Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/GH6YCo7qRNtqvlsM4S7UzIbiMt8.roa
File: GH6YCo7qRNtqvlsM4S7UzIbiMt8.roa (raw, json)
Hash identifier: nWikG2EtIIUsJqql+7xsYgDwq35t7rYcir8TgR6vG1w=
Subject key identifier: 18:7E:98:0A:8E:EA:44:DB:6A:BE:5B:0C:E1:2E:D4:CC:86:E2:32:DF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EFF78F0DABA694DC5BAAD33F486DBACA3
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/GH6YCo7qRNtqvlsM4S7UzIbiMt8.roa
Signing time: Thu 25 Jun 2026 15:49:36 +0000
ROA not before: Thu 25 Jun 2026 15:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135840
IP address blocks: 201.11.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:78:f0:da:ba:69:4d:c5:ba:ad:33:f4:86:db:ac:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 25 15:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=187e980a8eea44db6abe5b0ce12ed4cc86e232df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:57:b6:b1:33:79:63:60:58:0c:8d:91:31:
2a:0e:63:79:96:4e:4c:cb:0d:83:29:62:8a:e6:b0:
88:75:a0:62:3b:fd:76:2b:3d:00:d2:ec:43:31:a8:
02:32:5a:23:18:9c:1a:33:52:73:4e:06:86:45:4d:
3b:0b:d1:c4:24:74:4e:17:b0:1c:cc:84:64:e9:9d:
4b:d7:d7:a3:f1:a4:84:78:09:05:f9:8a:be:71:01:
25:24:be:15:0c:24:27:d3:a8:1d:b3:a6:19:54:1e:
fa:15:41:be:08:85:9f:77:6b:67:08:e7:bb:a9:05:
1b:87:3b:30:ec:99:20:ef:d0:8a:41:c4:a2:63:07:
c1:6e:78:6a:c0:eb:05:46:57:89:2e:c1:bd:97:53:
62:f9:bf:38:8b:61:ff:06:d1:26:2e:c7:a8:3f:a9:
39:95:79:e3:4c:66:22:d8:8d:9e:3d:21:a6:8b:09:
eb:17:a2:d3:80:c2:36:b9:b4:cf:48:b6:b7:ed:a8:
89:c6:ca:d3:cf:9b:c4:59:43:87:ac:a7:62:50:79:
b2:1f:15:c9:b0:6c:bf:dd:4f:ec:c2:e9:e1:b8:a4:
51:2e:c1:a8:1d:39:dd:6b:ab:7b:cd:01:05:f2:68:
20:27:02:75:bc:eb:1f:57:b9:55:fa:e9:a7:63:f8:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7E:98:0A:8E:EA:44:DB:6A:BE:5B:0C:E1:2E:D4:CC:86:E2:32:DF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/GH6YCo7qRNtqvlsM4S7UzIbiMt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.11.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4a:1f:20:0c:d4:59:7c:54:39:e2:61:25:0d:02:6f:c6:96:
22:92:86:db:9a:5a:1f:8d:bf:43:18:8d:28:91:d6:74:de:6b:
de:03:91:63:9a:c6:b7:cb:fc:92:1d:b9:68:52:4e:eb:19:97:
ef:9d:bf:02:5f:cb:33:04:aa:c3:28:5f:b7:e5:01:db:c0:83:
5a:02:50:40:ee:5f:c8:5f:e7:36:e7:14:59:3c:16:50:ce:c7:
77:0c:9d:cb:04:86:41:9e:b4:19:86:f6:86:bf:ca:5a:1b:52:
88:22:83:de:1e:c0:11:97:1e:48:6a:d6:a8:86:8c:5f:5a:75:
75:bc:84:e9:99:25:fa:ae:11:23:e2:a1:f9:4b:21:c9:ea:6a:
ef:59:30:3e:23:4d:c6:2d:d8:ae:3d:30:f6:af:24:8a:a7:ab:
db:02:c1:b9:11:90:76:e3:9b:f0:18:10:b5:39:e3:84:ec:2a:
fc:9a:50:a6:57:27:03:33:24:01:aa:9e:aa:42:40:53:c7:e4:
e1:39:2a:23:25:88:41:2e:b8:9a:dd:bb:fe:10:25:f5:21:8a:
05:b0:8a:b0:db:24:44:e4:d1:fd:cf:ca:89:22:8b:c7:10:1f:
2a:62:f6:fd:7e:6a:85:46:4b:a3:2e:2c:0a:af:e1:b6:b4:31:
d8:47:ef:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7/ePDaumlNxbqtM/SG26yjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNjI1MTU0OTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODdlOTgwYThlZWE0NGRiNmFiZTViMGNlMTJlZDRjYzg2ZTIzMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyxXtrEzeWNgWAyNkTEqDmN5lk5M
yw2DKWKK5rCIdaBiO/12Kz0A0uxDMagCMlojGJwaM1JzTgaGRU07C9HEJHROF7Ac
zIRk6Z1L19ej8aSEeAkF+Yq+cQElJL4VDCQn06gds6YZVB76FUG+CIWfd2tnCOe7
qQUbhzsw7Jkg79CKQcSiYwfBbnhqwOsFRleJLsG9l1Ni+b84i2H/BtEmLseoP6k5
lXnjTGYi2I2ePSGmiwnrF6LTgMI2ubTPSLa37aiJxsrTz5vEWUOHrKdiUHmyHxXJ
sGy/3U/swunhuKRRLsGoHTnda6t7zQEF8mggJwJ1vOsfV7lV+umnY/jKswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBh+mAqO6kTbar5bDOEu1MyG4jLfMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvR0g2WUNvN3FSTnRxdmxzTTRTN1V6SWJpTXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyQvmMA0G
CSqGSIb3DQEBCwUAA4IBAQBfSh8gDNRZfFQ54mElDQJvxpYikobbmlofjb9DGI0o
kdZ03mveA5Fjmsa3y/ySHbloUk7rGZfvnb8CX8szBKrDKF+35QHbwINaAlBA7l/I
X+c25xRZPBZQzsd3DJ3LBIZBnrQZhvaGv8paG1KIIoPeHsARlx5IataohoxfWnV1
vITpmSX6rhEj4qH5SyHJ6mrvWTA+I03GLdiuPTD2rySKp6vbAsG5EZB245vwGBC1
OeOE7Cr8mlCmVycDMyQBqp6qQkBTx+ThOSojJYhBLria3bv+ECX1IYoFsIqw2yRE
5NH9z8qJIovHEB8qYvb9fmqFRkujLiwKr+G2tDHYR+/7
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:49 2026 by rpki-client