Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2ypgh-7bRnMNFSNsl4wkGx1m4aI.roa
File: 2ypgh-7bRnMNFSNsl4wkGx1m4aI.roa (raw, json)
Hash identifier: EidgmEInsAACQ2JF2/JEe3GXeqzoa8QmGDq2/plEPB8=
Subject key identifier: DB:2A:60:87:EE:DB:46:73:0D:15:23:6C:97:8C:24:1B:1D:66:E1:A2
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FB1DB1F03BFAD76F8EBED1B0FDE9A46F6
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2ypgh-7bRnMNFSNsl4wkGx1m4aI.roa
Signing time: Thu 30 Jul 2026 07:09:15 +0000
ROA not before: Thu 30 Jul 2026 07:09:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 89.213.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:db:1f:03:bf:ad:76:f8:eb:ed:1b:0f:de:9a:46:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 30 07:09:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db2a6087eedb46730d15236c978c241b1d66e1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:ca:47:d9:95:5d:ff:5b:c8:54:ea:72:cf:
be:44:2e:c4:2c:4b:0f:19:21:5f:93:0e:30:ce:12:
5b:d9:62:29:ad:da:7a:a5:80:30:0e:a5:90:1e:63:
dd:2b:f8:60:d6:88:5a:b8:d7:25:5d:7b:85:33:e3:
7b:51:a0:c8:9d:75:7c:4e:6c:c4:74:5c:b1:19:14:
97:52:66:56:cc:6d:f7:9b:30:c7:4e:47:00:dc:87:
23:26:fe:c6:e4:05:f8:b9:30:d6:fa:5d:a7:74:c9:
e7:fe:ed:d7:b7:e3:34:11:33:fe:09:83:56:11:73:
2e:a6:01:9c:2c:fa:65:ab:67:73:83:64:6f:78:dc:
17:5a:1a:b1:a6:6a:0e:29:1d:68:50:6e:8b:a4:56:
0b:73:da:bf:d3:f5:89:79:cd:50:cd:5a:33:5c:3a:
19:dd:d3:da:40:3f:e3:60:cc:16:b2:7d:df:05:6c:
fa:c1:c8:2e:7c:a0:09:21:ff:85:34:6a:4c:98:a1:
22:9e:3b:83:6d:01:22:35:f4:33:73:bb:57:ce:35:
8f:d9:24:b2:36:af:53:e5:06:4a:d2:18:ac:24:a2:
b1:9c:84:be:ec:b7:6e:79:47:21:33:21:ba:a8:0e:
7f:a5:cc:25:34:23:39:52:64:07:1e:13:eb:e0:b3:
d5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2A:60:87:EE:DB:46:73:0D:15:23:6C:97:8C:24:1B:1D:66:E1:A2
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2ypgh-7bRnMNFSNsl4wkGx1m4aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.200.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9a:66:97:22:7d:a9:61:15:06:ca:58:09:9b:c0:dd:00:9b:
45:1d:23:a8:2a:f0:47:6b:ca:af:bc:0b:61:0a:a8:7f:d7:20:
ba:43:b7:5c:64:19:cc:2d:f0:72:8d:2e:fd:09:29:ce:0c:10:
eb:b2:b2:7a:f7:86:19:32:9b:cf:a7:99:c7:4e:bb:40:b3:a2:
f9:06:06:e4:e3:06:ae:3b:86:31:46:37:3a:fe:e1:a6:ec:82:
02:0d:ba:72:a8:38:1a:28:2c:c1:f4:be:e1:17:fa:12:f2:5d:
0a:7f:e0:b9:7e:70:03:a5:91:c9:89:3d:49:8d:60:6e:8a:e8:
f7:ac:ed:c9:6a:4c:44:5a:37:26:e7:fa:52:92:b0:50:c8:c3:
7f:36:c6:5a:83:63:2e:63:10:99:b1:dc:43:27:f3:34:f9:a2:
60:e5:b7:0e:82:dd:03:c6:57:60:60:57:7a:0e:8a:3a:5e:0b:
07:1e:3d:c7:f0:1a:a9:a1:4a:45:4c:6a:1f:7e:42:ee:6f:9b:
a8:bb:7c:9e:03:32:d9:e6:ce:b3:07:db:c1:9c:1f:bd:22:d7:
77:64:56:37:34:49:e5:3b:e6:11:89:ac:95:fe:29:58:de:84:
36:01:aa:e9:86:fa:56:3e:34:22:95:ce:d6:fb:0b:90:42:b0:
a9:cb:33:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+x2x8Dv612+OvtGw/emkb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzMwMDcwOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjJhNjA4N2VlZGI0NjczMGQxNTIzNmM5NzhjMjQxYjFkNjZlMWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYTKR9mVXf9byFTqcs++RC7ELEsP
GSFfkw4wzhJb2WIprdp6pYAwDqWQHmPdK/hg1ohauNclXXuFM+N7UaDInXV8TmzE
dFyxGRSXUmZWzG33mzDHTkcA3IcjJv7G5AX4uTDW+l2ndMnn/u3Xt+M0ETP+CYNW
EXMupgGcLPplq2dzg2RveNwXWhqxpmoOKR1oUG6LpFYLc9q/0/WJec1QzVozXDoZ
3dPaQD/jYMwWsn3fBWz6wcgufKAJIf+FNGpMmKEinjuDbQEiNfQzc7tXzjWP2SSy
Nq9T5QZK0hisJKKxnIS+7LdueUchMyG6qA5/pcwlNCM5UmQHHhPr4LPVuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNsqYIfu20ZzDRUjbJeMJBsdZuGiMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMnlwZ2gtN2JSbk1ORlNOc2w0d2tHeDFtNGFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdXIMA0G
CSqGSIb3DQEBCwUAA4IBAQAjmmaXIn2pYRUGylgJm8DdAJtFHSOoKvBHa8qvvAth
Cqh/1yC6Q7dcZBnMLfByjS79CSnODBDrsrJ694YZMpvPp5nHTrtAs6L5Bgbk4wau
O4YxRjc6/uGm7IICDbpyqDgaKCzB9L7hF/oS8l0Kf+C5fnADpZHJiT1JjWBuiuj3
rO3JakxEWjcm5/pSkrBQyMN/NsZag2MuYxCZsdxDJ/M0+aJg5bcOgt0DxldgYFd6
Doo6XgsHHj3H8BqpoUpFTGoffkLub5uou3yeAzLZ5s6zB9vBnB+9Itd3ZFY3NEnl
O+YRiayV/ilY3oQ2AarphvpWPjQilc7W+wuQQrCpyzP7
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:29 2026 by rpki-client