Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/aTjrll2MxeMYK1NGBidNjGpt0q4.roa
File: aTjrll2MxeMYK1NGBidNjGpt0q4.roa (raw, json)
Hash identifier: AmQTzyNzqWdILNngPSKE233J8WE3kkAbtI9uzINMqmI=
Subject key identifier: 69:38:EB:96:5D:8C:C5:E3:18:2B:53:46:06:27:4D:8C:6A:6D:D2:AE
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F47667A49F513A430E8DF6D4047B53D46
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/aTjrll2MxeMYK1NGBidNjGpt0q4.roa
Signing time: Thu 09 Jul 2026 15:02:05 +0000
ROA not before: Thu 09 Jul 2026 15:02:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209888
IP address blocks: 191.44.21.0/24 maxlen: 24
191.217.166.0/24 maxlen: 24
191.217.173.0/24 maxlen: 24
191.219.22.0/24 maxlen: 24
191.222.32.0/24 maxlen: 24
191.222.35.0/24 maxlen: 24
191.222.47.0/24 maxlen: 24
200.165.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:66:7a:49:f5:13:a4:30:e8:df:6d:40:47:b5:3d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 9 15:02:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6938eb965d8cc5e3182b534606274d8c6a6dd2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:8e:dc:54:7d:f5:6b:28:c3:64:59:72:d3:
bb:0a:8f:39:5f:39:44:85:2d:18:f2:1d:37:ca:0b:
dc:85:ef:6e:cc:53:0f:97:71:02:a0:49:60:e3:e6:
13:a8:0d:6b:cf:97:73:9c:b4:63:94:8d:1c:cd:5c:
22:45:88:6d:6b:58:9c:15:65:99:26:cc:69:af:e9:
77:aa:30:8f:1f:3e:dd:e3:e7:e5:e2:7d:a1:f9:92:
36:06:03:b2:ff:a2:3c:af:a8:f9:d0:82:ef:95:2b:
1a:a2:bd:db:39:2a:eb:4a:36:b8:72:9f:4d:d5:1d:
f5:9f:27:77:c0:e1:67:7c:4d:5b:4b:a1:22:9b:fc:
32:b3:1e:03:cd:bf:64:bc:4c:ae:c7:8c:e9:89:9d:
d9:c2:02:4c:38:bb:63:09:f4:24:9c:d5:81:de:ed:
ed:c0:a8:af:6d:ae:54:64:bb:b1:55:e4:ef:52:e9:
21:42:0b:79:15:b7:d9:f5:d1:44:a1:ff:bd:f0:61:
f0:4d:f5:9f:55:36:a0:ae:52:6e:b0:44:fd:96:31:
32:54:4f:fa:ad:e1:25:50:22:f7:82:55:52:7b:fd:
4d:5d:f6:d8:4f:23:93:64:38:e1:d1:bc:1a:ef:8c:
7c:ce:39:52:a4:4e:a8:f0:89:84:64:33:76:2c:9a:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:38:EB:96:5D:8C:C5:E3:18:2B:53:46:06:27:4D:8C:6A:6D:D2:AE
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/aTjrll2MxeMYK1NGBidNjGpt0q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.21.0/24
191.217.166.0/24
191.217.173.0/24
191.219.22.0/24
191.222.32.0/24
191.222.35.0/24
191.222.47.0/24
200.165.22.0/24
Signature Algorithm: sha256WithRSAEncryption
64:52:21:1e:f5:94:00:09:6a:e9:c7:e6:b0:c5:e5:c4:22:9a:
d4:af:7a:c2:c9:3b:9f:50:e5:ae:24:29:1d:80:16:5f:b4:33:
5f:22:c7:80:1b:1c:4e:99:75:36:f4:3c:63:51:e6:39:a2:f7:
5e:d2:0f:87:94:5c:bb:dd:e4:e5:b8:de:bc:f9:17:3d:a0:ac:
af:19:84:6a:83:f9:95:92:fb:58:e6:26:40:e7:b3:fe:30:67:
ed:c3:fa:49:77:23:d2:80:6a:81:f7:dd:ab:81:d9:5f:30:f4:
54:04:67:3b:31:70:31:4f:f6:a6:61:70:40:2c:23:78:b4:66:
32:51:20:da:0a:52:3f:3a:4b:0b:1b:39:f7:ca:84:ef:3c:13:
49:d5:31:f4:0b:60:17:c3:a8:7b:7b:2e:ca:06:2d:b4:26:56:
9e:54:ad:91:d2:b8:4b:60:7a:cc:40:4f:59:2d:b5:8b:7c:15:
ff:f1:88:85:b4:d6:0c:51:08:6a:cf:ca:dd:c5:a7:ed:83:a4:
30:c9:c0:00:da:27:54:62:5b:75:ba:cf:32:41:a8:dc:f2:c3:
7e:fa:7b:de:6c:ba:10:08:d2:8b:3a:74:40:ba:a7:8b:99:67:
8e:61:c3:b3:6a:90:42:4f:16:e9:10:73:59:2c:b3:14:6f:e4:
cd:bb:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:26 2026 by rpki-client