Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2StLYNN6DPXSpWptnjGHufZRi1k.roa
File: 2StLYNN6DPXSpWptnjGHufZRi1k.roa (raw, json)
Hash identifier: kL7EuBbWapj2X7+/4Y3e8ncIPvIbzvrlV93aD2I0Fpk=
Subject key identifier: D9:2B:4B:60:D3:7A:0C:F5:D2:A5:6A:6D:9E:31:87:B9:F6:51:8B:59
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EFF82192BF71ED9871D53868C71EE4BCA
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2StLYNN6DPXSpWptnjGHufZRi1k.roa
Signing time: Thu 25 Jun 2026 15:59:36 +0000
ROA not before: Thu 25 Jun 2026 15:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58990
IP address blocks: 189.12.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:82:19:2b:f7:1e:d9:87:1d:53:86:8c:71:ee:4b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 25 15:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d92b4b60d37a0cf5d2a56a6d9e3187b9f6518b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6b:8f:9a:f0:67:cb:3d:f7:fa:a1:d5:65:b1:
ea:1d:8d:45:4a:53:07:52:a7:f3:65:5b:16:49:d7:
85:67:dc:75:af:ee:ab:93:2d:e4:b9:1b:a3:21:5b:
6d:4b:c8:07:24:44:49:74:8b:6b:68:3c:b2:11:98:
0a:de:37:e5:0a:e6:86:64:bb:aa:02:58:85:09:63:
68:da:ed:70:2f:37:18:c9:be:55:b9:64:8f:61:4b:
6e:9e:ca:c0:6a:1b:fe:bb:fa:70:38:36:13:00:6f:
b6:14:11:c5:6f:8e:59:47:2b:f7:86:08:15:1c:f4:
58:5a:22:4a:b6:17:52:82:57:df:c8:22:29:70:57:
a5:b3:0a:ba:4e:ab:fb:75:23:4c:25:f3:9b:47:ad:
56:7d:86:ca:fd:ce:fc:fa:7e:48:a2:98:c1:3d:3d:
9b:70:56:2e:4b:7b:9c:8b:ab:29:66:51:4e:07:c5:
95:34:07:21:42:d5:87:79:1c:da:4d:7d:e1:4d:ac:
60:17:3e:8d:a5:ae:d2:49:bc:25:8d:da:fb:22:f7:
8b:f3:b3:3c:ae:88:2f:cb:16:c8:2b:5d:67:51:50:
6e:44:96:c9:84:c1:e0:6b:04:cf:08:f8:3d:59:ca:
1b:eb:66:02:83:e0:5f:7b:87:18:0c:2f:11:f4:1b:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:4B:60:D3:7A:0C:F5:D2:A5:6A:6D:9E:31:87:B9:F6:51:8B:59
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2StLYNN6DPXSpWptnjGHufZRi1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.57.0/24
Signature Algorithm: sha256WithRSAEncryption
01:59:67:85:9b:21:cd:8e:3d:cb:68:78:8c:46:dd:0b:ed:c0:
89:d8:dc:03:02:76:d4:2d:74:27:69:f9:15:70:2a:23:80:1c:
73:d1:2d:33:fb:7f:e8:c1:9a:d8:b0:af:f4:d0:d9:24:8d:ca:
49:22:e1:14:15:34:a6:7b:ea:85:9e:c9:c8:73:82:2d:80:e5:
16:93:16:25:a4:2a:37:b3:3b:a7:33:91:54:ca:23:03:51:13:
f3:aa:ea:16:57:7b:c1:c3:85:bc:72:37:49:64:1f:0c:fa:ca:
00:80:7b:2c:0e:c3:44:9a:e3:bf:d9:f4:a4:af:4d:ea:68:bf:
16:58:58:a7:de:bc:72:06:04:14:c5:8e:fc:6d:e3:9e:05:62:
8b:e3:58:ce:2c:af:00:75:34:b4:ae:6e:09:06:cb:88:81:b0:
94:fe:b0:4c:c4:b2:45:63:f3:ca:98:a2:22:f9:37:f2:cb:14:
60:5c:86:d1:40:bb:2d:7e:36:3a:6d:7a:07:d8:f2:a9:e1:e6:
7e:80:58:e6:01:7a:c8:70:d1:2c:28:54:9b:66:c8:83:53:b9:
d1:c1:93:7f:2d:44:ad:f0:ea:9e:ef:f6:30:f0:e3:a5:fc:67:
fc:2e:34:53:0f:2b:7c:35:09:7d:b0:4e:c8:ec:9c:f0:1c:5b:
04:dd:95:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7/ghkr9x7Zhx1Thoxx7kvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNjI1MTU1OTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTJiNGI2MGQzN2EwY2Y1ZDJhNTZhNmQ5ZTMxODdiOWY2NTE4YjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4muPmvBnyz33+qHVZbHqHY1FSlMH
UqfzZVsWSdeFZ9x1r+6rky3kuRujIVttS8gHJERJdItraDyyEZgK3jflCuaGZLuq
AliFCWNo2u1wLzcYyb5VuWSPYUtunsrAahv+u/pwODYTAG+2FBHFb45ZRyv3hggV
HPRYWiJKthdSglffyCIpcFelswq6Tqv7dSNMJfObR61WfYbK/c78+n5IopjBPT2b
cFYuS3uci6spZlFOB8WVNAchQtWHeRzaTX3hTaxgFz6Npa7SSbwljdr7IveL87M8
rogvyxbIK11nUVBuRJbJhMHgawTPCPg9Wcob62YCg+Bfe4cYDC8R9BvQEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNkrS2DTegz10qVqbZ4xh7n2UYtZMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvMlN0TFlOTjZEUFhTcFdwdG5qR0h1ZlpSaTFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvQw5MA0G
CSqGSIb3DQEBCwUAA4IBAQABWWeFmyHNjj3LaHiMRt0L7cCJ2NwDAnbULXQnafkV
cCojgBxz0S0z+3/owZrYsK/00NkkjcpJIuEUFTSme+qFnsnIc4ItgOUWkxYlpCo3
szunM5FUyiMDURPzquoWV3vBw4W8cjdJZB8M+soAgHssDsNEmuO/2fSkr03qaL8W
WFin3rxyBgQUxY78beOeBWKL41jOLK8AdTS0rm4JBsuIgbCU/rBMxLJFY/PKmKIi
+TfyyxRgXIbRQLstfjY6bXoH2PKp4eZ+gFjmAXrIcNEsKFSbZsiDU7nRwZN/LUSt
8Oqe7/Yw8OOl/Gf8LjRTDyt8NQl9sE7I7JzwHFsE3ZVY
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:40 2026 by rpki-client