Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2uYMawHeigoewi4-EEOAFispYwo.roa
File: 2uYMawHeigoewi4-EEOAFispYwo.roa (raw, json)
Hash identifier: F6XJiQks1zPpbpbmjHIQmADQc8LlKPPjn8N9RL8TrMM=
Subject key identifier: DA:E6:0C:6B:01:DE:8A:0A:1E:C2:2E:3E:10:43:80:16:2B:29:63:0A
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F376C7AC9CA9F4FFA0F44AA968FEFB180
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2uYMawHeigoewi4-EEOAFispYwo.roa
Signing time: Mon 06 Jul 2026 12:34:43 +0000
ROA not before: Mon 06 Jul 2026 12:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60071
IP address blocks: 87.229.72.0/24 maxlen: 24
87.229.103.0/24 maxlen: 24
87.229.104.0/24 maxlen: 24
87.229.120.0/24 maxlen: 24
95.138.196.0/24 maxlen: 24
217.144.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:6c:7a:c9:ca:9f:4f:fa:0f:44:aa:96:8f:ef:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 6 12:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dae60c6b01de8a0a1ec22e3e104380162b29630a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:6c:f1:fc:64:bb:69:d7:03:e0:2b:84:ac:
12:c7:13:b4:63:fd:89:f5:d3:a0:19:56:cf:64:3c:
cb:b0:c9:66:74:ca:1f:19:ad:b2:27:54:df:2e:77:
8c:de:cc:c9:dc:ed:e3:00:a5:42:74:25:11:6d:79:
58:a3:26:47:88:a2:fb:56:55:12:14:35:6b:97:2b:
01:f3:1d:12:3b:17:6d:9e:ba:c4:29:53:4e:12:9d:
89:8c:0f:25:af:ed:89:31:81:7a:d3:db:e6:f4:1b:
a2:10:b3:87:21:3b:f6:ff:a1:fd:bf:ab:ea:23:be:
0e:af:7c:e2:f8:37:e5:e3:df:75:49:a5:61:ff:7b:
88:b7:2b:9e:17:0b:20:0e:98:3b:b0:2a:0f:20:2c:
98:eb:e6:7b:b9:e6:9a:94:da:a4:ec:48:28:6c:88:
c3:71:74:56:01:ef:11:2d:ba:cf:57:04:64:1b:37:
72:59:53:bb:a4:d4:7b:0d:3b:4a:61:92:dc:86:4c:
82:b8:1b:95:bd:7b:15:c0:61:e5:c3:ca:ec:4a:02:
06:49:a0:20:43:23:20:d3:a4:fc:5c:87:02:57:99:
8e:37:f9:f2:38:54:e3:0b:2e:bc:a2:9a:8d:6f:b9:
94:58:1b:96:d9:2c:ec:27:b9:5e:bd:31:c1:d8:df:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E6:0C:6B:01:DE:8A:0A:1E:C2:2E:3E:10:43:80:16:2B:29:63:0A
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2uYMawHeigoewi4-EEOAFispYwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.72.0/24
87.229.103.0-87.229.104.255
87.229.120.0/24
95.138.196.0/24
217.144.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ae:3e:bc:95:77:3f:d5:70:90:f1:7f:02:ef:b3:cd:c2:9e:
77:99:c1:f2:a4:67:11:a8:d3:19:0f:49:9b:db:a0:9a:da:3d:
79:39:9f:e8:dc:25:f2:41:fe:95:fb:e8:7c:1f:d7:76:a6:ae:
6e:a6:fb:38:b2:56:59:ed:b4:6a:76:99:99:61:a4:23:e8:3b:
ee:af:68:b7:a2:26:f2:b8:26:ad:ed:1a:7e:a8:82:19:b4:d6:
f7:6f:24:ce:d4:fd:ba:85:ba:a7:10:b3:4e:1e:4c:eb:29:c6:
bf:48:be:9c:ee:e8:80:b9:1e:26:8e:eb:9f:9e:86:8b:f8:34:
f5:52:13:de:14:e7:c1:31:bf:ed:1a:60:ec:8c:45:23:00:89:
16:ae:c1:bb:09:c3:9e:08:af:f6:77:ee:57:35:31:79:b6:af:
20:2a:b2:c7:f5:28:16:6f:5a:2b:dd:f6:a6:2f:38:f7:ab:2d:
ed:72:4e:00:a8:24:87:7d:7d:c4:0e:25:a5:2b:bf:83:90:53:
9c:2c:5a:ab:18:83:21:21:a2:da:13:3e:67:69:f9:54:c5:cc:
39:5e:5b:50:cf:7b:c0:41:5e:84:30:77:73:3c:e7:49:d3:19:
55:a2:aa:76:0f:11:23:31:cf:8d:24:10:d0:b3:64:a2:48:19:
c5:2f:7c:02
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ83bHrJyp9P+g9EqpaP77GAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwNzA2MTIzNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWU2MGM2YjAxZGU4YTBhMWVjMjJlM2UxMDQzODAxNjJiMjk2MzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm1s8fxku2nXA+ArhKwSxxO0Y/2J
9dOgGVbPZDzLsMlmdMofGa2yJ1TfLneM3szJ3O3jAKVCdCURbXlYoyZHiKL7VlUS
FDVrlysB8x0SOxdtnrrEKVNOEp2JjA8lr+2JMYF609vm9BuiELOHITv2/6H9v6vq
I74Or3zi+Dfl4991SaVh/3uItyueFwsgDpg7sCoPICyY6+Z7ueaalNqk7EgobIjD
cXRWAe8RLbrPVwRkGzdyWVO7pNR7DTtKYZLchkyCuBuVvXsVwGHlw8rsSgIGSaAg
QyMg06T8XIcCV5mON/nyOFTjCy68opqNb7mUWBuW2SzsJ7levTHB2N/FFwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFNrmDGsB3ooKHsIuPhBDgBYrKWMKMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvMnVZTWF3SGVpZ29ld2k0LUVFT0FGaXNwWXdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAV+VIMAwD
BABX5WcDBABX5WgDBABX5XgDBABfisQDBADZkDMwDQYJKoZIhvcNAQELBQADggEB
AD+uPryVdz/VcJDxfwLvs83CnneZwfKkZxGo0xkPSZvboJraPXk5n+jcJfJB/pX7
6Hwf13amrm6m+ziyVlnttGp2mZlhpCPoO+6vaLeiJvK4Jq3tGn6oghm01vdvJM7U
/bqFuqcQs04eTOspxr9Ivpzu6IC5HiaO65+ehov4NPVSE94U58Exv+0aYOyMRSMA
iRauwbsJw54Ir/Z37lc1MXm2ryAqssf1KBZvWivd9qYvOPerLe1yTgCoJId9fcQO
JaUrv4OQU5wsWqsYgyEhotoTPmdp+VTFzDleW1DPe8BBXoQwd3M850nTGVWiqnYP
ESMxz40kENCzZKJIGcUvfAI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:52 2026 by rpki-client