Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ODHz968m326L8kFBThfpSVuOelE.roa
File: ODHz968m326L8kFBThfpSVuOelE.roa (raw, json)
Hash identifier: y+/feOh088M4R2AXoYn8/0fe4AdkQCa3tfXQ/HDys+g=
Subject key identifier: 38:31:F3:F7:AF:26:DF:6E:8B:F2:41:41:4E:17:E9:49:5B:8E:7A:51
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F910DE54E88D0C0545DA9C0BB0CA279CE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ODHz968m326L8kFBThfpSVuOelE.roa
Signing time: Thu 23 Jul 2026 22:17:14 +0000
ROA not before: Thu 23 Jul 2026 22:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 191.217.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:0d:e5:4e:88:d0:c0:54:5d:a9:c0:bb:0c:a2:79:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 23 22:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3831f3f7af26df6e8bf241414e17e9495b8e7a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:c9:43:11:04:49:0e:a2:11:8f:f7:1b:2b:
e0:c0:89:a6:e7:61:cb:24:55:50:a2:03:80:14:98:
47:2e:0c:8e:de:f3:6a:d5:20:50:1b:4f:ec:87:85:
71:cc:de:20:e6:63:4d:d8:12:0e:ed:18:a5:4f:99:
a8:b9:e6:cb:f4:14:f2:7f:f2:f0:c6:ba:aa:54:c3:
3e:13:9b:9b:5a:d5:73:45:8f:6f:d9:7e:3d:81:c3:
a1:fe:4f:67:54:5a:e5:aa:ba:7f:72:cf:62:bc:f8:
cd:88:33:22:f4:72:f2:1d:71:08:cc:a7:8d:41:5a:
6b:6b:ff:16:23:26:56:71:c1:85:8f:a4:e2:b6:37:
0f:86:22:cd:f4:41:0f:d7:82:f2:2b:3b:fd:49:e6:
ac:8f:0b:94:be:28:d6:cf:7f:73:44:a2:d7:e1:5a:
27:e7:79:f6:21:29:a6:f2:45:8f:6a:7f:52:6e:f8:
b4:8d:28:a3:2a:02:5f:34:44:70:c8:16:f6:1f:a2:
19:cd:5c:cc:f0:45:a7:74:f7:c7:05:8d:4c:a8:f0:
50:1b:f7:86:83:a3:e1:70:cc:ab:1a:b0:7d:fb:30:
18:9c:89:c9:2c:6c:53:ea:d1:a7:68:41:66:09:40:
03:1f:26:04:06:a2:89:28:59:1f:52:1d:04:e8:87:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:31:F3:F7:AF:26:DF:6E:8B:F2:41:41:4E:17:E9:49:5B:8E:7A:51
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ODHz968m326L8kFBThfpSVuOelE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.165.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4e:46:34:71:72:3b:90:9b:51:5a:24:3a:7a:4d:e4:16:4f:
05:c1:aa:ba:a5:c6:db:76:9a:f1:84:ba:e5:d2:93:22:a5:b1:
53:d3:e1:b6:97:f9:ca:38:43:46:05:d4:8e:64:0c:19:e0:ee:
e9:05:31:ac:ac:5d:9d:0e:33:6c:ed:67:42:de:7d:7d:59:e7:
39:3c:df:e6:cd:b9:4e:20:96:94:40:30:51:d7:26:e7:87:b3:
fa:6a:e6:2d:77:15:c3:66:bc:f2:e4:93:43:c6:bc:49:f2:40:
07:22:63:fe:fe:50:36:59:95:7a:5f:04:02:28:49:bf:48:53:
0b:48:1f:c1:72:70:68:cf:a3:03:49:22:92:cc:11:c3:ac:47:
cb:1e:82:e5:9b:35:77:a0:8f:06:98:87:83:87:15:f4:93:19:
e4:8d:dd:a2:aa:19:94:cb:08:dd:39:78:9e:85:b3:9c:a9:6f:
aa:55:f4:89:25:f7:63:c6:5d:26:9a:fc:26:bd:ab:1e:cd:55:
9d:c8:53:67:92:52:3a:7d:08:a2:53:d0:a8:81:14:43:81:90:
e9:92:b9:d1:e5:98:d5:49:13:15:36:be:21:35:21:bb:9d:36:
a8:91:8a:2f:57:ba:37:08:07:81:ee:6f:a8:7b:c0:75:f7:0e:
80:ec:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:40 2026 by rpki-client