Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vn8BDAZPjbnqTYDoHltGFPJBjWU.roa
File: Vn8BDAZPjbnqTYDoHltGFPJBjWU.roa (raw, json)
Hash identifier: k3l1lvwlszCG5ZPYTYL6UvSCv2/L+Td0UHszJp+FJMI=
Subject key identifier: 56:7F:01:0C:06:4F:8D:B9:EA:4D:80:E8:1E:5B:46:14:F2:41:8D:65
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F3125BBBC89A4896A8F54E9B438D5F6D4
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vn8BDAZPjbnqTYDoHltGFPJBjWU.roa
Signing time: Sun 05 Jul 2026 07:19:44 +0000
ROA not before: Sun 05 Jul 2026 07:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402257
IP address blocks: 191.222.33.0/24 maxlen: 24
200.102.187.0/24 maxlen: 24
200.165.26.0/24 maxlen: 24
200.181.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:25:bb:bc:89:a4:89:6a:8f:54:e9:b4:38:d5:f6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 07:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=567f010c064f8db9ea4d80e81e5b4614f2418d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:47:a8:e5:61:5c:96:80:62:f0:80:23:b1:
d5:08:66:da:2f:c3:df:54:83:61:71:ec:23:70:66:
9c:0d:35:00:43:da:8e:fb:57:9a:f7:9e:bc:60:85:
f4:d1:a5:d1:6a:7d:7f:7c:2c:47:b2:04:6d:5b:f0:
f9:57:d6:7f:53:2c:8a:6b:ec:e4:d7:fe:52:b9:a5:
91:2c:32:44:a0:66:59:2e:14:d7:fb:8d:f1:fe:e2:
33:27:7c:da:4c:17:e6:b6:03:ac:41:99:8d:f6:65:
86:19:ca:e5:ec:bd:c6:33:c1:ee:ce:fc:da:59:f6:
d3:26:7e:36:fd:5e:d0:08:be:69:8c:05:fc:17:0b:
01:ef:18:f2:cf:d6:ed:48:73:64:ff:11:af:19:6f:
ee:3d:90:19:fd:eb:1d:f7:e7:69:16:96:a2:e1:88:
f1:61:a4:84:62:2a:86:55:c8:d7:c6:d1:ed:9a:64:
75:69:e7:00:ef:e5:dd:0a:ba:7f:93:76:24:41:af:
50:e6:89:f9:29:35:f2:f9:a5:cc:bb:fa:c9:53:12:
81:e6:4b:79:ed:ae:c0:89:e2:f8:4c:e3:36:18:9b:
31:81:aa:09:12:5c:ae:7c:bc:9d:c9:17:91:b7:9b:
29:8e:9e:ef:36:5f:70:76:13:20:4c:68:1c:14:30:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7F:01:0C:06:4F:8D:B9:EA:4D:80:E8:1E:5B:46:14:F2:41:8D:65
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vn8BDAZPjbnqTYDoHltGFPJBjWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.33.0/24
200.102.187.0/24
200.165.26.0/24
200.181.93.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c3:cc:a2:6c:49:9f:c7:42:53:4d:e6:e3:5a:ed:74:c1:5b:
0e:df:66:94:e0:25:9d:8d:b1:c0:db:e3:8c:6d:58:be:53:f0:
b0:f2:75:33:23:33:96:e5:d0:1a:a1:01:b1:42:b9:2b:8e:92:
c8:7b:69:b1:56:b8:98:2e:f1:d6:8f:2c:c1:ae:b8:42:c1:6a:
17:0b:d9:90:e7:ad:6d:24:d2:d0:d3:d6:4b:55:4f:1e:b3:a0:
b4:b8:e8:d4:d2:71:22:2c:e9:db:0d:c7:6f:51:2a:7d:e8:00:
b9:81:97:92:69:05:5a:e7:54:be:50:96:e2:cf:f4:12:d6:f9:
07:01:47:08:d7:3f:51:bd:f0:b4:c7:06:a1:56:27:f4:36:ee:
1f:13:24:c8:5e:d4:b0:66:23:f5:02:a9:f8:b7:57:ce:1c:3a:
66:d6:dc:8e:fa:2b:76:36:46:3c:fe:30:92:11:4d:37:1f:ee:
48:86:43:50:45:47:c5:54:6f:10:9b:40:3c:64:53:c7:27:71:
dc:e7:11:7b:f2:ae:40:ea:e1:83:de:7e:be:89:81:2d:e3:c7:
7f:76:f1:7e:34:97:ce:5c:fe:27:3b:27:94:b4:b6:b0:14:cc:
28:3f:02:70:1c:98:6b:9c:8d:ab:10:72:6e:7c:9e:3e:70:7e:
9a:96:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:50 2026 by rpki-client