Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CxUJq2WRIc0Ih51wPD0il0R_ieI.roa
File: CxUJq2WRIc0Ih51wPD0il0R_ieI.roa (raw, json)
Hash identifier: eFw8KuJdLHXqKmxbgzw0+627Thw7B/0df9HKr3LOf7w=
Subject key identifier: 0B:15:09:AB:65:91:21:CD:08:87:9D:70:3C:3D:22:97:44:7F:89:E2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019ED81496DA90FD715C6AA9D2DA8F6BE9D7
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CxUJq2WRIc0Ih51wPD0il0R_ieI.roa
Signing time: Thu 18 Jun 2026 00:14:48 +0000
ROA not before: Thu 18 Jun 2026 00:14:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49915
IP address blocks: 77.111.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d8:14:96:da:90:fd:71:5c:6a:a9:d2:da:8f:6b:e9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 18 00:14:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b1509ab659121cd08879d703c3d2297447f89e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:97:d4:c9:d8:f6:31:e3:64:ff:fa:8e:eb:
7a:db:b9:6f:9f:5e:1c:19:41:b1:fb:7e:9c:d7:14:
c6:df:d6:7c:00:f2:b1:ec:15:f1:13:31:d5:fb:78:
83:97:6e:90:10:d5:0c:bb:94:b3:b0:84:cc:8b:c1:
18:a3:38:ec:00:aa:32:00:51:e5:d7:c4:2b:eb:ae:
8f:01:49:46:b1:ba:62:33:63:6c:73:79:05:71:ac:
16:bb:61:d2:93:02:40:c1:35:b0:10:2d:aa:59:b6:
3a:42:45:24:11:0c:8b:36:58:93:b9:f9:7f:dd:4c:
56:63:47:52:5a:44:ba:0f:01:63:11:ef:25:24:5d:
87:45:e4:d7:13:41:71:2a:df:19:65:9b:1d:20:06:
74:f4:83:eb:c6:65:58:b3:c0:f4:bc:3e:d7:50:79:
87:39:e8:6e:5d:9e:9e:c1:59:9f:63:f9:b4:e4:d5:
8e:b4:ce:fd:01:e8:0e:1e:65:f2:df:76:74:2f:36:
d0:42:3e:9c:dc:42:cd:82:3d:72:b0:60:91:5e:89:
23:00:de:05:2d:d0:15:37:97:04:aa:04:bd:72:38:
2a:70:1a:e4:e1:4a:40:0d:54:40:83:d6:e9:82:77:
3f:f1:18:fa:87:7c:15:75:5a:c5:6b:0d:7e:71:d5:
53:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:15:09:AB:65:91:21:CD:08:87:9D:70:3C:3D:22:97:44:7F:89:E2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CxUJq2WRIc0Ih51wPD0il0R_ieI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.100.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:94:3e:da:c8:d9:5a:35:d0:25:d5:bf:3c:da:79:c1:9d:9e:
0d:2c:2b:91:2f:7e:37:28:97:68:93:d1:82:43:7b:f9:88:ab:
dc:76:12:ea:4b:72:d3:a1:fc:a8:66:00:96:e5:29:e4:43:9f:
a1:89:6e:81:2f:25:da:5a:e1:ff:14:81:c1:81:b0:32:e1:35:
73:2e:f2:bd:75:a6:0f:ef:58:1c:9e:63:00:16:9e:5f:57:f6:
94:a4:42:8a:66:44:cf:4b:41:ba:01:4c:2e:cf:3f:04:59:6a:
01:57:87:10:d3:4d:e1:55:c7:38:7d:28:2f:6b:65:c5:e9:7d:
05:b5:0b:70:14:c9:0a:88:01:2a:d1:5b:fa:3c:88:64:22:7d:
ee:29:b5:5f:20:27:5e:82:0d:9b:ec:15:22:82:50:b7:b0:97:
2d:44:57:c6:63:2b:d2:cb:31:aa:b7:27:40:8a:c2:30:4b:97:
42:94:cd:91:4a:33:91:49:0e:fc:f2:58:b1:27:ce:db:e2:03:
24:e4:23:a3:b5:78:80:d5:ba:d4:89:f2:6d:2f:f9:37:99:f6:
07:45:41:da:d9:cf:fe:52:35:27:6c:ce:01:4a:dc:18:86:1d:
37:33:e4:39:6e:68:e9:3f:49:d3:fa:82:c3:e9:0b:b8:d9:77:
41:99:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:28 2026 by rpki-client