Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6frTO99gAdwAv_eJvJvckq6f8Tk.roa
File: 6frTO99gAdwAv_eJvJvckq6f8Tk.roa (raw, json)
Hash identifier: MGEJ0rjtYB5dbkIe/KD6hndrWW5KLlmaIb+ReGd0pjU=
Subject key identifier: E9:FA:D3:3B:DF:60:01:DC:00:BF:F7:89:BC:9B:DC:92:AE:9F:F1:39
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F617102A4E21068C0960847FC9A10D629
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6frTO99gAdwAv_eJvJvckq6f8Tk.roa
Signing time: Tue 14 Jul 2026 16:23:44 +0000
ROA not before: Tue 14 Jul 2026 16:23:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 189.31.218.0/24 maxlen: 24
189.73.25.0/24 maxlen: 24
189.73.29.0/24 maxlen: 24
189.75.178.0/24 maxlen: 24
191.222.37.0/24 maxlen: 24
200.102.185.0/24 maxlen: 24
200.165.21.0/24 maxlen: 24
200.165.24.0/24 maxlen: 24
200.181.94.0/24 maxlen: 24
201.11.238.0/24 maxlen: 24
201.14.214.0/24 maxlen: 24
201.14.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:71:02:a4:e2:10:68:c0:96:08:47:fc:9a:10:d6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 14 16:23:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9fad33bdf6001dc00bff789bc9bdc92ae9ff139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:14:77:8f:5b:df:fa:ad:6a:42:86:c8:af:
95:da:55:4c:1e:13:7f:21:da:65:16:13:19:c0:be:
1c:d8:ab:a6:50:6c:11:63:7b:c0:3d:76:0e:c1:44:
2a:a1:94:a2:2f:43:fd:16:a7:e4:09:15:5d:7a:15:
ab:48:ad:04:f1:79:d9:5c:6f:3f:a2:46:17:94:7b:
91:03:49:e9:da:28:2c:7d:ed:cb:29:75:5e:27:b0:
f3:ea:ed:c6:ce:79:92:83:2b:35:f5:3f:f8:00:8d:
7d:98:dd:dc:b5:49:b5:4c:c2:1f:85:22:31:da:76:
50:4f:5d:7c:b7:6e:55:a6:a5:4c:46:68:15:c5:fa:
57:d8:16:47:a1:65:a0:b8:bd:00:08:16:5d:61:82:
b9:8e:b9:c5:06:28:a7:8b:99:a4:c4:12:ce:2f:e9:
2d:95:42:09:7b:e0:fe:ae:aa:df:e5:52:90:b8:07:
2e:c7:9a:b6:aa:8e:9c:f7:b7:44:a1:f9:47:4c:89:
fc:09:dc:c6:26:c6:61:75:a2:bf:75:9b:38:71:1d:
67:6d:a8:ae:88:56:7d:bf:03:73:0c:10:be:2b:ca:
4b:aa:84:78:69:41:2a:56:3b:25:55:7a:4f:88:99:
08:ae:5e:fa:32:80:0c:e0:b8:cd:90:e1:50:de:51:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:D3:3B:DF:60:01:DC:00:BF:F7:89:BC:9B:DC:92:AE:9F:F1:39
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6frTO99gAdwAv_eJvJvckq6f8Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.218.0/24
189.73.25.0/24
189.73.29.0/24
189.75.178.0/24
191.222.37.0/24
200.102.185.0/24
200.165.21.0/24
200.165.24.0/24
200.181.94.0/24
201.11.238.0/24
201.14.214.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:08:c8:ee:24:59:ac:1d:2e:e0:f9:83:55:2a:3f:09:77:d7:
f3:33:74:95:90:b1:8e:67:5f:4d:93:61:04:c3:10:21:fd:da:
77:23:f8:0e:d8:47:fb:af:5b:63:2b:a2:30:ee:43:98:d8:a7:
63:45:d1:07:f8:de:1e:e7:ff:57:d6:14:03:f7:6e:e3:1f:62:
04:8d:e1:61:51:e8:d4:e8:f8:1f:27:14:cb:98:3f:cf:39:09:
fb:5f:93:3a:48:fc:37:5d:d0:20:f2:c7:6b:36:fa:23:cc:2f:
3c:9b:e1:7a:8b:6a:56:a1:07:af:42:3f:89:3f:14:5d:9e:62:
0a:99:f7:44:8c:96:bf:4c:93:6c:f6:09:91:83:49:c3:24:cb:
ac:29:bc:3b:78:3e:0c:5b:90:67:e2:ae:d1:16:2e:c6:c6:2d:
ff:57:d0:3f:f3:6a:0e:19:97:37:6f:5f:4f:55:64:0f:fe:3a:
f7:e0:84:d6:61:69:2c:d8:7d:71:a6:a1:88:75:29:ac:65:0c:
54:69:27:f8:ca:58:38:7a:b2:59:b7:d3:fa:53:a7:b5:3e:ed:
68:e9:e8:ec:b2:74:37:0a:3e:fe:7b:54:76:a9:6d:0b:c9:1b:
1b:b8:25:18:dd:1d:06:c3:76:cb:ae:1e:b8:66:7e:69:8a:97:
fa:ca:7f:af
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZ9hcQKk4hBowJYIR/yaENYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNzE0MTYyMzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWZhZDMzYmRmNjAwMWRjMDBiZmY3ODliYzliZGM5MmFlOWZmMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9kUd49b3/qtakKGyK+V2lVMHhN/
IdplFhMZwL4c2KumUGwRY3vAPXYOwUQqoZSiL0P9FqfkCRVdehWrSK0E8XnZXG8/
okYXlHuRA0np2igsfe3LKXVeJ7Dz6u3GznmSgys19T/4AI19mN3ctUm1TMIfhSIx
2nZQT118t25VpqVMRmgVxfpX2BZHoWWguL0ACBZdYYK5jrnFBiini5mkxBLOL+kt
lUIJe+D+rqrf5VKQuAcux5q2qo6c97dEoflHTIn8CdzGJsZhdaK/dZs4cR1nbaiu
iFZ9vwNzDBC+K8pLqoR4aUEqVjslVXpPiJkIrl76MoAM4LjNkOFQ3lE3PwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFOn60zvfYAHcAL/3ibyb3JKun/E5MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvNmZyVE85OWdBZHdBdl9lSnZKdmNrcTZmOFRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAvR/aAwQA
vUkZAwQAvUkdAwQAvUuyAwQAv94lAwQAyGa5AwQAyKUVAwQAyKUYAwQAyLVeAwQA
yQvuAwQByQ7WMA0GCSqGSIb3DQEBCwUAA4IBAQCiCMjuJFmsHS7g+YNVKj8Jd9fz
M3SVkLGOZ19Nk2EEwxAh/dp3I/gO2Ef7r1tjK6Iw7kOY2KdjRdEH+N4e5/9X1hQD
927jH2IEjeFhUejU6PgfJxTLmD/POQn7X5M6SPw3XdAg8sdrNvojzC88m+F6i2pW
oQevQj+JPxRdnmIKmfdEjJa/TJNs9gmRg0nDJMusKbw7eD4MW5Bn4q7RFi7Gxi3/
V9A/82oOGZc3b19PVWQP/jr34ITWYWks2H1xpqGIdSmsZQxUaSf4ylg4erJZt9P6
U6e1Pu1o6ejssnQ3Cj7+e1R2qW0LyRsbuCUY3R0Gw3bLrh64Zn5pipf6yn+v
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:38 2026 by rpki-client