Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2BNw-sXNfpBI1tishleY6sVCbx0.roa
File: 2BNw-sXNfpBI1tishleY6sVCbx0.roa (raw, json)
Hash identifier: xNhvOxZRJlQsQE4hkEEQCKdb10b8Wo1oeIQQP8/K6OE=
Subject key identifier: D8:13:70:FA:C5:CD:7E:90:48:D6:D8:AC:86:57:98:EA:C5:42:6F:1D
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0A2DF72C0944CB1B220F230F4FE62FA81
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2BNw-sXNfpBI1tishleY6sVCbx0.roa
Signing time: Tue 15 Sep 2026 02:22:27 +0000
ROA not before: Tue 15 Sep 2026 02:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 77.67.11.0/24 maxlen: 24
194.77.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a2:df:72:c0:94:4c:b1:b2:20:f2:30:f4:fe:62:fa:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 15 02:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d81370fac5cd7e9048d6d8ac865798eac5426f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:2e:2b:da:83:a7:fc:de:2c:cd:c0:a1:b3:
15:bf:45:34:f0:46:22:c7:e0:83:c0:5b:e1:4e:47:
bf:c2:3e:63:26:1e:89:15:82:49:e5:47:56:c9:67:
39:d4:7c:ed:68:70:5f:93:cf:06:71:f6:35:80:ec:
a5:55:c9:a0:3f:22:77:b2:bf:d9:6a:55:92:26:af:
2f:3e:2a:2a:d8:cf:a1:5f:ea:fd:aa:c5:b8:65:a0:
d2:35:0e:8c:0c:ca:87:87:62:72:a4:79:bf:b4:d4:
27:30:06:00:6b:54:c4:0a:e2:5b:fb:83:a1:c8:71:
a6:85:68:fa:8e:88:83:e8:9f:b5:52:c2:73:63:a5:
66:e0:92:f5:ad:ab:f2:65:3f:94:11:2f:90:98:c7:
5c:57:c5:66:66:15:10:53:19:c9:78:91:75:09:a9:
49:df:48:86:e7:2b:07:c6:35:c1:40:23:67:7e:60:
87:a9:0a:a0:31:35:2b:0e:be:b5:da:39:45:86:cb:
f5:7b:91:60:3e:8f:12:2c:53:b6:0e:74:01:94:92:
0e:b4:e0:1e:15:1f:d9:04:c0:a1:b1:16:64:f8:9b:
15:8a:2a:e8:01:e7:7a:dc:7c:63:66:55:2b:15:ca:
2c:e7:d7:50:b8:5e:ba:d8:ac:d1:43:a5:c7:6a:b4:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:13:70:FA:C5:CD:7E:90:48:D6:D8:AC:86:57:98:EA:C5:42:6F:1D
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2BNw-sXNfpBI1tishleY6sVCbx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.11.0/24
194.77.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:00:65:a0:8d:ab:56:08:32:6f:15:66:48:be:21:90:d0:16:
a4:52:27:01:59:6f:16:48:e0:2d:5d:0b:6d:18:0f:bf:0f:b2:
b9:2c:c7:ef:10:e4:65:03:b3:54:bb:11:95:79:06:fc:81:a6:
e7:96:4c:6c:e3:3c:bd:2a:2a:3e:23:e4:a0:f2:b8:81:db:47:
39:8f:79:21:4b:4e:cb:2b:4b:03:e8:ba:84:96:21:b6:31:c8:
2f:91:ad:a6:d0:41:db:8e:85:5b:aa:7c:77:32:8f:84:02:4b:
25:db:35:9b:c3:92:99:28:c9:70:d8:cb:26:6f:71:e4:cd:1f:
51:1a:12:1a:68:9a:e7:c2:c2:95:e7:14:a3:b3:b2:74:76:18:
7e:2b:4c:26:52:60:8c:00:25:5c:07:96:dd:5d:93:b2:55:21:
ec:b5:a5:ca:b8:ec:3d:5e:f2:b7:a7:ca:38:4a:1a:90:8d:ef:
ca:24:c2:19:b0:83:c6:9b:dd:8b:28:e4:9c:38:22:87:85:d5:
6d:a4:55:9e:b4:f2:95:c4:ff:78:9f:71:93:47:e9:68:21:04:
23:62:94:92:53:41:0a:1b:b7:f2:22:b4:48:b7:78:53:9d:d6:
99:4a:e4:76:83:da:da:43:f4:b8:93:68:c4:b2:b4:a7:5b:0b:
c6:31:8f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:02:53 2026 by rpki-client