Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/U4oZko-dk3uJfM1kHQyzBS8aWDM.roa
File: U4oZko-dk3uJfM1kHQyzBS8aWDM.roa (raw, json)
Hash identifier: xb/ut2VeCsATzStFfladt1P1s/sPsk0RDX7kCmsYFlw=
Subject key identifier: 53:8A:19:92:8F:9D:93:7B:89:7C:CD:64:1D:0C:B3:05:2F:1A:58:33
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019E0D23E592FAE58F96304B68EAEEF6F091
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/U4oZko-dk3uJfM1kHQyzBS8aWDM.roa
Signing time: Sat 09 May 2026 14:28:36 +0000
ROA not before: Sat 09 May 2026 14:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 94.229.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:23:e5:92:fa:e5:8f:96:30:4b:68:ea:ee:f6:f0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 9 14:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=538a19928f9d937b897ccd641d0cb3052f1a5833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:c4:1b:13:7e:61:da:98:14:07:11:84:81:
b6:2d:d4:11:53:fb:81:f5:92:00:e1:14:7f:55:4d:
7a:c7:65:27:51:96:8a:60:48:e4:7e:e0:66:ac:d2:
b9:22:24:a0:a6:fc:1a:c2:30:f0:33:03:3c:8f:a5:
45:28:86:95:ad:b5:85:f2:77:74:c5:18:65:4e:a7:
60:61:bc:87:fc:bd:67:fa:52:97:b3:79:82:d6:84:
a8:e4:31:ce:40:32:31:d2:ba:27:14:83:f1:4c:7d:
f5:b1:dc:f0:a6:6e:86:63:7e:d8:26:40:e4:85:b8:
00:76:69:c5:76:ad:b2:ae:fe:a6:4c:d8:fe:35:28:
8f:22:45:00:74:6c:14:e3:4d:39:ee:55:44:03:3c:
2b:83:99:94:b6:64:9f:75:69:18:b7:d4:dc:a3:13:
d9:00:1c:3d:5c:11:0f:a2:37:1f:e0:35:50:34:33:
9c:a2:c2:c1:e1:a7:10:5a:36:c9:53:c1:9c:d1:ee:
c6:26:37:5c:16:b0:1f:e3:0d:3a:c7:01:6c:86:93:
07:f1:51:25:b5:f8:71:e6:4b:e1:23:c3:86:a7:28:
d9:6f:45:04:ac:32:35:b9:2a:02:6d:2e:d8:72:d4:
61:f5:14:cb:ea:64:e1:cf:1c:e5:43:e2:fc:78:6b:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8A:19:92:8F:9D:93:7B:89:7C:CD:64:1D:0C:B3:05:2F:1A:58:33
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/U4oZko-dk3uJfM1kHQyzBS8aWDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:cc:0e:0d:2b:64:86:5f:a3:67:d9:15:d5:a8:1b:6f:ee:ec:
af:dd:82:73:22:06:b5:86:da:dc:dc:a4:d6:9d:1e:68:03:ba:
7d:c9:c0:c0:ea:db:20:76:42:07:cf:4d:3a:78:d5:b6:b4:2e:
80:c7:17:b4:f9:80:0d:33:ca:18:bb:17:07:3f:c4:e2:da:a8:
03:53:43:e8:38:40:52:4e:61:4c:b7:dc:9e:f3:56:1b:aa:d9:
a3:a1:0d:87:7a:1a:57:d6:ef:77:64:65:65:f6:33:cf:7d:b5:
bd:df:ec:6b:22:a8:66:ba:4c:ef:2a:70:2e:fb:f7:32:8d:2b:
17:bc:b0:e6:02:db:bd:5e:93:82:ab:52:97:c9:0d:7a:f8:86:
a5:fe:03:3f:52:fe:8e:6b:b2:87:b4:39:5f:7b:ae:81:c8:ed:
de:44:f0:bf:e9:bd:e6:f1:12:39:97:ac:2f:2a:b7:34:78:ea:
9b:c4:ab:33:2b:a7:6c:65:86:67:66:7a:33:c7:ef:d4:7c:76:
1e:ba:31:50:6b:c7:62:97:d6:d1:83:e8:f2:cf:7b:06:97:44:
9a:9a:ee:7e:b4:b7:d0:ea:c6:0e:31:ef:39:9f:db:3b:05:e9:
a1:e3:82:ad:73:2a:e7:9b:ea:6c:0b:41:c4:d4:fa:3d:18:45:
6b:3b:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:07 2026 by rpki-client