Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i0kz4-AIlxJcHAyd7H91UWIgwKU.roa
File: i0kz4-AIlxJcHAyd7H91UWIgwKU.roa (raw, json)
Hash identifier: BQCPWynlFtZWC5KVnfB1Raf9bv0Rxlwbf67W7d7WtZo=
Subject key identifier: 8B:49:33:E3:E0:08:97:12:5C:1C:0C:9D:EC:7F:75:51:62:20:C0:A5
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F6679326C98AC9940D625832C9EB07CFA
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i0kz4-AIlxJcHAyd7H91UWIgwKU.roa
Signing time: Wed 15 Jul 2026 15:50:46 +0000
ROA not before: Wed 15 Jul 2026 15:50:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 89.106.16.0/24 maxlen: 24
89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
94.229.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:79:32:6c:98:ac:99:40:d6:25:83:2c:9e:b0:7c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 15 15:50:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b4933e3e00897125c1c0c9dec7f75516220c0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:5d:f2:50:f0:b5:66:fc:fc:5d:b7:e2:85:
f2:9a:0f:76:c5:ee:21:1b:36:6a:4d:14:bb:82:1f:
48:af:05:5e:61:51:50:95:41:d6:b7:21:10:7f:76:
3e:25:80:cb:6e:fc:fb:e7:5b:7d:c1:ea:8b:cb:a8:
28:a1:30:1c:70:06:84:0f:e5:73:c2:e4:05:a5:30:
98:1d:3a:c0:9f:23:e1:96:be:60:de:90:d6:21:46:
f1:41:c2:99:17:31:1a:72:b8:70:34:8f:e4:f0:4e:
19:f1:99:23:57:0f:8c:19:cc:7c:33:05:ee:2c:c2:
78:88:2d:14:3e:51:f6:5b:d5:a5:60:c7:c0:33:ea:
e8:03:88:59:2a:77:d8:f9:1a:21:4a:70:5b:3c:fd:
63:3d:c7:07:fb:65:de:f2:f8:af:c5:64:a1:5f:e1:
8c:36:ac:e2:68:1e:e9:6a:aa:38:8c:f4:5a:24:ce:
1d:a6:63:9e:e2:92:da:b1:ca:55:27:96:91:9a:ca:
2d:c2:19:d2:6a:99:20:29:0b:97:00:37:94:59:8c:
77:5a:6f:25:fb:84:da:25:07:62:52:07:1a:ca:aa:
18:d2:c9:b1:ab:dc:7d:13:7a:4b:95:b0:58:38:0a:
c0:01:a6:b0:9b:4c:44:a5:ac:57:8a:96:7b:5d:f8:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:49:33:E3:E0:08:97:12:5C:1C:0C:9D:EC:7F:75:51:62:20:C0:A5
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i0kz4-AIlxJcHAyd7H91UWIgwKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.16.0/24
89.106.18.0/24
89.106.21.0/24
94.229.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a9:92:fe:16:a2:66:a2:32:11:6d:56:ec:5d:09:17:3b:3e:
2c:56:d3:16:1e:b6:e6:b6:38:6c:d3:7b:e7:43:9f:a2:9f:39:
28:1a:4b:bd:92:23:70:bd:20:18:df:cb:06:b9:4a:6b:9f:ca:
99:1d:61:3c:89:a7:0b:89:4a:6e:7f:22:26:89:63:65:3b:72:
7a:f0:57:a4:94:51:62:3c:24:3a:80:ed:3c:54:f1:4b:04:a2:
79:ce:1c:53:29:18:26:1f:11:30:ea:ec:89:af:6b:f1:30:55:
36:dd:d9:64:96:4a:d0:b7:c0:d8:37:35:bc:28:44:f9:9c:c9:
65:28:08:2a:3a:5c:ba:1d:6a:95:61:49:7b:59:19:2b:03:5e:
40:76:03:0c:85:00:63:f5:2a:41:2d:e3:60:a4:bb:cf:80:03:
eb:85:f3:fa:2e:e3:21:4a:2c:1f:d4:ec:89:7b:f1:32:68:8c:
80:da:e5:c8:f1:32:23:63:1d:bf:7f:d4:c7:79:c1:b9:ec:86:
10:da:d4:c8:2a:01:73:c3:3d:44:63:e5:29:7d:96:35:7c:aa:
de:b9:4f:47:be:b1:3b:71:4e:79:c0:7f:83:f8:8a:76:1c:ff:
2a:6f:5f:8b:b8:eb:dc:20:f6:00:08:c3:1b:78:e9:91:b5:25:
26:0e:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:11 2026 by rpki-client