Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VFVS4CUbUpnEBDzV6DIieuV3A5M.roa
File: VFVS4CUbUpnEBDzV6DIieuV3A5M.roa (raw, json)
Hash identifier: CuQnGx8RGwB4MP/rfk9uJItnpUxIbolg+82NsJwyKNs=
Subject key identifier: 54:55:52:E0:25:1B:52:99:C4:04:3C:D5:E8:32:22:7A:E5:77:03:93
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1B17F2C58108DBF3CAF7C107910D2AE94
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VFVS4CUbUpnEBDzV6DIieuV3A5M.roa
Signing time: Fri 06 Nov 2026 15:34:24 +0000
ROA not before: Fri 06 Nov 2026 15:34:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212720
IP address blocks: 201.11.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:7f:2c:58:10:8d:bf:3c:af:7c:10:79:10:d2:ae:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 6 15:34:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=545552e0251b5299c4043cd5e832227ae5770393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:41:af:73:2f:71:0b:0f:52:16:0e:a5:65:
bd:8b:f7:99:f7:b7:93:d3:46:5a:0c:7c:0b:fa:75:
f3:7b:c5:bc:3f:91:41:ee:21:d3:73:b8:07:29:75:
87:a9:16:d8:8d:2f:fd:6c:09:11:0a:92:37:df:16:
51:1d:7e:20:c4:9a:44:c0:c5:f9:86:ec:43:4f:d5:
26:69:28:27:25:e5:a6:7b:b9:10:e9:76:a7:44:9d:
9a:b1:8e:de:ab:61:c4:70:59:26:99:ba:1b:aa:d2:
77:b2:91:91:60:79:62:cf:58:47:7d:89:1d:3a:7b:
39:81:94:71:86:3d:c3:ff:4d:45:ce:7a:b5:3a:ac:
63:fa:41:76:36:67:4c:6b:27:73:8e:cf:68:b3:6f:
fd:45:66:87:db:c9:a2:d6:d7:f1:a5:ee:f1:e8:a5:
a1:12:fe:92:8c:94:6f:e9:26:ab:61:65:3f:e2:82:
61:fb:6a:51:41:7a:a6:83:8b:dc:f0:70:fb:b9:49:
2b:bb:94:e8:74:4a:85:fe:c7:af:a7:3c:4d:57:19:
3a:5e:f6:d3:bd:64:50:23:a9:e5:72:06:b0:44:43:
a2:ee:3e:3f:98:d5:9d:eb:7d:ae:26:b9:25:b2:23:
9d:ee:6f:78:f9:ba:b4:d6:c5:c7:2d:00:e1:3e:42:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:55:52:E0:25:1B:52:99:C4:04:3C:D5:E8:32:22:7A:E5:77:03:93
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VFVS4CUbUpnEBDzV6DIieuV3A5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.11.227.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:b6:1d:db:3d:48:e5:ae:8d:fa:5d:72:b2:2a:54:33:5c:51:
bc:a1:12:ff:3c:a9:5c:d5:e5:b9:8c:5c:e9:96:f6:81:3a:50:
04:96:5b:ee:25:57:b4:58:9d:0e:b8:19:ab:99:7c:22:1b:fe:
17:19:17:a7:24:ff:2c:74:19:b4:6e:a2:79:2d:d6:59:81:47:
dd:ca:91:ef:78:4c:8e:b1:35:e4:ef:d4:f3:f3:a2:70:5c:cd:
90:8e:00:b3:cf:d6:f5:67:e1:88:f9:30:90:37:66:ec:d6:eb:
62:53:4c:ea:3e:31:cf:cc:63:a0:0c:95:25:70:b5:ac:13:b1:
d0:58:3a:a4:a0:16:b4:1f:9b:8b:28:46:78:9b:9d:2d:c0:00:
38:71:1d:c1:77:5f:7d:e7:2f:91:a6:d8:79:e9:b3:41:fd:b8:
2d:8d:8f:47:2a:1a:09:80:1e:bb:73:44:9f:0d:ce:2a:20:19:
22:b7:e1:84:3a:58:27:fc:69:22:a3:92:74:02:ed:f0:16:db:
32:0b:aa:c3:94:ae:0b:5a:16:9e:4f:ed:4c:12:dd:9c:a2:3c:
8a:e3:07:f1:2f:28:c7:c3:b2:13:33:8a:fd:9e:10:ed:f6:27:
20:f7:09:ac:25:ee:dc:2f:75:b9:01:56:a9:31:eb:ba:36:de:
9d:d5:af:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGxfyxYEI2/PK98EHkQ0q6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYxMTA2MTUzNDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDU1NTJlMDI1MWI1Mjk5YzQwNDNjZDVlODMyMjI3YWU1NzcwMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzZBr3MvcQsPUhYOpWW9i/eZ97eT
00ZaDHwL+nXze8W8P5FB7iHTc7gHKXWHqRbYjS/9bAkRCpI33xZRHX4gxJpEwMX5
huxDT9UmaSgnJeWme7kQ6XanRJ2asY7eq2HEcFkmmbobqtJ3spGRYHliz1hHfYkd
Ons5gZRxhj3D/01Fznq1Oqxj+kF2NmdMaydzjs9os2/9RWaH28mi1tfxpe7x6KWh
Ev6SjJRv6SarYWU/4oJh+2pRQXqmg4vc8HD7uUkru5TodEqF/sevpzxNVxk6XvbT
vWRQI6nlcgawREOi7j4/mNWd632uJrklsiOd7m94+bq01sXHLQDhPkKazwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFRVUuAlG1KZxAQ81egyInrldwOTMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvVkZWUzRDVWJVcG5FQkR6VjZESWlldVYzQTVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyQvjMA0G
CSqGSIb3DQEBCwUAA4IBAQC5th3bPUjlro36XXKyKlQzXFG8oRL/PKlc1eW5jFzp
lvaBOlAEllvuJVe0WJ0OuBmrmXwiG/4XGRenJP8sdBm0bqJ5LdZZgUfdypHveEyO
sTXk79Tz86JwXM2QjgCzz9b1Z+GI+TCQN2bs1utiU0zqPjHPzGOgDJUlcLWsE7HQ
WDqkoBa0H5uLKEZ4m50twAA4cR3Bd1995y+Rpth56bNB/bgtjY9HKhoJgB67c0Sf
Dc4qIBkit+GEOlgn/Gkio5J0Au3wFtsyC6rDlK4LWhaeT+1MEt2cojyK4wfxLyjH
w7ITM4r9nhDt9icg9wmsJe7cL3W5AVapMeu6Nt6d1a+Q
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:37:32 2026 by rpki-client