Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Xa4Ln_7N0fcSd-ucCJg0D2RCVRI.roa
File: Xa4Ln_7N0fcSd-ucCJg0D2RCVRI.roa (raw, json)
Hash identifier: P3y6sPNO97WpTC3sQMx6pMakXQxthlWLbnAfxE7dOHg=
Subject key identifier: 5D:AE:0B:9F:FE:CD:D1:F7:12:77:EB:9C:08:98:34:0F:64:42:55:12
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F5BFCD6EF06BB95208D1014796D67063E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Xa4Ln_7N0fcSd-ucCJg0D2RCVRI.roa
Signing time: Mon 13 Jul 2026 14:58:44 +0000
ROA not before: Mon 13 Jul 2026 14:58:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132998
IP address blocks: 189.73.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:fc:d6:ef:06:bb:95:20:8d:10:14:79:6d:67:06:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 13 14:58:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dae0b9ffecdd1f71277eb9c0898340f64425512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:69:9a:dc:f4:6c:1f:41:4a:9a:ea:1f:d5:
e7:43:92:da:d5:32:19:7d:c2:09:28:91:b8:2f:c2:
ba:93:e3:11:79:d1:5f:2f:c6:32:d3:03:7c:b1:e8:
50:c8:5d:df:de:75:47:a2:d4:ba:f8:09:d0:65:53:
69:86:0b:11:1f:da:40:93:c2:ef:62:4c:c3:e4:5a:
f1:11:e3:53:a8:f5:34:99:1f:66:42:87:94:f8:91:
54:22:49:e7:39:ab:b3:da:31:77:1d:5d:5e:d4:83:
29:30:4e:93:54:72:aa:80:4d:9f:3e:ff:0a:be:53:
27:a8:db:21:d9:68:8f:b1:42:84:a6:80:55:7c:08:
19:06:53:80:94:66:55:65:2c:77:21:14:3a:aa:40:
7b:e4:74:9c:7c:45:28:35:99:3a:43:76:cd:be:75:
ee:f6:19:6a:4a:5e:ff:0e:03:70:26:c3:28:c8:6f:
6b:07:72:36:b0:6c:71:84:21:81:49:cd:38:91:7b:
18:f2:59:2a:1c:48:5e:d5:81:4c:44:76:89:6b:0d:
d5:54:76:93:30:be:0d:77:b1:0f:8e:f2:77:a5:c9:
4e:ff:82:eb:16:1c:99:dc:6a:b2:91:5d:be:73:d5:
4e:d0:e3:f1:cd:20:a4:49:e9:b4:22:13:e3:35:08:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AE:0B:9F:FE:CD:D1:F7:12:77:EB:9C:08:98:34:0F:64:42:55:12
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Xa4Ln_7N0fcSd-ucCJg0D2RCVRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.73.23.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e3:95:ce:90:ab:e5:92:7e:94:71:09:3c:16:ab:d6:69:50:
66:09:c8:d5:01:6e:9e:67:67:f9:f7:56:3e:15:d3:72:03:b1:
0d:ed:8c:11:1e:2e:ce:2b:74:09:15:ac:d9:1d:89:81:a1:d9:
18:6b:e2:3a:11:ad:f6:80:eb:c6:7f:73:bf:3a:39:60:0d:8e:
26:e2:02:a4:3e:5e:7d:41:ac:21:41:53:95:8c:46:b5:13:32:
22:8d:50:cc:65:b5:5a:98:25:43:41:1a:9a:02:32:7d:8f:04:
55:45:9e:53:b1:2e:12:5e:eb:10:f0:0c:ee:9a:d6:e3:2d:a9:
55:9e:4e:07:d2:6b:0b:25:47:9b:75:59:02:17:43:86:55:2d:
4d:85:2b:58:02:07:e0:4a:93:05:0e:ca:25:2c:a8:f9:8a:61:
55:45:66:95:58:55:1e:9e:c3:f2:ef:f0:97:f1:6e:1b:bb:ab:
c7:c6:9e:c1:60:59:21:37:a1:78:d4:4b:bb:82:21:a3:4f:a9:
85:c8:0d:d4:83:0a:2d:21:aa:d4:63:aa:4f:16:43:4c:ad:4f:
bc:5e:a2:b6:d4:b3:e2:69:89:3b:67:c4:37:7a:22:e4:19:a1:
88:af:12:db:fa:14:5c:c5:64:e6:1e:f4:95:30:77:7c:e4:82:
63:0e:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:50 2026 by rpki-client