Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cbvvfh4Cnv-6zHWpbmwM9lofPco.roa
File: cbvvfh4Cnv-6zHWpbmwM9lofPco.roa (raw, json)
Hash identifier: xO3OvmBi8CoFwH9ti0JHgT6yb9jMGYR25JOVUxQ/GIo=
Subject key identifier: 71:BB:EF:7E:1E:02:9E:FF:BA:CC:75:A9:6E:6C:0C:F6:5A:1F:3D:CA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F3918F2797C7FCDEE568F81574B5035D0
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cbvvfh4Cnv-6zHWpbmwM9lofPco.roa
Signing time: Mon 06 Jul 2026 20:22:44 +0000
ROA not before: Mon 06 Jul 2026 20:22:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138764
IP address blocks: 189.12.63.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:18:f2:79:7c:7f:cd:ee:56:8f:81:57:4b:50:35:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 6 20:22:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71bbef7e1e029effbacc75a96e6c0cf65a1f3dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:93:71:6b:b8:ad:ce:47:a1:93:66:72:a1:
d1:4a:2a:3b:cf:39:76:99:52:45:dd:15:49:c2:8a:
93:99:c1:96:3e:a2:a2:7d:9c:95:d2:da:d2:e5:a9:
29:07:1e:94:d6:65:d0:ce:85:6c:f4:21:ce:52:04:
32:81:4c:f5:d0:1c:f5:6c:1a:37:77:31:51:06:4e:
e7:52:d5:2d:d5:d3:58:e0:85:99:8a:26:37:b5:c8:
b4:68:b0:87:50:ee:7a:37:20:b3:1e:03:5b:ed:32:
56:9c:8a:88:f0:27:a6:80:78:0d:3b:a1:01:28:7d:
7d:1f:9c:9b:19:b5:4c:37:a6:37:37:b5:3c:b1:a0:
47:ae:90:33:29:b6:5a:aa:43:d7:3a:53:8f:c6:03:
11:9a:5f:63:2b:b1:55:aa:d4:5a:ea:b2:e5:bd:d2:
e6:a1:9c:7a:7b:01:4f:2d:be:06:d3:26:ab:82:89:
57:6d:be:27:6c:8a:07:1e:01:2f:39:3c:a1:9c:b4:
a0:53:0f:5a:a6:0d:92:01:1d:e3:8d:9c:1c:4d:8b:
34:38:e0:29:7a:d0:9f:92:ac:8f:a0:f1:33:b6:d8:
43:29:bb:07:3d:ba:2d:e7:6b:66:44:16:22:ac:c7:
f3:07:52:46:ed:5e:ab:8f:60:b4:3f:ef:b0:49:c0:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:EF:7E:1E:02:9E:FF:BA:CC:75:A9:6E:6C:0C:F6:5A:1F:3D:CA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cbvvfh4Cnv-6zHWpbmwM9lofPco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.63.0/24
189.31.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ac:0a:ed:b7:23:c6:72:ab:80:e6:6d:a6:fb:34:e8:35:49:
ab:6e:f2:f2:ba:3a:5f:de:c2:7e:01:c1:cc:e9:ca:16:c0:9c:
5a:b3:aa:1c:0a:e2:f9:57:66:9a:1b:be:00:3e:42:c6:fc:d3:
9a:8d:72:33:56:f2:5d:e7:7d:59:1d:99:25:d0:01:1a:30:76:
58:05:c6:32:14:cf:ce:03:4c:eb:19:4e:99:57:37:9c:56:08:
12:fa:d7:13:41:dc:9c:f4:6f:80:58:89:61:a4:38:08:08:89:
63:f6:ba:2a:56:3e:08:58:de:15:d0:bd:7a:e0:14:f4:44:78:
03:4c:00:fd:08:63:eb:91:35:2d:51:ca:e8:a7:6d:a3:db:60:
6e:d1:d7:d1:d5:88:26:8c:7d:57:b2:cf:e1:c5:d0:9a:7b:97:
38:7c:34:de:5a:df:33:ba:ae:4e:df:07:c0:69:25:c3:14:5b:
5e:cf:55:a1:50:73:ed:cd:d9:de:60:4d:ca:8b:89:5d:59:78:
f2:8d:22:19:f8:1f:bd:30:b9:23:a0:23:78:de:b0:fd:67:76:
5b:19:64:c6:98:78:36:da:dd:72:81:33:04:45:3a:7a:61:02:
50:a8:74:9e:3c:56:da:25:1c:58:5d:b1:f0:85:60:99:48:ed:
d4:e1:da:c7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ85GPJ5fH/N7laPgVdLUDXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNzA2MjAyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWJiZWY3ZTFlMDI5ZWZmYmFjYzc1YTk2ZTZjMGNmNjVhMWYzZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxOTcWu4rc5HoZNmcqHRSio7zzl2
mVJF3RVJwoqTmcGWPqKifZyV0trS5akpBx6U1mXQzoVs9CHOUgQygUz10Bz1bBo3
dzFRBk7nUtUt1dNY4IWZiiY3tci0aLCHUO56NyCzHgNb7TJWnIqI8CemgHgNO6EB
KH19H5ybGbVMN6Y3N7U8saBHrpAzKbZaqkPXOlOPxgMRml9jK7FVqtRa6rLlvdLm
oZx6ewFPLb4G0yargolXbb4nbIoHHgEvOTyhnLSgUw9apg2SAR3jjZwcTYs0OOAp
etCfkqyPoPEztthDKbsHPbot52tmRBYirMfzB1JG7V6rj2C0P++wScB3qQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHG7734eAp7/usx1qW5sDPZaHz3KMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvY2J2dmZoNENudi02ekhXcGJtd005bG9mUGNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvQw/AwQA
vR/dMA0GCSqGSIb3DQEBCwUAA4IBAQCwrArttyPGcquA5m2m+zToNUmrbvLyujpf
3sJ+AcHM6coWwJxas6ocCuL5V2aaG74APkLG/NOajXIzVvJd531ZHZkl0AEaMHZY
BcYyFM/OA0zrGU6ZVzecVggS+tcTQdyc9G+AWIlhpDgICIlj9roqVj4IWN4V0L16
4BT0RHgDTAD9CGPrkTUtUcrop22j22Bu0dfR1YgmjH1Xss/hxdCae5c4fDTeWt8z
uq5O3wfAaSXDFFtez1WhUHPtzdneYE3Ki4ldWXjyjSIZ+B+9MLkjoCN43rD9Z3Zb
GWTGmHg22t1ygTMERTp6YQJQqHSePFbaJRxYXbHwhWCZSO3U4drH
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:40 2026 by rpki-client