Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/2eLWPOfiET7e2v9a1YH1Fkl7kX8.roa
File: 2eLWPOfiET7e2v9a1YH1Fkl7kX8.roa (raw, json)
Hash identifier: uBRO0/Bk5b9F+qlKW2ZPI86En3jNkpbNDHJnzq8wJRA=
Subject key identifier: D9:E2:D6:3C:E7:E2:11:3E:DE:DA:FF:5A:D5:81:F5:16:49:7B:91:7F
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 01A1CF00E78BEDF072787EF0B6BD3512661A
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/2eLWPOfiET7e2v9a1YH1Fkl7kX8.roa
Signing time: Thu 12 Nov 2026 09:05:05 +0000
ROA not before: Thu 12 Nov 2026 09:05:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 189.13.51.0/24 maxlen: 24
189.13.52.0/24 maxlen: 24
189.13.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:00:e7:8b:ed:f0:72:78:7e:f0:b6:bd:35:12:66:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Nov 12 09:05:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9e2d63ce7e2113ededaff5ad581f516497b917f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e2:da:45:20:b4:cc:3d:b4:ee:5a:ae:42:2b:
f3:8d:38:d0:91:f5:92:80:e1:d5:3a:60:7b:c3:74:
3b:0b:8a:f0:4a:6a:85:3e:27:30:9c:06:05:ff:a8:
33:b9:a7:cc:48:3f:0b:98:10:76:5b:ae:19:d2:c0:
f4:d0:54:ce:b8:68:01:a8:cc:9c:fd:68:f2:7d:5c:
6b:81:3d:82:27:1d:89:19:61:be:3c:05:4e:b8:1a:
65:91:f6:23:4e:9b:6d:e4:06:77:5c:34:4d:0d:2b:
92:7f:90:28:3a:a4:d6:8f:27:48:5f:30:18:c3:e5:
4c:c5:53:cb:35:cd:f6:ac:cc:03:08:50:29:66:78:
23:e6:fc:97:b6:e7:b1:b3:cf:0f:75:85:e4:93:37:
6e:70:45:28:1d:0e:43:38:fb:2e:57:e2:1f:f8:10:
86:f2:d4:cc:41:85:06:f7:86:2f:47:12:af:bb:8d:
41:c2:32:d9:ea:6f:50:d8:14:e7:5b:a8:6c:92:f9:
b7:17:94:82:1f:6d:3c:ea:c0:f1:3a:c0:aa:0c:ce:
0f:b9:f8:02:6a:fd:1b:83:14:a2:4a:90:2b:3b:de:
5b:47:9e:ba:e2:9a:2a:a4:eb:5b:6f:1e:e8:38:ec:
a3:4c:76:48:c6:b7:be:b7:4e:41:7e:b4:1d:53:00:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E2:D6:3C:E7:E2:11:3E:DE:DA:FF:5A:D5:81:F5:16:49:7B:91:7F
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/2eLWPOfiET7e2v9a1YH1Fkl7kX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.51.0-189.13.52.255
189.13.192.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:5f:d7:fc:c0:01:1c:31:4d:13:fd:2b:ee:25:b3:40:92:7e:
31:0b:79:14:8c:4e:45:48:70:9d:53:1d:3e:01:52:13:cc:de:
97:ac:9e:49:84:d1:e8:0e:af:68:4c:6f:ae:cf:e6:6e:ad:56:
a1:b6:25:e3:a1:a8:19:87:c2:b2:8c:b6:35:28:1f:a7:17:38:
9a:87:28:9f:e5:f2:76:8d:81:9f:3d:a6:db:c0:91:06:f0:32:
c2:98:a2:51:20:61:7e:12:27:26:32:23:70:e6:9e:08:89:fd:
d3:b6:16:ed:3a:08:78:3b:90:4d:c6:8b:78:e6:86:ad:0b:36:
5c:56:1f:d0:c5:22:ee:e4:5a:94:a1:90:5b:60:79:93:97:69:
00:5c:d8:b2:eb:10:c6:cb:cd:f1:56:40:07:6a:ce:67:27:ac:
1e:d5:d0:c8:b2:15:e6:de:d0:1d:c3:59:b0:0d:fb:cc:be:16:
b7:d4:16:59:90:f5:e1:4f:8a:b1:55:be:c3:c9:35:04:9a:8e:
d0:c5:5f:c1:3d:db:35:f2:b1:6c:86:f8:29:4d:36:2e:f3:49:
f3:cd:f9:db:3d:e6:7c:6c:0a:65:f1:a4:c1:f2:69:09:a9:2d:
38:4f:24:6b:dc:ab:33:3a:97:72:0d:10:d8:2f:6a:d0:b4:34:
4a:a9:62:26
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaHPAOeL7fByeH7wtr01EmYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMGU0NDUxOTViNjRkNzk5YjgyMmU5OTk0Nzc5MmUwY2Fi
MzJiNmQwHhcNMjYxMTEyMDkwNTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWUyZDYzY2U3ZTIxMTNlZGVkYWZmNWFkNTgxZjUxNjQ5N2I5MTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uLaRSC0zD207lquQivzjTjQkfWS
gOHVOmB7w3Q7C4rwSmqFPicwnAYF/6gzuafMSD8LmBB2W64Z0sD00FTOuGgBqMyc
/WjyfVxrgT2CJx2JGWG+PAVOuBplkfYjTptt5AZ3XDRNDSuSf5AoOqTWjydIXzAY
w+VMxVPLNc32rMwDCFApZngj5vyXtuexs88PdYXkkzducEUoHQ5DOPsuV+If+BCG
8tTMQYUG94YvRxKvu41BwjLZ6m9Q2BTnW6hskvm3F5SCH2086sDxOsCqDM4PufgC
av0bgxSiSpArO95bR5664poqpOtbbx7oOOyjTHZIxre+t05BfrQdUwBurQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNni1jzn4hE+3tr/WtWB9RZJe5F/MB8GA1UdIwQY
MBaAFPMORFGVtk15m4IumZR3kuDKsyttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgt
YjdjYTFmNDcyOGQwLzEvMmVMV1BPZmlFVDdlMnY5YTFZSDFGa2w3a1g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgtYjdjYTFmNDcyOGQw
LzEvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAC9DTMD
BAC9DTQDBAS9DcAwDQYJKoZIhvcNAQELBQADggEBAIxf1/zAARwxTRP9K+4ls0CS
fjELeRSMTkVIcJ1THT4BUhPM3pesnkmE0egOr2hMb67P5m6tVqG2JeOhqBmHwrKM
tjUoH6cXOJqHKJ/l8naNgZ89ptvAkQbwMsKYolEgYX4SJyYyI3DmngiJ/dO2Fu06
CHg7kE3Gi3jmhq0LNlxWH9DFIu7kWpShkFtgeZOXaQBc2LLrEMbLzfFWQAdqzmcn
rB7V0MiyFebe0B3DWbAN+8y+FrfUFlmQ9eFPirFVvsPJNQSajtDFX8E92zXysWyG
+ClNNi7zSfPN+ds95nxsCmXxpMHyaQmpLThPJGvcqzM6l3INENgvatC0NEqpYiY=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:55 2026 by rpki-client