Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/00Yh5UvRvhDsrgiT220qrbEDtc4.roa
File: 00Yh5UvRvhDsrgiT220qrbEDtc4.roa (raw, json)
Hash identifier: vy0TujE2NkZBp6l2TdKBMNCraUd5q/3wiQw0BnSPsdI=
Subject key identifier: D3:46:21:E5:4B:D1:BE:10:EC:AE:08:93:DB:6D:2A:AD:B1:03:B5:CE
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1CD13AB06D36A9AFF663B9FC5AFDA42E5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/00Yh5UvRvhDsrgiT220qrbEDtc4.roa
Signing time: Thu 12 Nov 2026 00:06:20 +0000
ROA not before: Thu 12 Nov 2026 00:06:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 191.222.243.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cd:13:ab:06:d3:6a:9a:ff:66:3b:9f:c5:af:da:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 12 00:06:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d34621e54bd1be10ecae0893db6d2aadb103b5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:33:c9:ff:5b:fc:ce:cd:1a:b6:bf:c4:5a:
65:3b:22:23:c6:d3:c3:2d:ad:ca:cc:86:30:63:43:
e1:59:44:8d:08:26:73:ae:a9:25:5d:3c:ae:2d:ac:
e5:c6:7e:2c:84:fc:c1:ad:ee:0b:33:84:fc:41:9c:
6f:81:3d:5c:50:e8:15:31:98:b4:4a:fe:02:b7:79:
28:7c:05:cd:fa:0c:c4:92:18:a4:e7:7d:71:8a:d4:
51:a3:6b:8c:33:b5:55:71:98:ff:b4:0e:e9:80:f3:
2f:c2:46:ac:97:d8:a5:e3:b2:32:88:2d:af:9a:ba:
17:a7:75:0b:8e:37:84:a4:b4:9f:6b:5f:d6:5a:4f:
36:1c:5e:d6:7c:6d:02:00:ae:b0:43:07:0d:b6:df:
d0:e2:c6:9e:c8:eb:b8:2c:5b:0b:35:0c:53:97:e8:
55:5d:d4:47:a9:ba:61:09:9f:d4:ef:b8:c1:43:60:
06:52:aa:a8:2b:44:d2:07:9f:f4:bc:f9:5e:88:c0:
4f:e0:3e:9f:0e:a0:b2:a3:26:16:8b:a9:fe:cd:8f:
86:51:a7:7d:39:f9:77:0d:93:aa:d7:bf:3c:20:cb:
5b:10:db:b2:0c:bb:95:1f:5d:d2:47:ce:bb:de:78:
e5:af:ce:93:8c:79:f4:6b:c3:89:42:c2:92:b3:e2:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:46:21:E5:4B:D1:BE:10:EC:AE:08:93:DB:6D:2A:AD:B1:03:B5:CE
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/00Yh5UvRvhDsrgiT220qrbEDtc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.243.0/24
201.14.221.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ec:bf:67:67:ad:b1:b1:36:02:5f:50:1b:99:b9:fe:3d:6b:
b2:75:b5:f5:ae:d4:ac:6e:52:08:80:f1:bd:ff:fa:e2:1b:5b:
f9:e1:aa:73:05:89:13:8e:3a:cc:7d:97:81:99:a2:ff:b2:57:
0c:61:d4:06:b5:72:aa:6f:c6:de:f9:91:a5:61:d1:e9:b9:bc:
36:c4:0c:e3:6e:b7:b9:33:1f:ca:27:5c:1f:cc:81:4c:d8:5c:
72:5c:95:96:23:79:78:4f:55:42:67:48:6c:09:0a:f5:94:56:
8d:ca:e1:9b:3c:2a:16:33:61:a4:b5:0f:25:c0:97:36:3f:1a:
cf:3c:54:87:f7:dd:f4:5a:47:e9:18:f2:59:e9:44:fc:76:15:
c5:ec:0c:84:31:e1:eb:3b:5b:05:6e:24:18:15:ba:06:2f:43:
3a:ee:ee:20:51:7d:45:98:72:55:df:93:1d:09:ba:9a:48:a0:
be:9a:b6:bc:07:e6:59:83:1c:ea:35:63:11:9c:24:f5:a1:62:
bf:f3:43:55:b8:bf:d0:07:28:ec:8b:43:5a:a2:73:09:e0:3b:
7f:d2:78:5f:2f:b0:f3:15:6d:6b:93:a4:c8:16:e9:2f:cd:30:
c3:a5:a6:e2:80:5a:16:28:f8:03:5c:7c:4c:d7:d6:c9:96:27:
e7:92:6b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:53:58 2026 by rpki-client