Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gOKOIjraVXjlcn7b3NKuNgyK76I.roa
File: gOKOIjraVXjlcn7b3NKuNgyK76I.roa (raw, json)
Hash identifier: kR9qj414z1T7GICIBIY56f+9ghxrgPMvCfazOp/gzFY=
Subject key identifier: 80:E2:8E:22:3A:DA:55:78:E5:72:7E:DB:DC:D2:AE:36:0C:8A:EF:A2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F47667916376FD2A5DCA8120F94006E9E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gOKOIjraVXjlcn7b3NKuNgyK76I.roa
Signing time: Thu 09 Jul 2026 15:02:05 +0000
ROA not before: Thu 09 Jul 2026 15:02:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33355
IP address blocks: 191.44.28.0/24 maxlen: 24
191.219.27.0/24 maxlen: 24
200.102.176.0/24 maxlen: 24
201.11.226.0/24 maxlen: 24
201.24.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:66:79:16:37:6f:d2:a5:dc:a8:12:0f:94:00:6e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 9 15:02:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80e28e223ada5578e5727edbdcd2ae360c8aefa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:24:e9:40:b4:9c:c7:5b:d2:a2:f4:1f:50:
7f:05:c6:96:b7:61:d2:f5:16:0f:46:0e:c4:cc:22:
98:e2:5a:bb:5b:e3:cf:d5:19:81:b3:67:d7:6e:fb:
bc:e2:8a:4a:d8:6d:35:7a:b1:5a:c9:15:76:41:ea:
73:6c:87:35:e5:64:60:c7:4a:f0:7d:c5:3a:64:aa:
55:e4:06:95:4a:b7:22:11:d7:2f:ee:b5:db:3f:83:
d6:58:78:bd:e7:0e:1c:fd:3d:e2:21:91:6d:84:58:
6b:cf:a1:ef:3b:53:40:b0:89:99:c7:1b:f2:6e:4b:
05:66:ad:de:44:10:ee:ef:c4:6f:35:82:46:a4:d7:
a8:de:e5:95:87:14:25:4c:45:bc:dc:1c:8b:87:fb:
90:a2:e1:70:8c:5b:ed:06:a4:e8:f8:7f:0a:ba:22:
7a:76:36:ed:93:02:f9:c4:0f:5b:e9:e7:d3:da:a6:
98:02:c7:64:d7:c9:f0:9b:99:65:7c:0b:aa:66:37:
6d:ff:fb:ec:94:9a:28:46:1e:0f:30:36:d9:34:15:
89:56:57:b1:2a:45:e0:ed:00:52:a0:9a:f2:46:d6:
11:34:dd:d8:51:5f:b6:3a:2e:92:60:0d:5a:b1:7a:
a9:47:fd:5d:ec:db:75:63:1e:45:54:32:8d:b3:9a:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E2:8E:22:3A:DA:55:78:E5:72:7E:DB:DC:D2:AE:36:0C:8A:EF:A2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gOKOIjraVXjlcn7b3NKuNgyK76I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.28.0/24
191.219.27.0/24
200.102.176.0/24
201.11.226.0/24
201.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d1:1c:66:2f:7a:eb:dd:af:4c:54:d7:71:26:ef:f8:8f:63:
fd:c2:d0:51:59:a4:f6:ec:c5:e5:67:94:f8:da:03:1a:1b:c3:
32:80:79:d3:0b:27:02:b4:bb:0e:7e:b2:f7:58:39:12:70:5f:
c7:99:3b:21:12:70:18:5d:8f:21:25:4e:78:2e:b3:88:fc:89:
19:81:cb:d2:98:e2:d4:f9:71:df:ba:fc:05:7a:0a:8a:70:17:
a8:08:31:06:c0:bd:7a:c6:a8:ed:b1:93:29:5f:d5:02:79:79:
e9:bb:a6:c6:4e:6d:99:7d:a9:95:88:69:12:45:01:6f:da:da:
4d:76:a8:e0:3f:88:b5:4b:bc:71:68:26:ad:6d:7c:0c:20:15:
e0:c3:72:d1:cc:2e:51:66:e5:13:95:ce:27:28:ec:c2:58:b5:
c6:b1:c2:69:88:f6:95:9d:20:a4:42:c5:61:d5:d3:c0:d9:34:
07:c0:e9:ab:4f:8c:11:a6:3b:1d:14:56:77:0e:c4:c6:fb:ea:
89:c3:00:3a:1f:26:29:2c:81:ff:d3:dc:41:de:6b:a1:b1:75:
49:2c:3d:4b:18:a1:95:c4:aa:1e:dd:41:d2:36:03:a5:52:bb:
28:38:c1:96:e0:fb:56:61:71:36:c2:19:36:48:0f:2a:a0:bd:
47:51:c8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:01 2026 by rpki-client