Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/01IKOklPOLBivuLtfVgjZG2u4-s.roa
File: 01IKOklPOLBivuLtfVgjZG2u4-s.roa (raw, json)
Hash identifier: gKcryjh2hl9bmi7LOZA1m/LZx+FXCAMoi7TFNNyviwo=
Subject key identifier: D3:52:0A:3A:49:4F:38:B0:62:BE:E2:ED:7D:58:23:64:6D:AE:E3:EB
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F312C241FB641C278C3D676D65CF7B431
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/01IKOklPOLBivuLtfVgjZG2u4-s.roa
Signing time: Sun 05 Jul 2026 07:26:44 +0000
ROA not before: Sun 05 Jul 2026 07:26:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402288
IP address blocks: 200.102.93.0/24 maxlen: 24
200.102.177.0/24 maxlen: 24
200.165.23.0/24 maxlen: 24
200.181.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:2c:24:1f:b6:41:c2:78:c3:d6:76:d6:5c:f7:b4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 07:26:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3520a3a494f38b062bee2ed7d5823646daee3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:3c:d3:7a:56:b7:2d:ef:df:0f:d2:fa:00:
a0:94:53:88:b0:fc:e5:db:bd:71:b5:cc:6a:4e:28:
0e:75:ee:7f:39:f2:34:cc:0f:29:ce:41:7b:42:8a:
52:0d:21:9a:32:71:8b:69:17:61:09:5d:a4:d4:b5:
6a:8c:a1:f7:3f:50:cb:81:95:23:03:dd:5b:bb:c2:
3c:e7:c2:c4:d9:5f:71:fb:e3:20:80:69:86:b9:42:
7c:79:a4:96:e4:42:89:86:2b:53:0a:df:02:ea:77:
04:2e:0c:fa:a6:11:76:29:d1:e6:83:da:12:73:cb:
c6:13:23:69:74:33:10:f8:ed:88:43:32:76:e1:50:
ce:23:cf:6c:b0:cb:b0:7e:01:8f:46:87:3f:f2:d6:
36:05:fc:f8:5f:b3:02:c3:7e:1d:1d:4e:b7:86:84:
08:78:f6:a2:0b:7d:72:99:9a:f9:58:27:82:5f:12:
82:e7:f9:44:24:5a:8f:61:2c:bd:11:cc:e2:68:13:
5f:8a:62:b1:a4:62:7c:63:f5:9e:f5:b5:b4:69:c4:
0a:3a:54:50:50:4b:4a:46:ee:62:b0:d4:3b:b3:a7:
ef:6c:6b:a9:31:23:6d:eb:ba:a9:07:ca:75:4c:ed:
a3:d1:c0:09:c8:ce:f7:ec:5d:58:62:50:a1:7e:dd:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:52:0A:3A:49:4F:38:B0:62:BE:E2:ED:7D:58:23:64:6D:AE:E3:EB
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/01IKOklPOLBivuLtfVgjZG2u4-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.102.93.0/24
200.102.177.0/24
200.165.23.0/24
200.181.82.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:22:c1:85:ef:b1:47:d6:08:0d:0f:41:5a:70:58:fa:8c:6d:
85:70:c2:31:47:40:b3:23:7a:cf:89:ef:5a:57:0e:2e:37:26:
be:cf:99:de:e8:b2:7d:ab:fa:8d:23:3b:07:cb:66:f7:81:1e:
2f:42:e9:d3:33:2d:8d:0e:d4:2c:f8:b9:c6:56:33:c3:50:8c:
82:f6:1f:53:dd:5f:da:89:db:6e:e5:1a:d2:29:c4:d3:4f:fa:
ac:02:7c:a0:16:1e:e3:5f:e3:b7:e0:de:3b:a5:cb:8d:28:ff:
b9:1d:fb:92:79:e4:92:62:9e:ca:8f:35:3d:79:12:ce:4b:3b:
f2:26:07:66:9e:c6:b1:9d:e6:ff:0d:9b:35:9b:29:54:a2:8d:
78:fe:8d:5f:36:48:9c:e4:96:42:35:b5:8c:a3:06:ee:c0:e4:
b0:27:64:ce:22:44:a2:13:98:2f:7c:13:7f:76:b0:02:11:16:
91:cb:a8:74:7a:38:be:ff:dc:ee:f3:93:7e:61:9c:1d:3d:5b:
e8:4b:30:bb:b0:83:33:6c:2b:bb:d5:56:29:d2:b9:58:0e:03:
75:ce:99:1b:e1:4f:d1:42:87:61:06:5c:f2:a3:45:2f:d3:af:
19:29:c0:76:cd:9c:f8:58:cd:ac:88:dd:6a:4e:70:9b:74:68:
bf:d8:92:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:18 2026 by rpki-client