Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SIe82uwaLxzAZimevkcy6keTyF8.roa
File: SIe82uwaLxzAZimevkcy6keTyF8.roa (raw, json)
Hash identifier: /bW+XTIyhmnvaCRkBMDeZ2OVwhx4TfidRGNWhXkVSTM=
Subject key identifier: 48:87:BC:DA:EC:1A:2F:1C:C0:66:29:9E:BE:47:32:EA:47:93:C8:5F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F4766798DA012EDE39EA89AC6DDB4637B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SIe82uwaLxzAZimevkcy6keTyF8.roa
Signing time: Thu 09 Jul 2026 15:02:05 +0000
ROA not before: Thu 09 Jul 2026 15:02:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151389
IP address blocks: 200.181.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:66:79:8d:a0:12:ed:e3:9e:a8:9a:c6:dd:b4:63:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 9 15:02:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4887bcdaec1a2f1cc066299ebe4732ea4793c85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:6c:ee:36:f0:6f:f2:37:7d:55:b1:83:71:
a0:07:ac:7c:e8:31:cc:04:db:0a:d3:7f:fd:2a:12:
67:e8:3f:de:3b:a7:2a:57:cb:0d:9a:0a:f0:70:70:
3d:70:e1:39:b3:7b:4a:80:18:86:69:32:57:68:6d:
74:0f:f7:d0:34:cf:66:56:d9:be:39:fe:9b:fd:64:
e6:0c:23:44:d7:e1:88:ad:fb:0c:1e:f3:93:23:94:
84:1a:43:90:f7:59:fd:3c:18:c7:92:19:c0:ab:86:
45:c5:29:ee:bc:34:62:bc:37:91:f2:25:25:52:44:
f0:7b:d8:26:bd:11:01:e9:c2:a1:dc:c3:f8:c4:a1:
75:5a:04:b6:55:d8:e8:d2:45:90:36:1d:63:84:4a:
5b:8a:ab:49:cf:b8:47:77:38:8f:4f:9d:31:5e:dc:
2b:9c:6d:b2:d8:54:9d:e0:6f:9e:a9:48:4b:2e:09:
af:03:4c:91:f8:56:a6:f8:10:e1:ba:38:f7:19:b7:
68:9a:a7:83:ff:37:e3:85:37:e7:73:2c:57:22:cd:
eb:87:37:8c:5a:b2:fa:5a:e1:03:b2:e2:70:67:34:
a1:70:51:70:04:8a:74:14:46:d4:40:8e:04:32:67:
4d:e0:66:b2:50:51:0d:ca:42:ba:4b:41:cd:39:c4:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:87:BC:DA:EC:1A:2F:1C:C0:66:29:9E:BE:47:32:EA:47:93:C8:5F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SIe82uwaLxzAZimevkcy6keTyF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.181.91.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:1a:6a:5f:2b:f3:c6:77:32:2c:34:8d:a1:99:fd:a9:c0:fe:
1d:ea:ed:49:06:2f:93:44:86:db:e4:43:33:e5:fc:6b:08:d3:
aa:d3:30:6f:3f:a2:81:1e:95:d7:c0:85:20:2d:b1:f8:a1:53:
cd:e1:40:91:cd:96:6d:3c:b0:7f:92:26:3a:aa:fe:2f:f2:1b:
72:0f:72:f1:67:0b:f5:6e:6c:30:39:a8:cd:b6:4c:f3:45:5e:
2a:c9:bf:52:7e:87:74:42:e8:ec:58:8c:5b:74:5b:01:1d:c6:
3a:d2:a7:b8:37:e5:d6:0c:7d:85:3a:3b:b2:1a:78:29:2e:8c:
57:ad:fe:03:6d:3b:b1:d1:ac:7d:87:0c:52:8a:87:1a:fe:ed:
b3:4a:08:3d:67:1f:23:ae:8b:8f:20:61:1f:c6:86:2e:81:64:
f0:45:63:fe:10:b1:5f:b7:71:a5:17:bd:e1:4d:fb:b0:2b:d5:
ec:b3:dc:39:55:af:5c:f1:08:b9:e8:bf:75:2f:f6:92:d4:8b:
6b:00:0c:f5:92:c9:34:3e:2e:48:f2:36:6a:1d:eb:47:d4:0d:
e2:1e:b4:bf:94:e4:f7:58:3c:8d:3b:5e:57:af:ac:29:10:ae:
24:e3:a6:3c:f1:a0:fd:5f:07:df:67:5e:01:c4:f3:cf:82:96:
ff:03:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:47:15 2026 by rpki-client