Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E-gUZMMAwits-EC9W0KdWdUDvTI.roa
File: E-gUZMMAwits-EC9W0KdWdUDvTI.roa (raw, json)
Hash identifier: nBS4APkVy1RzHFUGaozDeltyD4H5Ii30ckiSx3Z1v3E=
Subject key identifier: 13:E8:14:64:C3:00:C2:2B:6C:F8:40:BD:5B:42:9D:59:D5:03:BD:32
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1C65CDBE778FCDFF23298A9286E83DBFD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E-gUZMMAwits-EC9W0KdWdUDvTI.roa
Signing time: Tue 10 Nov 2026 16:48:56 +0000
ROA not before: Tue 10 Nov 2026 16:48:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218135
IP address blocks: 191.217.166.0/24 maxlen: 24
191.217.167.0/24 maxlen: 24
200.102.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:5c:db:e7:78:fc:df:f2:32:98:a9:28:6e:83:db:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 10 16:48:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13e81464c300c22b6cf840bd5b429d59d503bd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:27:62:74:11:db:17:72:b0:7f:a0:b4:f3:
1f:35:3d:e2:44:80:4c:53:db:17:80:f1:01:09:bc:
d6:b7:18:27:c3:e0:7c:81:26:c4:12:31:6f:62:fc:
97:f1:00:9c:48:ed:24:9d:c0:b9:d7:22:6f:c4:e3:
39:23:64:eb:6e:1f:bc:07:45:b1:9c:db:d1:43:53:
64:2b:fe:c1:2b:18:a9:35:f9:26:e2:32:00:32:7c:
a2:b0:67:14:a8:c8:ab:90:09:65:f9:84:55:69:2f:
f3:0d:a2:cf:3a:b8:3b:13:bb:6f:a2:34:1d:57:0b:
35:20:1e:dc:78:16:84:9b:d1:7b:09:a0:d2:16:b4:
16:8f:10:72:82:f0:3d:32:77:23:a2:d4:1f:ef:3e:
00:2c:bc:0d:ea:08:fd:f9:50:f8:ba:25:2d:da:80:
09:c4:07:3e:36:bb:f1:59:f4:b6:a6:00:17:5d:6c:
a6:bb:96:61:ae:05:ce:f9:b0:e2:02:79:4b:4d:56:
3b:4b:14:72:e3:fd:d0:e0:ce:71:e4:fe:e5:4b:df:
81:9a:d7:71:4c:1d:fa:2a:5e:7f:25:15:68:de:3d:
a6:77:5c:b5:60:7a:b8:3b:dc:a7:bb:43:b7:ff:f7:
aa:f2:60:28:03:d7:79:f5:09:08:66:06:28:14:8a:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E8:14:64:C3:00:C2:2B:6C:F8:40:BD:5B:42:9D:59:D5:03:BD:32
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E-gUZMMAwits-EC9W0KdWdUDvTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.166.0/23
200.102.91.0/24
Signature Algorithm: sha256WithRSAEncryption
01:38:80:3a:14:51:de:da:f9:92:8e:66:f9:4c:31:d1:c9:d6:
3e:85:6e:88:07:31:ce:49:5c:bd:a4:6b:68:19:a1:b1:dc:e7:
ce:06:c8:58:ac:35:92:62:82:9e:bd:0b:84:3e:1d:b8:ca:75:
67:e2:b7:06:40:56:d4:49:ce:e3:07:e0:3a:95:0e:72:01:d1:
c9:d2:79:7a:6b:98:e4:72:8c:09:42:d3:5c:52:3b:93:26:75:
3f:57:a9:a1:8f:b9:2f:3b:bd:c0:2b:b7:0e:d2:48:c8:af:5a:
06:f0:c8:b5:9f:5d:37:81:af:f9:af:54:0c:09:67:64:89:6d:
48:99:76:6f:6c:c2:a7:f8:f6:b4:9f:7f:1d:f9:7d:1c:89:10:
4f:91:e4:24:7e:cc:2e:c7:0b:2b:27:04:a5:07:a9:4e:07:32:
cf:7f:7e:f7:5a:14:e9:51:f2:d9:ff:55:13:24:6c:72:96:78:
80:99:66:ff:d1:f3:db:11:ae:95:f8:e6:01:c3:74:2a:83:56:
05:82:28:7d:52:da:cf:ab:89:93:5b:cf:97:d8:96:eb:ca:bf:
55:fd:1e:df:c0:74:1e:3a:c1:5a:61:10:81:00:1e:9d:cf:03:
63:66:44:18:53:7c:3b:76:5c:39:dd:aa:72:7f:3c:8f:71:92:
e7:5e:66:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:34:37 2026 by rpki-client