Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/B5cClw0M1TTeh3zq0EnxfEMT6KY.roa
File: B5cClw0M1TTeh3zq0EnxfEMT6KY.roa (raw, json)
Hash identifier: XikoSEMYAqMy3bsMm85Mblw4q9f7yR0vmhXS532Bd+c=
Subject key identifier: 07:97:02:97:0D:0C:D5:34:DE:87:7C:EA:D0:49:F1:7C:43:13:E8:A6
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F47627CB78621329260CAAAF5306DE7B9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/B5cClw0M1TTeh3zq0EnxfEMT6KY.roa
Signing time: Thu 09 Jul 2026 14:57:44 +0000
ROA not before: Thu 09 Jul 2026 14:57:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 191.44.23.0/24 maxlen: 24
191.219.26.0/24 maxlen: 24
201.14.222.0/24 maxlen: 24
201.24.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:62:7c:b7:86:21:32:92:60:ca:aa:f5:30:6d:e7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 9 14:57:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=079702970d0cd534de877cead049f17c4313e8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:fd:e9:02:c7:7b:34:4f:32:99:58:2e:77:
d1:2f:66:7a:ce:13:2a:3b:8c:b1:1f:4b:1b:c8:4c:
2b:8f:00:ce:82:74:6e:97:85:0e:75:9a:b2:88:ef:
a1:35:d3:21:c0:a7:ec:3b:ab:a9:47:c1:96:f4:96:
58:b3:4a:7e:3d:45:f2:ad:f1:44:05:ff:86:df:8d:
ee:98:5c:4c:91:5c:83:58:d6:c0:2e:a1:c3:fe:4d:
7d:ec:8c:95:39:8e:8d:a2:c4:f8:6f:3b:61:b2:f3:
cf:90:b5:8c:73:88:49:ce:23:35:1b:04:bf:62:74:
6a:b9:7e:7c:bf:a8:d3:e6:3d:39:e0:7a:8a:61:00:
93:d0:84:a7:de:2f:44:1f:2b:89:9d:fa:99:ca:88:
7b:15:28:ed:1b:0d:fb:6c:ca:2a:a9:a7:ee:ab:4b:
f4:5b:cc:ac:53:2d:44:ab:3c:d0:14:9c:bb:ae:e9:
83:f5:09:1f:18:9f:7d:0c:50:d0:db:57:34:bb:9b:
ea:c5:8f:ab:eb:ec:c5:32:c7:ae:09:5f:bd:27:d5:
60:91:fc:a6:90:6a:93:ac:2e:cc:44:8b:e7:e8:72:
21:c8:eb:68:f8:a4:b4:11:78:ca:2b:7f:03:01:57:
3b:c1:32:e5:81:5e:a9:0b:18:f8:e9:c6:3d:2d:af:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:97:02:97:0D:0C:D5:34:DE:87:7C:EA:D0:49:F1:7C:43:13:E8:A6
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/B5cClw0M1TTeh3zq0EnxfEMT6KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.23.0/24
191.219.26.0/24
201.14.222.0/24
201.24.201.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5f:89:da:bf:30:e5:9e:98:9b:32:41:27:1a:6d:1d:26:0b:
0d:23:9a:db:5a:8e:84:0c:e5:eb:43:2f:3d:ab:49:bd:2f:14:
ad:ec:06:32:43:b8:fb:1c:37:1c:9d:fe:4f:d2:21:1a:eb:51:
79:c7:c5:c6:ae:25:3c:b0:89:85:ef:a9:3c:ec:86:0f:52:01:
cc:10:c0:06:8b:40:0d:e7:93:4a:b6:2b:34:43:b2:dd:36:31:
21:4c:65:3b:a5:6c:36:aa:6e:bf:3c:96:fd:16:b7:95:9c:3e:
29:a3:e5:64:82:83:4a:cf:4e:98:31:2a:b3:82:10:cf:be:d3:
d8:f5:ad:8c:63:34:a0:e8:7d:e5:1f:9b:18:83:78:d7:ea:35:
33:fd:34:bd:17:91:e4:3e:1f:1c:e3:ec:be:d9:78:a7:aa:24:
cb:11:95:a4:95:28:1a:a7:4f:af:89:b2:f7:e3:24:29:a0:db:
b8:10:02:52:76:bb:13:8f:e8:65:a5:7a:01:5c:b4:4e:35:fa:
55:0c:a5:5a:31:4f:11:16:45:c4:7b:32:81:b6:bd:c8:45:f0:
9b:75:22:b9:fd:b6:cc:70:53:80:a4:7f:02:fa:9e:bf:74:61:
f3:a2:df:a7:c9:f2:96:7b:44:66:ee:58:64:43:77:b9:25:fb:
d1:7e:78:d9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ9HYny3hiEykmDKqvUwbee5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNzA5MTQ1NzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzk3MDI5NzBkMGNkNTM0ZGU4NzdjZWFkMDQ5ZjE3YzQzMTNlOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMD96QLHezRPMplYLnfRL2Z6zhMq
O4yxH0sbyEwrjwDOgnRul4UOdZqyiO+hNdMhwKfsO6upR8GW9JZYs0p+PUXyrfFE
Bf+G343umFxMkVyDWNbALqHD/k197IyVOY6NosT4bzthsvPPkLWMc4hJziM1GwS/
YnRquX58v6jT5j054HqKYQCT0ISn3i9EHyuJnfqZyoh7FSjtGw37bMoqqafuq0v0
W8ysUy1EqzzQFJy7rumD9QkfGJ99DFDQ21c0u5vqxY+r6+zFMseuCV+9J9Vgkfym
kGqTrC7MRIvn6HIhyOto+KS0EXjKK38DAVc7wTLlgV6pCxj46cY9La8SAQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAeXApcNDNU03od86tBJ8XxDE+imMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvQjVjQ2x3ME0xVFRlaDN6cTBFbnhmRU1UNktZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAvywXAwQA
v9saAwQAyQ7eAwQAyRjJMA0GCSqGSIb3DQEBCwUAA4IBAQCtX4navzDlnpibMkEn
Gm0dJgsNI5rbWo6EDOXrQy89q0m9LxSt7AYyQ7j7HDccnf5P0iEa61F5x8XGriU8
sImF76k87IYPUgHMEMAGi0AN55NKtis0Q7LdNjEhTGU7pWw2qm6/PJb9FreVnD4p
o+VkgoNKz06YMSqzghDPvtPY9a2MYzSg6H3lH5sYg3jX6jUz/TS9F5HkPh8c4+y+
2XinqiTLEZWklSgap0+vibL34yQpoNu4EAJSdrsTj+hlpXoBXLRONfpVDKVaMU8R
FkXEezKBtr3IRfCbdSK5/bbMcFOApH8C+p6/dGHzot+nyfKWe0Rm7lhkQ3e5JfvR
fnjZ
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:30 2026 by rpki-client