Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FJVv_d0nKJJonDVoBrYjpss4Ilw.roa
File: FJVv_d0nKJJonDVoBrYjpss4Ilw.roa (raw, json)
Hash identifier: zHuPnRAsCnAbEQdqMehQikWOuDoJ9SnMgmv5g9T/0Gs=
Subject key identifier: 14:95:6F:FD:DD:27:28:92:68:9C:35:68:06:B6:23:A6:CB:38:22:5C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F3ABB59A5108D16A262D4C6684E38F57E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FJVv_d0nKJJonDVoBrYjpss4Ilw.roa
Signing time: Tue 07 Jul 2026 03:59:44 +0000
ROA not before: Tue 07 Jul 2026 03:59:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 85.208.11.0/24 maxlen: 24
94.229.214.0/24 maxlen: 24
94.229.219.0/24 maxlen: 24
124.158.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:bb:59:a5:10:8d:16:a2:62:d4:c6:68:4e:38:f5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 7 03:59:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14956ffddd272892689c356806b623a6cb38225c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:c3:8d:c7:61:3b:16:d0:85:d0:c9:99:58:
8b:97:d0:bf:e4:54:88:31:35:b8:8e:38:23:f1:ff:
50:a7:0c:d5:e3:b7:c3:52:5f:9d:bf:04:4e:4a:ac:
65:96:bf:85:ea:23:d8:83:6a:19:e2:55:6b:b2:20:
a6:fe:6d:e8:1d:92:68:b1:c0:70:88:68:2e:18:41:
2d:19:81:b6:d0:9e:2b:9e:be:54:b8:86:93:a5:be:
5c:dd:3e:8b:c5:46:a3:0d:45:aa:60:a1:30:05:9b:
ca:bf:b0:0b:9f:59:de:71:2b:2c:b4:27:4c:3a:c8:
2a:50:a4:96:51:77:80:90:92:03:11:de:da:46:46:
7a:4e:4c:75:4b:06:2c:9e:53:b4:df:1b:da:1c:ea:
1b:1e:09:fe:3d:ea:4b:67:63:fa:80:c6:1f:27:e8:
c1:29:5e:f2:59:08:80:bd:45:1c:a7:02:00:25:b5:
e6:5d:e2:00:da:4f:87:49:f4:6e:ec:9e:4d:b0:65:
1a:2d:ed:2c:2c:07:aa:bb:e7:2f:20:a1:7e:a9:b9:
99:22:d9:34:6b:f9:5a:45:f5:46:70:fb:8b:18:5a:
52:c5:46:58:90:24:45:2e:95:39:19:bc:e5:95:77:
d4:a6:d9:d6:0d:2c:01:e8:cf:75:51:92:40:3d:aa:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:95:6F:FD:DD:27:28:92:68:9C:35:68:06:B6:23:A6:CB:38:22:5C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FJVv_d0nKJJonDVoBrYjpss4Ilw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.11.0/24
94.229.214.0/24
94.229.219.0/24
124.158.101.0/24
Signature Algorithm: sha256WithRSAEncryption
16:18:2d:bb:18:bf:c3:83:f3:e8:a4:3b:59:7b:66:50:bb:e3:
8b:13:01:5a:3c:06:f4:b8:1a:df:34:de:80:0b:0c:8c:30:ca:
93:8d:07:0a:18:4f:5e:90:85:6d:0d:bf:37:84:cc:62:20:a4:
be:01:df:79:3f:d3:4f:9f:27:cc:cb:01:41:7d:e1:c7:b1:c4:
ab:41:38:49:86:a3:14:c6:68:a2:ae:90:9d:12:ad:01:d5:0f:
6c:af:bf:82:bc:44:83:22:54:f5:55:eb:ff:38:cc:fb:37:32:
1d:96:76:2a:e0:e3:18:f2:f8:c1:34:e1:62:9a:7e:98:94:3d:
49:be:f0:7e:f7:20:46:b7:d7:a6:bd:83:11:e7:66:cd:ee:d8:
ff:4d:bb:a1:f0:e4:23:25:db:8e:dd:66:cd:cc:25:e8:6b:f6:
89:44:1c:3c:cd:d0:01:a9:5a:f4:97:48:e8:e3:9b:a9:0c:eb:
f1:73:58:ec:8b:2f:27:00:a5:06:a1:d1:77:7a:3d:ef:e4:0a:
43:c9:2c:32:6f:08:b9:04:b9:b6:ca:55:bc:3e:fb:89:33:77:
67:25:ee:20:0e:a1:3e:13:5c:bf:67:7a:cd:5f:81:96:4d:56:
b3:db:a3:85:04:d3:0b:79:7f:9c:76:9c:34:71:c8:65:a4:63:
13:7e:46:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:44 2026 by rpki-client