Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/2EzBMCxitKEU7LXH-qvPgjuRskc.roa
File: 2EzBMCxitKEU7LXH-qvPgjuRskc.roa (raw, json)
Hash identifier: ihdclP04J7bhZd7px7VfHRiZuwUtV8lE+bXYoHZ7Ed8=
Subject key identifier: D8:4C:C1:30:2C:62:B4:A1:14:EC:B5:C7:FA:AB:CF:82:3B:91:B2:47
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F236907DAC2352CBB0EAF60AFD18C25AE
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/2EzBMCxitKEU7LXH-qvPgjuRskc.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 89.187.6.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:07:da:c2:35:2c:bb:0e:af:60:af:d1:8c:25:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d84cc1302c62b4a114ecb5c7faabcf823b91b247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:10:25:10:bb:0c:23:e8:bd:a0:dc:fd:af:
bb:b1:16:21:30:27:19:9d:73:ca:94:da:0f:db:d0:
d4:90:d8:9c:6b:ef:7a:03:0e:6b:3b:fd:cf:20:57:
2a:7b:44:04:f6:15:fb:a0:72:c9:8e:eb:02:20:a9:
7e:f0:ad:48:33:de:d1:c4:50:34:17:37:d0:4d:06:
7c:bf:91:d2:fb:c2:6c:64:72:36:a3:54:a6:85:c8:
22:c2:a1:3f:74:e9:53:3c:77:b2:28:3c:c2:3e:e9:
21:d0:8f:24:8b:2d:b9:ae:c1:b0:e8:83:a8:6b:00:
8e:59:4d:73:3b:5f:af:8d:ab:5e:fb:31:ac:11:64:
3b:eb:6d:60:84:bd:1d:05:4a:1f:a6:da:2e:a2:f2:
df:3b:13:a7:ee:82:a6:53:dc:a8:78:23:7b:49:89:
95:96:8f:ba:fd:7e:82:f9:93:20:78:b2:89:dd:18:
23:94:54:69:78:eb:fd:ff:75:7f:70:e3:b4:62:17:
6a:2d:2a:10:c7:e7:03:44:c2:9f:67:5d:ee:7b:6b:
a7:cd:d9:65:d9:c4:81:95:70:6a:b4:58:6f:f0:a9:
80:be:1f:3f:c2:97:16:7e:80:e0:01:83:3f:20:36:
48:8c:79:c6:83:93:68:30:e1:dc:29:01:51:06:1e:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4C:C1:30:2C:62:B4:A1:14:EC:B5:C7:FA:AB:CF:82:3B:91:B2:47
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/2EzBMCxitKEU7LXH-qvPgjuRskc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0/24
89.187.8.0/24
89.187.10.0/24
89.187.12.0/24
89.187.14.0/23
89.187.17.0-89.187.19.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:99:eb:ed:db:b2:70:0d:10:0f:40:48:64:e1:01:b0:bb:72:
e8:4f:12:77:17:32:ef:b5:84:19:22:fb:97:3c:88:c4:90:c1:
48:16:69:ba:c2:a8:8c:28:e6:ff:f6:bd:9e:4f:27:38:95:01:
bf:76:04:6b:0e:bf:e6:1b:ea:86:17:d5:17:ef:10:7d:ea:34:
91:5b:d3:4a:31:7d:ca:fb:74:bc:fb:5b:79:70:58:1a:df:7e:
d4:3c:fb:be:cc:45:1e:ef:90:39:a4:c7:95:92:aa:1f:da:5b:
8e:53:10:24:36:50:d8:f2:cd:bd:40:d3:66:5b:a4:41:86:01:
48:f6:81:e5:14:d8:b3:0b:38:6c:13:b4:83:1a:95:44:80:62:
2a:f2:a4:e9:78:e5:6f:a2:36:56:7f:d4:3a:4b:92:c5:ab:20:
34:23:fb:4d:d1:a3:57:bf:e7:cc:0c:fb:36:55:4f:53:72:65:
b0:80:5b:66:b1:93:e7:f1:14:ed:60:09:fa:14:4f:84:c0:54:
b4:4c:38:55:3b:1a:70:d1:92:70:91:dd:fb:7a:bc:91:ef:17:
69:96:c6:25:a3:18:d7:eb:9d:d9:a8:cf:e4:6d:50:1d:bc:72:
b0:13:e8:3d:c7:62:60:c7:9c:ee:b3:c2:2e:ac:a9:24:94:aa:
1f:e5:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:10:04 2026 by rpki-client