Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/H-wXdHW9x_p2NVM481vSUwea_pA.roa
File: H-wXdHW9x_p2NVM481vSUwea_pA.roa (raw, json)
Hash identifier: Io26uCfFMy3g3W8ugnClnqnJpG/Q785rbn8u297TThU=
Subject key identifier: 1F:EC:17:74:75:BD:C7:FA:76:35:53:38:F3:5B:D2:53:07:9A:FE:90
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1DD01EED80D46D7E894C36676C119F311
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/H-wXdHW9x_p2NVM481vSUwea_pA.roa
Signing time: Sun 15 Nov 2026 02:20:53 +0000
ROA not before: Sun 15 Nov 2026 02:20:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 191.44.19.0/24 maxlen: 24
191.44.22.0/24 maxlen: 24
191.217.163.0/24 maxlen: 24
191.217.164.0/24 maxlen: 24
200.102.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:01:ee:d8:0d:46:d7:e8:94:c3:66:76:c1:19:f3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 15 02:20:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fec177475bdc7fa76355338f35bd253079afe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:95:80:f8:57:44:e6:be:59:79:f2:10:89:
5c:03:18:1c:c9:0c:b2:7a:b2:8d:fd:a9:df:c2:fe:
d2:39:77:d6:b8:84:71:a7:84:58:09:2e:0c:37:e3:
d7:0e:73:a3:62:07:ef:13:bb:d1:c1:23:21:32:c2:
32:c8:b3:bc:9c:52:79:4b:a7:01:89:bf:a4:53:48:
db:f1:fe:4b:65:55:26:d0:f3:f2:37:26:91:1f:ee:
7e:99:4e:01:2a:ab:e2:45:7a:91:23:05:e9:20:b2:
79:14:0a:21:4a:cc:04:c1:bc:81:ea:41:04:cc:8b:
e2:16:bf:38:f0:dc:ba:ed:a1:36:a9:a9:05:73:b8:
ac:62:b4:21:92:11:b9:de:d4:41:9f:92:bb:a7:da:
40:bc:45:56:8e:45:f1:58:1a:ae:a4:c3:f2:22:ad:
99:7b:c5:ae:e3:6d:ff:9b:6c:bf:3c:b8:c4:a1:ea:
ac:15:c4:6e:91:81:d0:1d:d7:90:bf:63:20:b0:97:
ab:d4:20:70:ff:0f:81:78:58:5b:82:3d:28:e2:8c:
e6:91:a8:6e:00:70:9d:53:95:72:ca:32:f9:bf:6e:
b2:da:19:15:89:90:17:4e:b2:f9:52:ae:58:cd:b2:
28:52:1f:f1:b7:f4:8f:04:1b:4a:c5:7a:85:72:86:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EC:17:74:75:BD:C7:FA:76:35:53:38:F3:5B:D2:53:07:9A:FE:90
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/H-wXdHW9x_p2NVM481vSUwea_pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.19.0/24
191.44.22.0/24
191.217.163.0-191.217.164.255
200.102.178.0/24
Signature Algorithm: sha256WithRSAEncryption
69:13:29:35:66:88:f1:a5:e6:ca:54:1f:8a:93:89:db:b3:73:
a0:26:8b:73:54:cd:af:93:2c:cc:ad:f0:1c:00:9a:1c:bc:bc:
64:e1:70:4d:45:06:c6:42:11:9f:08:42:b3:3b:fb:12:1b:69:
1c:7d:ca:c2:fd:2c:cb:c3:28:8a:bd:4b:68:86:05:3d:dd:a3:
e2:0a:0c:89:75:7e:01:7f:83:df:1b:4d:dc:80:54:40:e9:6d:
4a:f1:e7:a3:85:1c:86:bf:d0:78:33:b9:9d:73:67:d7:36:70:
90:80:ef:bf:12:c2:cb:f3:67:50:24:c6:82:d7:de:ab:df:bc:
ba:b9:a1:bd:53:74:1d:bf:e1:07:05:44:13:8b:f6:b2:92:1d:
e6:f2:6f:c9:a0:91:e9:f2:e4:d8:39:ca:d9:c4:b7:4e:8d:1f:
87:86:38:0e:bb:e4:ce:32:fc:13:2a:55:36:f4:75:71:48:3d:
8f:8e:6b:f8:e9:7d:ed:0d:c8:ab:0b:a0:2c:b5:7a:d8:31:3f:
5b:79:9e:43:39:97:8f:e3:ec:18:a7:93:93:a7:23:0f:c5:6f:
80:ea:52:77:9b:ba:03:07:2b:77:00:d5:d9:df:c0:d4:d1:d2:
aa:36:0e:7d:f7:6e:dd:c1:b7:46:81:9c:2f:cb:50:e7:51:c8:
fd:87:35:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:23 2026 by rpki-client