Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rBN8FAeFOpvhKB-tfStrLSvFxRU.roa
File: rBN8FAeFOpvhKB-tfStrLSvFxRU.roa (raw, json)
Hash identifier: 9VBVQ9dG8dxEkj5WteTFq2yDBcsAICGlqw2rMhIPEXQ=
Subject key identifier: AC:13:7C:14:07:85:3A:9B:E1:28:1F:AD:7D:2B:6B:2D:2B:C5:C5:15
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0D94248089414C86CAAEE8AA50CF003E8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rBN8FAeFOpvhKB-tfStrLSvFxRU.roa
Signing time: Fri 25 Sep 2026 15:49:54 +0000
ROA not before: Fri 25 Sep 2026 15:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 189.12.48.0/24 maxlen: 24
189.75.182.0/24 maxlen: 24
200.102.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:42:48:08:94:14:c8:6c:aa:ee:8a:a5:0c:f0:03:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 25 15:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac137c1407853a9be1281fad7d2b6b2d2bc5c515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:df:f4:a7:b0:64:b6:7e:f3:d2:1a:9d:2a:
20:37:61:71:ce:98:d5:e5:27:02:cd:22:d9:12:14:
89:a1:60:af:f2:e9:26:bf:45:c0:36:4a:61:19:03:
ab:4d:8e:95:4c:7e:76:7a:fb:f3:52:1b:38:be:f0:
65:f0:b2:d3:85:06:3d:9a:46:e5:40:43:fe:69:1d:
2f:62:8f:73:63:90:35:c8:40:36:c1:cb:02:75:99:
16:e2:68:15:65:17:55:20:d7:79:d2:64:a8:91:be:
18:43:b5:b8:47:e7:6c:21:27:f6:f2:ec:75:89:94:
32:21:6d:cc:76:b2:fd:63:be:97:52:6f:07:51:79:
d2:b9:c9:5c:ec:45:81:0c:7d:4a:34:76:6b:48:f3:
ed:65:0d:6e:11:7a:f0:16:99:21:1d:e6:92:ef:aa:
e3:70:bd:a2:8f:b6:37:3b:b4:43:12:10:6f:d7:49:
42:e8:c6:f4:17:fe:ee:0e:bc:f7:7f:2f:f6:e3:63:
86:52:9b:f0:bd:1b:45:c7:2f:40:94:b1:73:2c:e9:
35:cd:3b:72:82:1a:6d:23:40:97:3d:de:94:d2:6c:
38:4a:02:f0:87:84:2a:1e:2d:c8:64:40:50:87:73:
2d:45:c5:58:1d:72:66:39:1a:78:90:c4:45:08:65:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:13:7C:14:07:85:3A:9B:E1:28:1F:AD:7D:2B:6B:2D:2B:C5:C5:15
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rBN8FAeFOpvhKB-tfStrLSvFxRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.48.0/24
189.75.182.0/24
200.102.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a1:2b:67:db:77:ae:66:3a:bd:4f:d3:f7:3c:56:fb:06:17:
ed:3a:aa:37:f8:5a:e0:96:c6:45:78:21:6b:0c:27:b6:bb:2f:
4c:f1:f4:90:cd:4e:02:d8:32:1f:0f:9c:45:ca:fc:60:05:74:
64:fa:db:12:6f:33:75:74:e1:9b:9a:b0:4d:79:dc:93:5c:87:
7b:5e:df:cc:98:ef:7b:b1:46:a8:09:a5:b6:c6:fb:37:2e:f0:
04:83:78:b6:19:45:d3:e5:8f:64:62:d7:2e:36:60:ce:b6:7b:
f5:ae:dc:5d:05:a5:b9:d5:f9:75:c8:cc:54:68:e9:2d:09:82:
cb:c3:38:3b:18:86:44:f2:32:54:af:94:f9:3f:07:af:e0:ae:
e4:1d:ea:cc:ce:5f:7c:d5:b8:28:97:53:f7:4d:ff:63:84:ec:
9a:b5:02:ee:8d:3c:48:a7:fd:39:62:a8:a3:d9:6d:b1:f5:5b:
71:fa:1f:de:dd:90:3f:00:85:1c:61:5d:75:38:e0:4c:04:0b:
f5:96:55:c5:49:77:65:37:32:bd:38:a5:10:ef:a2:57:72:5a:
77:91:64:f9:61:95:4a:11:d5:9b:f3:70:dd:04:99:a1:4f:7a:
b4:76:16:9b:b0:df:fd:2d:a8:3c:18:fb:97:1b:69:12:18:3d:
84:93:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:57:49 2026 by rpki-client