Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2Jyx-ez5D2RctC2rcjZfkrdR1iQ.roa
File: 2Jyx-ez5D2RctC2rcjZfkrdR1iQ.roa (raw, json)
Hash identifier: +fEQnj+mpmhoAARxEWCzHTDJhjSwGZNKXcffsfSyiYo=
Subject key identifier: D8:9C:B1:F9:EC:F9:0F:64:5C:B4:2D:AB:72:36:5F:92:B7:51:D6:24
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019EB526FC30FA2357EEB955F3C63BFD24CD
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2Jyx-ez5D2RctC2rcjZfkrdR1iQ.roa
Signing time: Thu 11 Jun 2026 05:28:11 +0000
ROA not before: Thu 11 Jun 2026 05:28:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62874
IP address blocks: 87.56.0.0/20 maxlen: 20
176.20.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:26:fc:30:fa:23:57:ee:b9:55:f3:c6:3b:fd:24:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Jun 11 05:28:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d89cb1f9ecf90f645cb42dab72365f92b751d624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:5e:53:06:0d:c6:c0:a6:f2:00:50:29:2f:
34:f9:56:80:bf:23:f3:33:44:21:01:91:f2:be:24:
9d:45:5d:30:8b:1d:1d:ab:39:1c:33:6b:e4:b5:e5:
79:1f:54:fc:27:8b:0b:f0:e0:94:ff:23:50:31:d0:
73:27:de:50:e1:8a:ac:a2:41:6b:37:97:3a:59:ef:
7d:cf:ba:24:0a:c0:4a:26:2b:fc:96:f5:db:c4:d6:
9b:12:da:62:42:3d:ae:f1:01:33:71:96:62:49:da:
2b:71:98:6e:0f:ea:ad:ae:be:35:5f:a5:a6:b1:00:
5b:d8:cc:97:89:77:d6:a1:4a:b9:3c:5a:9a:fb:1a:
e7:af:67:86:23:d3:f3:32:0f:ac:0d:10:a3:90:04:
c9:02:ee:58:c9:d5:48:e8:16:ad:db:17:2d:ba:47:
d6:ff:b5:36:04:ee:4a:96:33:9e:2f:3e:52:ac:49:
d8:cc:04:0d:f0:b6:ae:4d:aa:8a:8b:d5:59:83:07:
1b:c9:02:fe:e8:b4:6b:e4:01:84:68:8c:73:ec:f8:
ef:1f:69:7d:48:09:db:c2:89:01:5d:90:f3:4d:b0:
be:df:b0:95:44:d0:b3:eb:bb:c7:96:3d:34:e9:35:
75:2a:fc:de:4e:af:ca:87:04:c5:1b:91:7d:b9:38:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:B1:F9:EC:F9:0F:64:5C:B4:2D:AB:72:36:5F:92:B7:51:D6:24
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2Jyx-ez5D2RctC2rcjZfkrdR1iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.56.0.0/20
176.20.192.0/20
Signature Algorithm: sha256WithRSAEncryption
07:fd:50:f2:d3:41:35:84:81:e0:6e:38:05:7b:83:ac:f8:51:
fc:16:db:29:02:65:f8:9b:0d:92:21:7f:a3:3e:65:f9:40:c7:
a3:78:50:86:b0:6c:13:c8:a1:f9:70:31:b4:8a:4a:de:6f:74:
d3:5c:4b:80:d1:8d:9f:01:e7:54:a3:99:78:7c:9f:a6:56:21:
11:21:e0:d0:53:87:d8:bc:7a:f7:cf:68:95:f4:f0:01:e7:58:
44:54:f2:5d:bb:16:85:cf:a2:b0:03:78:53:da:d7:80:ef:b9:
f1:95:ca:d0:4d:b1:99:db:a9:58:f3:18:54:e3:00:d3:c2:b9:
1f:7d:4d:96:8a:d0:ca:9b:9e:6d:83:d7:17:dd:5f:91:19:cc:
4d:48:0a:e0:60:17:ca:24:ce:1a:07:61:8c:66:45:a6:97:bb:
a4:54:a9:a2:87:48:b4:35:61:68:bb:6e:e2:15:c1:06:72:a9:
44:cc:38:e5:5a:9e:0e:76:83:c9:3b:b3:75:81:62:f0:4b:46:
c4:a4:67:d7:7b:f7:c8:bc:3f:14:2f:4a:db:1b:32:5e:da:26:
33:c9:fd:e7:be:ae:9d:b8:ee:6a:c1:41:3d:51:e5:bc:cf:9d:
b5:1c:42:3f:6f:79:ee:5e:61:89:78:96:05:b5:9e:d7:96:d7:
c8:57:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:48:54 2026 by rpki-client