Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ReIWF2oEYUbMk-30x3TtyAGlk-o.roa
File: ReIWF2oEYUbMk-30x3TtyAGlk-o.roa (raw, json)
Hash identifier: COubxyPrYST5W3mvtF6WB6jOW5V9b6FvDeBdM470oZM=
Subject key identifier: 45:E2:16:17:6A:04:61:46:CC:93:ED:F4:C7:74:ED:C8:01:A5:93:EA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F8B6672B142A2EE404EE7ECAAB140D112
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ReIWF2oEYUbMk-30x3TtyAGlk-o.roa
Signing time: Wed 22 Jul 2026 19:56:14 +0000
ROA not before: Wed 22 Jul 2026 19:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 189.12.63.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
191.217.165.0/24 maxlen: 24
191.219.25.0/24 maxlen: 24
191.219.28.0/24 maxlen: 24
200.181.95.0/24 maxlen: 24
201.11.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:66:72:b1:42:a2:ee:40:4e:e7:ec:aa:b1:40:d1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 22 19:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45e216176a046146cc93edf4c774edc801a593ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:62:47:81:48:9e:a1:2d:68:ca:29:c0:58:
9b:33:85:f9:50:43:de:da:c0:30:7d:69:ab:45:34:
36:1f:af:13:18:d2:5b:50:f1:15:75:78:b4:e6:1a:
53:7a:2d:d1:84:42:23:34:ff:18:2e:11:5a:ab:cb:
32:3b:e1:46:aa:bb:91:e9:3f:c2:ac:5a:1c:b2:2d:
e3:90:a0:40:69:6c:29:c8:0f:bd:db:5f:d3:80:10:
7f:5a:5c:c2:fb:10:03:85:ee:eb:2e:80:9b:ed:92:
87:e6:57:2b:93:5a:69:ab:d3:8d:4f:ad:af:be:d3:
00:aa:78:f2:cf:8b:30:25:d0:c8:82:52:0a:00:55:
03:f6:3d:18:45:de:00:78:3e:b4:b7:e2:ea:38:28:
65:4b:59:df:3e:d5:a8:05:58:b4:53:a4:f6:04:8d:
94:b2:73:c7:29:78:8f:a1:54:be:7c:6a:33:fe:7d:
02:37:6a:9f:61:59:ff:b7:37:a1:40:16:72:e8:31:
33:30:3f:c4:34:18:b3:bb:02:c9:6a:d1:49:91:81:
ed:2e:db:c2:10:36:a9:62:89:99:05:c9:9c:03:16:
3e:5b:7e:9d:93:e6:51:c9:50:b5:46:b4:88:55:15:
71:40:7f:6f:99:45:c0:c9:4b:54:18:99:38:ee:ef:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E2:16:17:6A:04:61:46:CC:93:ED:F4:C7:74:ED:C8:01:A5:93:EA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ReIWF2oEYUbMk-30x3TtyAGlk-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.63.0/24
189.31.221.0/24
191.217.165.0/24
191.219.25.0/24
191.219.28.0/24
200.181.95.0/24
201.11.229.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b3:b6:3f:1e:0e:25:9f:0a:e5:7b:d5:8e:88:fa:cf:5a:c2:
af:95:77:c8:55:52:02:58:b3:be:a2:a8:67:1d:68:88:7f:16:
2a:e7:68:ab:17:db:eb:2a:b5:26:83:78:d6:c3:8f:1c:07:ce:
21:f4:d5:30:7c:40:31:bf:8b:49:b1:a4:58:1d:d1:ff:f5:ad:
24:46:d9:a1:63:73:7a:f0:6c:88:b8:2a:0a:ed:27:83:4a:fe:
00:0a:c1:fe:54:81:2a:0b:e2:2d:50:03:77:67:37:10:63:c0:
4b:d0:fe:f2:8c:e0:47:a5:2c:73:0e:93:3f:cd:27:e2:42:8b:
75:b1:ce:80:d9:d9:ae:32:5f:94:7c:d6:7a:4b:89:29:8f:65:
17:c2:c8:99:9d:37:ef:7a:42:4c:0c:ab:e2:82:07:57:2c:7a:
4d:80:1b:f3:dd:59:dd:df:70:2c:8a:5a:72:37:52:c5:a2:59:
42:0c:79:c9:79:af:09:9f:ff:c2:ac:fa:2b:90:e5:33:45:8b:
86:e1:7e:65:dc:b6:dd:a4:89:ab:54:d1:4b:13:9f:06:f4:b9:
7e:8f:d8:13:ee:da:5a:f3:0f:d9:83:fe:3f:0c:ce:69:9d:49:
4e:3f:6b:87:a1:bd:1d:c6:1d:a9:0a:e0:52:91:1b:c5:35:d5:
f0:dc:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:37 2026 by rpki-client