Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/83BXF3aSAwbP6pEZx1bWMQ4Ze2c.roa
File: 83BXF3aSAwbP6pEZx1bWMQ4Ze2c.roa (raw, json)
Hash identifier: 2C6Alh+sGZdObbhBYiMWkjYKCtv/e3rJtSArHrxK564=
Subject key identifier: F3:70:57:17:76:92:03:06:CF:EA:91:19:C7:56:D6:31:0E:19:7B:67
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F23E5B512E82B7FB0640E7ACACE12605E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/83BXF3aSAwbP6pEZx1bWMQ4Ze2c.roa
Signing time: Thu 02 Jul 2026 17:34:44 +0000
ROA not before: Thu 02 Jul 2026 17:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 94.229.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:e5:b5:12:e8:2b:7f:b0:64:0e:7a:ca:ce:12:60:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 2 17:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f370571776920306cfea9119c756d6310e197b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:15:24:b6:b2:81:ec:1e:d2:64:2a:ab:2b:
bc:d3:a1:a9:67:08:7c:b8:2e:c6:ec:3c:e2:d0:ea:
2d:c4:f2:1f:e2:28:6c:c0:62:f7:42:10:32:d5:e5:
9b:c7:e3:a1:d2:50:6e:f7:8d:52:d8:ab:c5:17:49:
62:ec:a7:48:89:b0:26:22:42:2c:51:fe:25:91:de:
bb:15:3c:b2:6d:90:97:b6:3a:67:e4:81:05:9a:db:
de:37:1b:61:e6:81:64:a8:6d:9b:cd:41:17:af:f3:
43:34:38:47:9d:13:86:34:55:4c:f3:e8:42:50:0c:
b9:a7:7b:75:37:60:87:9d:6d:4a:26:04:83:b9:a4:
47:33:14:cf:65:81:06:1c:99:34:e8:78:04:13:bc:
58:43:18:c3:54:e4:10:0c:a0:6f:a2:35:01:47:4d:
66:ec:6c:f2:c8:93:a5:5f:2a:bc:58:fc:f9:61:c1:
a8:74:1f:44:64:22:eb:50:34:c1:7c:0c:29:fe:ec:
1b:20:c1:4d:9a:0e:59:21:fd:8b:ea:91:4c:07:45:
4b:b0:81:65:b8:de:c4:20:51:85:ba:2d:ea:5e:f6:
41:26:05:1d:44:06:f7:38:12:4e:f2:f7:b4:c0:42:
d7:6b:66:76:7d:01:4e:19:ec:24:80:c0:4e:fe:7b:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:70:57:17:76:92:03:06:CF:EA:91:19:C7:56:D6:31:0E:19:7B:67
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/83BXF3aSAwbP6pEZx1bWMQ4Ze2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c9:6b:e5:b5:2d:16:ea:86:8d:98:d5:fc:48:ba:d5:bb:4d:
cd:89:b0:5f:32:89:5c:15:a3:ab:47:e8:e6:a7:97:84:27:c5:
ad:46:b1:f1:a5:73:41:91:f5:79:2b:7c:6c:4e:e6:f1:7a:c8:
90:d2:fd:ff:16:d1:30:62:b3:ce:cc:0c:7a:6d:88:a3:73:8c:
b2:47:76:f4:fd:9f:c9:e4:ab:f5:a1:9f:9b:d3:2c:52:d2:55:
be:0a:83:c5:4a:68:69:87:5d:77:60:23:82:ee:4d:6e:84:8b:
e3:fa:0a:db:e0:77:27:d6:64:db:ac:ed:14:49:f6:cb:28:75:
78:5d:c1:27:8b:ef:ff:b2:b1:20:d5:2c:d2:d1:ad:ba:ae:62:
1f:9c:71:6a:68:f7:2e:57:f1:87:a2:1e:bd:f9:78:53:2d:dc:
59:32:e1:53:8e:a4:7e:3d:3f:11:eb:7c:ed:7f:66:67:05:50:
79:2e:27:4c:0a:52:24:89:8d:4e:49:d6:e6:47:c0:17:e7:c7:
a8:80:6f:62:62:da:a2:2b:3f:a3:f7:86:ba:99:ef:63:68:5a:
63:be:f6:a2:26:73:24:84:73:a9:b2:83:22:28:d9:e4:0a:a6:
bc:8e:b1:13:22:b6:f6:13:33:fc:65:9a:c8:a1:16:e3:ad:1f:
41:48:64:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:41 2026 by rpki-client