Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/erT3EPp4hvrO8ENXFB1j5GxGg7I.roa
File: erT3EPp4hvrO8ENXFB1j5GxGg7I.roa (raw, json)
Hash identifier: 0aRqf5PFq2VXLuowFNsLDDPk7tqiCAoj8cyZPIj/ZjU=
Subject key identifier: 7A:B4:F7:10:FA:78:86:FA:CE:F0:43:57:14:1D:63:E4:6C:46:83:B2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F3515BC1305EF151B2FAF81A5907A8946
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/erT3EPp4hvrO8ENXFB1j5GxGg7I.roa
Signing time: Mon 06 Jul 2026 01:40:44 +0000
ROA not before: Mon 06 Jul 2026 01:40:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134452
IP address blocks: 200.181.95.0/24 maxlen: 24
201.11.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:35:15:bc:13:05:ef:15:1b:2f:af:81:a5:90:7a:89:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 6 01:40:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ab4f710fa7886facef04357141d63e46c4683b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:c5:f3:14:c7:e0:f0:c5:6a:e8:da:bf:10:
b0:24:8a:c0:3f:e1:70:ad:e2:0c:a6:25:e5:60:ae:
4c:6b:cc:14:49:e3:1a:e3:ba:b5:3a:b3:73:b7:36:
25:e2:33:da:b4:5e:9f:7d:7f:e2:f9:61:b3:36:2c:
5b:51:cd:ca:7f:8b:f5:5a:6d:60:fd:4f:35:53:f6:
44:18:fe:2f:07:79:a3:97:ff:db:e3:8a:cd:c6:b2:
d7:21:ca:41:f2:1b:04:39:4a:01:ff:d5:9f:ed:c1:
47:74:3c:fb:69:21:61:1c:de:59:a4:47:ef:3e:2e:
58:e6:97:03:00:f3:2d:d2:79:23:2a:03:a1:83:d0:
59:8f:b7:23:d3:f9:6c:1f:18:17:3d:bd:f7:af:7c:
05:65:45:93:79:94:da:c7:76:9b:ac:ef:1e:cf:3b:
7a:fd:af:00:a8:5a:0d:1b:b1:75:c1:c9:4f:02:76:
6d:21:3a:ff:26:3c:c6:fc:3b:ce:69:f8:b3:b6:4c:
89:24:fd:47:20:76:e1:d2:0e:5a:a0:e8:ef:5b:1c:
56:f3:88:3f:ba:c5:29:09:43:16:8e:3b:22:8c:7d:
3b:17:39:b6:27:a0:14:26:38:b6:ec:d0:28:e0:f0:
59:c6:94:9f:8b:84:4c:3a:27:eb:ca:9b:89:d4:64:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B4:F7:10:FA:78:86:FA:CE:F0:43:57:14:1D:63:E4:6C:46:83:B2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/erT3EPp4hvrO8ENXFB1j5GxGg7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.181.95.0/24
201.11.229.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:69:f2:05:cf:01:eb:dd:ca:4c:f7:f5:a1:d0:67:7a:f3:7e:
74:cd:4c:05:a1:9a:13:36:38:e1:ab:b6:f1:51:72:bf:c1:1b:
fe:e6:a8:2e:60:b6:17:dd:cf:dc:89:c3:d2:b5:f2:c1:32:f1:
52:26:59:1d:c4:86:15:90:b8:a3:fc:dd:65:cd:e5:8d:b0:89:
e5:22:c8:33:02:7c:1d:61:5e:f6:b6:c2:c5:a1:cd:52:79:9a:
f4:0d:bd:be:15:f6:73:cc:d5:fd:02:e0:a1:32:1f:4d:a2:0d:
49:b4:a0:a2:72:6f:e7:9b:3e:4b:4d:b6:6d:fd:af:54:92:bc:
4f:17:d7:83:ef:f7:2b:76:cc:85:83:2e:2e:34:c9:7c:f1:01:
ff:8c:50:e4:d1:66:9c:f6:38:9b:da:db:69:9c:fa:f3:99:29:
a7:c3:f2:66:45:a6:73:11:f4:d3:22:40:f7:5c:52:e0:ab:db:
87:8e:dd:d0:1d:f8:cb:0e:81:99:34:fb:78:09:47:c8:ae:02:
7d:02:ef:c3:c5:ef:79:39:69:47:96:dd:4f:4f:04:42:0e:f4:
65:f6:84:b9:aa:5e:f0:56:e0:c0:98:30:9b:db:ad:3c:cd:18:
f8:ca:e9:1a:55:a3:12:c4:66:82:91:28:7a:67:37:b1:6a:c5:
2d:e4:6f:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ81FbwTBe8VGy+vgaWQeolGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNzA2MDE0MDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWI0ZjcxMGZhNzg4NmZhY2VmMDQzNTcxNDFkNjNlNDZjNDY4M2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09PF8xTH4PDFaujavxCwJIrAP+Fw
reIMpiXlYK5Ma8wUSeMa47q1OrNztzYl4jPatF6ffX/i+WGzNixbUc3Kf4v1Wm1g
/U81U/ZEGP4vB3mjl//b44rNxrLXIcpB8hsEOUoB/9Wf7cFHdDz7aSFhHN5ZpEfv
Pi5Y5pcDAPMt0nkjKgOhg9BZj7cj0/lsHxgXPb33r3wFZUWTeZTax3abrO8ezzt6
/a8AqFoNG7F1wclPAnZtITr/JjzG/DvOafiztkyJJP1HIHbh0g5aoOjvWxxW84g/
usUpCUMWjjsijH07Fzm2J6AUJji27NAo4PBZxpSfi4RMOifrypuJ1GQOMQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHq09xD6eIb6zvBDVxQdY+RsRoOyMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvZXJUM0VQcDRodnJPOEVOWEZCMWo1R3hHZzdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAyLVfAwQA
yQvlMA0GCSqGSIb3DQEBCwUAA4IBAQDPafIFzwHr3cpM9/Wh0Gd68350zUwFoZoT
Njjhq7bxUXK/wRv+5qguYLYX3c/cicPStfLBMvFSJlkdxIYVkLij/N1lzeWNsInl
IsgzAnwdYV72tsLFoc1SeZr0Db2+FfZzzNX9AuChMh9Nog1JtKCicm/nmz5LTbZt
/a9UkrxPF9eD7/crdsyFgy4uNMl88QH/jFDk0Wac9jib2ttpnPrzmSmnw/JmRaZz
EfTTIkD3XFLgq9uHjt3QHfjLDoGZNPt4CUfIrgJ9Au/Dxe95OWlHlt1PTwRCDvRl
9oS5ql7wVuDAmDCb2608zRj4yukaVaMSxGaCkSh6ZzexasUt5G/Z
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:48:50 2026 by rpki-client