Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0N6niA8BXFxshsrh2GC2gaHZyic.roa
File: 0N6niA8BXFxshsrh2GC2gaHZyic.roa (raw, json)
Hash identifier: dMYJk4bpyGv3FWNbx4adYuS+1OuWITdbN50+eves8wc=
Subject key identifier: D0:DE:A7:88:0F:01:5C:5C:6C:86:CA:E1:D8:60:B6:81:A1:D9:CA:27
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F8B6587017580F2CA541C24794B8B9673
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0N6niA8BXFxshsrh2GC2gaHZyic.roa
Signing time: Wed 22 Jul 2026 19:55:14 +0000
ROA not before: Wed 22 Jul 2026 19:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134488
IP address blocks: 189.75.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:65:87:01:75:80:f2:ca:54:1c:24:79:4b:8b:96:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 22 19:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0dea7880f015c5c6c86cae1d860b681a1d9ca27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:91:72:96:fb:06:6b:3f:be:60:18:2d:38:
91:95:e0:2a:15:44:dd:09:e2:99:61:fb:1d:b8:d3:
ef:77:a8:e0:6c:e2:4b:86:7d:9a:55:eb:f9:fa:3b:
9b:63:16:81:8f:c3:74:6f:03:21:9a:a3:71:1e:92:
f7:8f:df:ac:95:9f:18:cc:c1:4c:58:c5:3a:00:a2:
da:5b:77:df:db:c1:b4:81:d3:06:14:6d:2b:a9:de:
97:e7:f1:24:e1:c3:36:70:e2:24:c5:f8:1d:be:b3:
fa:96:74:95:de:de:9b:4b:4f:15:23:d5:9d:1f:b1:
ca:e3:8d:2c:45:6d:b9:49:6a:71:55:77:a9:d9:49:
e8:47:b8:0d:48:a8:bf:4e:96:ef:5f:ef:41:e5:20:
6d:70:4c:ea:ef:d8:b5:bd:61:04:77:21:4c:0d:c8:
5d:0f:0a:60:63:78:73:26:d4:ec:26:99:74:4c:b9:
15:81:91:2d:e2:0b:ef:83:80:2e:b8:78:b4:54:09:
b1:aa:0d:00:36:0f:82:fe:02:b4:5e:9a:28:c8:fa:
ca:28:ee:ac:72:8e:3e:be:31:df:60:61:fd:53:66:
cc:03:2e:06:8a:56:d1:da:e8:8a:fc:f6:41:51:48:
66:11:f1:dd:9c:2d:4c:24:8b:4c:c1:25:03:82:40:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:A7:88:0F:01:5C:5C:6C:86:CA:E1:D8:60:B6:81:A1:D9:CA:27
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0N6niA8BXFxshsrh2GC2gaHZyic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.75.185.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f7:bd:ba:84:aa:2d:cf:2e:9a:cb:48:5f:21:a0:e0:b2:99:
04:a4:08:01:f9:28:41:72:c4:f8:a5:ae:fb:14:28:f4:b7:23:
4f:12:ad:e3:86:d4:9b:76:cd:c0:db:4c:f2:f0:cf:0d:cd:68:
2d:33:70:e1:57:3d:0d:fc:80:bd:54:2f:53:08:a0:f5:ac:c3:
3d:2c:18:bb:27:2e:69:94:4e:da:19:f6:d0:28:ba:75:75:16:
64:2e:26:21:19:40:92:b4:69:1b:7e:c4:64:eb:08:06:38:f7:
0b:b3:01:2f:eb:e3:0a:1d:aa:24:f9:72:32:75:dc:55:41:e4:
3b:b5:46:5c:ea:94:be:1a:88:04:8a:f7:26:14:0c:a9:25:fe:
e3:73:87:9b:7e:a8:3a:c1:6c:dd:49:e5:bc:81:ec:b8:d1:05:
95:7d:d3:44:a6:02:ad:ca:ff:12:c9:55:86:37:5f:01:07:39:
ff:89:11:77:b4:0a:7b:3d:5b:59:c3:8c:7f:b7:de:b3:c6:9f:
ed:39:d9:23:2a:c7:c3:a2:92:81:88:5b:b9:19:9f:e1:d5:fe:
42:e7:e4:ec:34:ff:42:c5:b7:1e:20:93:1d:55:5b:f8:5e:31:
21:7e:d8:15:8a:7f:9b:ca:a9:3d:a0:25:d5:6b:b8:1e:56:e8:
b6:65:93:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:39 2026 by rpki-client