Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/o40W3gmTJKdn5fewA_CiCUdQJF8.roa
File: o40W3gmTJKdn5fewA_CiCUdQJF8.roa (raw, json)
Hash identifier: oWm4UioLvHVo45qViQbrsN7t62bbEmStnYCvvU94cGw=
Subject key identifier: A3:8D:16:DE:09:93:24:A7:67:E5:F7:B0:03:F0:A2:09:47:50:24:5F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1D09803FAF7975B253A6964D2FC1D02AC
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/o40W3gmTJKdn5fewA_CiCUdQJF8.roa
Signing time: Thu 12 Nov 2026 16:29:45 +0000
ROA not before: Thu 12 Nov 2026 16:29:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 191.217.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:98:03:fa:f7:97:5b:25:3a:69:64:d2:fc:1d:02:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 12 16:29:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a38d16de099324a767e5f7b003f0a2094750245f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:92:bd:b2:b2:a7:e0:de:8c:ed:e8:e4:ca:
03:e7:5f:2d:f6:4b:33:27:65:c3:08:0b:0e:a0:ac:
b8:1e:95:53:c1:02:f2:86:18:c7:61:40:02:f9:2a:
c9:d2:fe:a8:7b:19:54:e1:46:f2:8b:09:c4:c8:3b:
e2:fd:56:7c:fc:e3:be:98:77:fc:41:03:ee:81:23:
f7:6a:a4:41:c1:39:8a:e9:d8:18:b6:1d:a0:4f:23:
db:c7:51:c3:9e:8a:fb:24:71:2d:a6:0c:cb:b5:85:
ad:cc:9e:00:51:dc:58:b6:1e:3b:e2:b7:11:1a:bf:
ef:82:5a:42:90:e3:25:f8:3f:64:a8:bf:29:65:03:
14:0f:7b:69:52:e7:f2:2e:82:4a:47:46:62:20:4d:
6e:4c:0a:32:14:da:c0:56:08:78:4f:5c:0e:ad:75:
00:83:9a:8d:b1:97:a9:5f:bd:59:f6:7d:8f:e3:3c:
29:8e:b6:b0:eb:15:9f:5f:ec:6c:ad:ee:0a:15:18:
4e:d2:5c:ed:db:4a:74:20:d8:38:54:c4:e8:1a:a1:
09:26:91:5f:b4:f6:0b:4a:02:aa:d6:1f:e1:a1:a1:
b3:13:e2:60:ff:59:d0:a0:fc:57:aa:86:aa:ac:8d:
18:a7:14:5b:aa:59:19:c0:cf:38:74:e2:ca:30:8b:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8D:16:DE:09:93:24:A7:67:E5:F7:B0:03:F0:A2:09:47:50:24:5F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/o40W3gmTJKdn5fewA_CiCUdQJF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.164.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c0:c1:42:8f:95:47:7e:ba:38:f8:d8:ce:ea:07:76:26:bb:
d5:16:fe:e1:78:c0:38:39:ab:6d:29:18:3e:4e:8f:5c:fa:60:
08:9c:39:37:84:eb:1a:a0:b9:1b:b3:7d:14:ec:00:c3:29:02:
3e:39:fc:85:8b:21:0e:c6:ee:89:69:6c:72:e5:24:ad:30:f9:
69:a8:92:fa:dd:3c:48:a4:72:f3:87:a4:31:aa:71:1f:14:3d:
04:71:c4:83:db:7d:19:59:d7:ba:98:24:ff:54:b4:38:39:6a:
6b:18:9c:12:c0:06:ed:a2:23:eb:97:7c:e2:9c:1d:4a:8f:3c:
a2:2e:92:c9:40:20:8c:05:be:50:43:b0:91:2e:9d:69:83:33:
a3:ed:b5:2c:8a:52:59:94:30:e9:79:7c:7c:f5:31:2d:59:91:
90:69:20:2b:de:7c:b8:cf:ce:a1:b9:6d:10:b5:5a:29:48:93:
28:19:8c:64:34:19:52:c4:60:79:4e:3b:4c:31:ee:34:fe:5d:
9a:0b:2f:2d:b8:c7:52:32:a3:89:65:b8:20:93:5c:e8:b1:1a:
bc:d8:f7:27:d8:11:af:87:f0:2d:82:70:65:a8:b6:98:4a:87:
c8:77:de:21:1f:e4:71:40:6c:03:a5:21:be:97:e7:a3:62:89:
e2:d3:4f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:06 2026 by rpki-client