Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fQAZQ7DZjeKTSIMpLu5JXyC7bTQ.roa
File: fQAZQ7DZjeKTSIMpLu5JXyC7bTQ.roa (raw, json)
Hash identifier: XE486Ahu7lkUoDPK3b8arSDgl71qvZZ9znokcvZrTko=
Subject key identifier: 7D:00:19:43:B0:D9:8D:E2:93:48:83:29:2E:EE:49:5F:20:BB:6D:34
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F32DFEE568E9B24CDE3579A67D30D1C91
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fQAZQ7DZjeKTSIMpLu5JXyC7bTQ.roa
Signing time: Sun 05 Jul 2026 15:22:44 +0000
ROA not before: Sun 05 Jul 2026 15:22:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399259
IP address blocks: 191.222.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:32:df:ee:56:8e:9b:24:cd:e3:57:9a:67:d3:0d:1c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 15:22:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d001943b0d98de2934883292eee495f20bb6d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:5b:4b:1d:1d:d7:ac:79:6d:86:8a:67:c0:
40:31:f0:e1:1b:57:f5:34:7c:59:a6:c5:3e:37:13:
30:49:e0:05:92:16:05:71:d9:5d:5e:fc:d6:14:11:
f2:d7:af:c8:b0:80:c4:e1:60:84:42:d9:b5:0f:22:
98:4f:de:ad:19:e8:77:19:50:55:d9:fc:a8:4a:e6:
55:ea:86:d5:51:69:5d:dd:49:65:d1:eb:b2:a8:b7:
50:06:06:88:7d:ac:7d:a7:13:bd:48:3c:ce:90:e8:
16:f8:62:63:f6:1c:e3:56:81:39:2d:c0:09:6e:e5:
aa:25:16:ab:ac:97:c6:c9:e2:4a:c7:f4:a4:da:e7:
7d:5f:a6:8f:4b:96:b0:29:ef:8f:33:52:f3:27:cc:
8d:5c:f3:2d:4c:e0:82:d2:45:bd:01:22:d7:d1:69:
e1:4d:1f:c1:f1:35:92:4d:27:89:aa:1f:a0:b4:23:
80:b5:0b:23:e7:48:16:1b:05:23:e7:9b:df:81:56:
fc:f9:0d:0b:d8:8e:b3:2d:56:ad:2f:a0:0e:24:ed:
7e:85:d9:9f:29:a8:61:16:5a:fd:4b:ff:38:d7:15:
b3:a8:71:20:9c:22:f5:3e:1e:6e:52:ad:25:26:f0:
76:f5:f5:73:4f:c0:af:fa:64:2c:a2:fb:5e:5c:89:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:00:19:43:B0:D9:8D:E2:93:48:83:29:2E:EE:49:5F:20:BB:6D:34
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fQAZQ7DZjeKTSIMpLu5JXyC7bTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.36.0/24
Signature Algorithm: sha256WithRSAEncryption
63:54:e4:b6:25:86:a3:03:8c:9a:40:ff:32:f5:94:c0:5a:4b:
0e:f2:08:80:cd:49:f3:eb:58:50:4b:21:53:19:7d:19:ec:ad:
09:14:df:ee:b1:43:41:f1:93:37:77:c0:18:e3:2d:de:ea:89:
bf:70:58:73:06:8f:b5:7e:dd:6c:78:57:a1:94:a3:5a:f8:92:
4f:e9:4f:0c:23:f1:f0:57:ad:e6:11:4f:fa:be:8d:b6:b7:1d:
4a:51:3e:8d:25:de:3a:d6:2e:17:a0:ce:d7:87:0b:0a:f8:c9:
68:18:1d:62:0b:2a:be:21:16:94:0b:92:a7:c9:56:92:de:13:
d8:a4:27:6c:8f:1c:0f:db:87:78:f3:44:45:65:75:ea:4c:f8:
5c:0c:1a:6a:55:5b:3c:e2:44:7b:eb:c3:86:f8:0d:19:1b:60:
e6:1b:17:b8:bd:63:50:15:d7:86:6b:18:16:4c:9a:0e:dc:a5:
f5:e9:6c:b9:c5:58:22:2d:d9:43:65:d0:c2:37:bf:89:71:44:
bd:54:aa:7b:1a:5c:a4:c6:25:bc:bf:64:a7:f5:1c:25:c9:1f:
dd:72:1d:0d:c4:7e:ee:a4:92:0b:ce:b3:02:f2:20:2e:96:b9:
81:47:77:e0:07:a8:63:9c:9f:10:c3:92:ff:62:88:ed:a8:87:
b9:23:1b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:35 2026 by rpki-client