Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/2N9i1CzDpc0egqGVX0clv4lUubw.roa
File: 2N9i1CzDpc0egqGVX0clv4lUubw.roa (raw, json)
Hash identifier: 0Z5Vn3qSr7vgF7DqxBS8Cc1Xd8dZ7bbcM9OF1TVekYk=
Subject key identifier: D8:DF:62:D4:2C:C3:A5:CD:1E:82:A1:95:5F:47:25:BF:89:54:B9:BC
Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial: 019ED96A143D493990D4145031B247FE878F
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/2N9i1CzDpc0egqGVX0clv4lUubw.roa
Signing time: Thu 18 Jun 2026 06:27:48 +0000
ROA not before: Thu 18 Jun 2026 06:27:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212166
IP address blocks: 89.39.245.0/24 maxlen: 24
185.36.22.0/24 maxlen: 24
2a04:7080:800::/42 maxlen: 48
2a04:7080:840::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:6a:14:3d:49:39:90:d4:14:50:31:b2:47:fe:87:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Validity
Not Before: Jun 18 06:27:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8df62d42cc3a5cd1e82a1955f4725bf8954b9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:e5:04:78:5c:22:3a:bc:2b:43:92:4f:be:
65:ff:8b:3e:3a:e8:b4:4b:d2:b9:91:75:8a:96:05:
df:83:7c:85:d6:e5:e3:5c:cc:5e:01:cf:4a:06:c8:
b5:20:19:d9:ce:a5:af:24:26:4d:13:1a:ba:75:cd:
d2:0b:5e:c1:8f:93:36:18:2f:c6:53:36:75:42:8b:
bc:7d:f6:fe:6f:dd:8c:75:14:72:84:81:eb:b3:31:
5f:16:f9:4a:0c:3d:bc:2c:87:3d:27:b9:04:fe:6a:
8f:01:89:47:7f:db:aa:54:be:b2:1f:50:35:1c:e8:
0d:ad:58:fe:b9:5c:cb:2a:51:5d:9a:78:64:c7:c3:
69:f2:dd:98:5f:4a:82:47:45:62:b1:5d:64:6b:a4:
8f:f6:7c:69:75:e9:b5:79:5c:8c:82:0d:41:62:03:
8f:97:fd:a9:16:d3:a0:dc:35:7c:98:77:0e:7f:98:
bd:2a:ca:e5:44:4a:99:9e:23:40:40:0f:e6:e1:1c:
4d:69:f3:19:71:5d:ec:6c:f6:5f:3e:5f:f6:cf:56:
49:eb:52:8f:67:32:73:c0:01:2c:02:39:b2:a4:96:
c9:a6:13:00:f2:da:84:93:ad:fb:ca:0b:74:72:d1:
02:c6:82:32:1c:08:37:72:e5:fa:05:e1:c1:b4:a6:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DF:62:D4:2C:C3:A5:CD:1E:82:A1:95:5F:47:25:BF:89:54:B9:BC
X509v3 Authority Key Identifier:
keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/2N9i1CzDpc0egqGVX0clv4lUubw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.245.0/24
185.36.22.0/24
IPv6:
2a04:7080:800::/41
Signature Algorithm: sha256WithRSAEncryption
db:25:d3:c9:d5:e9:6b:1a:45:50:44:ad:3e:5a:f0:6e:86:c7:
df:03:b5:b5:e0:fe:25:ac:81:7e:b7:6e:97:06:bf:bf:bc:8d:
a2:41:c8:b6:f2:84:43:33:d2:6a:73:9d:b1:02:4f:75:0c:c1:
06:d8:70:2f:f6:08:07:6c:12:21:a5:f7:53:c6:8b:9f:d5:95:
5b:14:04:f2:06:32:8b:b6:f4:de:aa:2a:92:5c:50:20:ee:83:
92:84:85:3c:41:36:0f:eb:15:dd:17:a2:31:cf:cf:0d:bf:e4:
29:9c:fc:81:35:e7:98:a2:15:2f:87:e9:9f:04:03:78:8b:fc:
82:79:10:7c:4a:c7:e3:53:bc:23:bf:28:6a:5a:2e:e0:32:71:
7a:0a:01:70:50:1b:14:4f:5f:f5:fe:b6:dd:7f:cb:c7:3c:9d:
a5:55:b7:e8:c8:09:29:52:a4:a5:dd:26:29:88:66:33:e8:e1:
b3:5d:87:75:1a:10:92:b7:19:29:8d:61:06:66:cf:d4:6e:01:
4d:73:3d:35:47:6f:d5:c1:09:50:b0:2d:ed:cb:fc:03:d3:a2:
87:e2:ef:2f:18:44:0d:cd:9e:40:7a:1c:c9:31:39:ef:21:0b:
a8:33:c9:bf:01:13:e4:59:19:f2:a9:16:d1:6f:21:63:96:7c:
0e:c0:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:23 2026 by rpki-client