrNZH8J8Kv3ZORHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWI5MjIwNTNiYzJlNmIxNWYyNmM1Zjg5MGE1NWViZjVh
YjNjZGEwHhcNMjYwNzA3MTQ1MTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODEyN2Y5ZGY0MjQ3MjM4MDFmNmQyOGEyNzEyZTBmNGYyYWUzMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SwQFE/USaqmMl470uPxjcrAuf9I
ITF9jekS+rwxRKviGDSgLzQjsnoJtL+gNmSHPsTEMqM1mFkCaWva/BWy8sQFJGrq
DVqtC8d/HWDbIJwKNxGQJWo75e9E5KqV3nnNmow5yuBtOviVfeYKRlB4LXA9NIqY
HJ0MmfDBKn4s/MNukvxizERL8EWLaAahUXRHoqgGE8iuAYUGY+CLWsvogia4khKY
qNxsHIKF2/IbXSIA8V0SX/29OWuWLiUVaR7Kf87a3i2Bml2U7QSAcFG4PXUYPAYT
P/syNCk0kMghSgB5RPO9hhnV7md4iLjjRK1PU/4rQM5v0qcc8aI8SC9rLQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNgSf530JHI4AfbSiicS4PTyrjDkMB8GA1UdIwQY
MBaAFFsbkiBTvC5rFfJsX4kKVev1qzzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvMkJKX25mUWtjamdCOXRLS0p4TGc5UEt1TU9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvV3h1U0lGTzhMbXNWOG14ZmlRcFY2X1dyUE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWbsJAwQA
WbsbAwQAWbsfMA0GCSqGSIb3DQEBCwUAA4IBAQAvhaAFGc/ycqjcYNE3efbRKKgU
6MqV3+m5VzLgMfkoUQjagd+FO0r8KQgibC5+haaObcqZ1JCVoz6xLm8+cj6E120U
LnvShYISc8f98go5+3H1bx4vVXUGulRHwiLuUpGbdFGVKddVwd2gaXqHjkWMQV2K
t9KHD7lHuu7o6XVqJDwmDUEtRVfgeqFuMeReR83vSDmcOHwW2VBWRTQKJMyedpQ9
Bw4TmIg54bIADiu2BbdfBTCQOwZRqQ91w5wbDKhNlVfS0sHYHdN5ThXaIIXPRZuK
liLEA1ygt+gZyxBUGMc4V1OsrZqoS/CtqrCAn+JkYxoR9sjRd3NvYeS8d/E3
-----END CERTIFICATE-----
Generated at Wed Jul 8 00:11:52 2026 by rpki-client