Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/s1nsbtuMBfQSx4RMtdMsd7MWny4.roa
File: s1nsbtuMBfQSx4RMtdMsd7MWny4.roa (raw, json)
Hash identifier: HoeYiWYktkd1k9I+9WxlUXyjcbhJh5I1fuk16doItMk=
Subject key identifier: B3:59:EC:6E:DB:8C:05:F4:12:C7:84:4C:B5:D3:2C:77:B3:16:9F:2E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F62081355DCBA1648301FE946B6784A5C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/s1nsbtuMBfQSx4RMtdMsd7MWny4.roa
Signing time: Tue 14 Jul 2026 19:08:44 +0000
ROA not before: Tue 14 Jul 2026 19:08:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27176
IP address blocks: 43.242.138.0/24 maxlen: 24
124.158.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:62:08:13:55:dc:ba:16:48:30:1f:e9:46:b6:78:4a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 14 19:08:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b359ec6edb8c05f412c7844cb5d32c77b3169f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:5c:c4:f5:b9:23:45:80:47:6a:a2:a1:9c:
5a:40:2d:a5:a6:41:76:ae:d7:81:89:13:6b:f7:0c:
0f:7b:03:d0:c9:d8:25:73:b6:4e:5b:dd:6f:0f:a7:
f5:fa:25:d2:50:8c:73:bd:c7:25:d4:47:24:f6:15:
7b:a6:10:a9:68:bf:5b:58:ce:15:ba:43:5a:73:2d:
1e:15:9d:de:92:a8:87:04:81:1e:c1:7b:e5:6e:ac:
b4:a6:25:ee:f2:40:7e:ad:2a:7c:13:52:82:af:01:
52:8e:e1:3b:ae:ab:3c:3a:b5:fb:08:e5:6f:26:09:
ce:33:45:b1:38:19:d8:3c:d8:ee:6a:c6:05:a8:59:
98:2a:4a:2f:cb:74:2c:84:f9:3c:bc:31:53:2c:0a:
57:15:5f:07:e4:3b:ba:0b:1b:a1:be:2b:e7:77:bc:
9d:c0:77:23:6e:4f:46:7b:1a:a9:28:73:d3:3e:36:
26:62:21:29:35:6b:cf:04:04:49:d7:67:eb:6f:78:
b7:6a:79:15:27:87:fa:42:b0:fe:d4:3b:5e:b2:c2:
f5:6a:0b:ae:47:f6:cb:3c:64:64:67:87:cf:61:ee:
b0:4f:e8:ef:f2:34:47:8b:ee:20:32:ca:09:7f:78:
42:06:c9:e4:1b:9c:13:88:f6:13:82:b0:13:a1:9b:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:59:EC:6E:DB:8C:05:F4:12:C7:84:4C:B5:D3:2C:77:B3:16:9F:2E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/s1nsbtuMBfQSx4RMtdMsd7MWny4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.242.138.0/24
124.158.112.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:ef:9f:79:7e:d5:7f:11:88:f2:a4:c8:4c:a1:72:15:1a:92:
94:78:03:b6:cd:19:4e:eb:68:12:3f:44:28:d4:f5:02:c7:7e:
06:61:cc:b8:cf:e1:3e:90:e6:10:64:95:85:49:56:04:50:13:
a2:f5:b6:b4:e9:07:1c:7d:4a:68:13:ed:15:68:d2:d6:84:26:
ed:d3:cc:b8:e3:db:33:5d:7d:e4:50:08:73:4a:ff:10:2c:5c:
91:a1:7b:50:3c:6a:89:3e:59:93:66:1b:a5:6f:06:87:2d:b0:
0e:5f:54:8b:40:39:d7:1f:b4:e2:e1:a5:da:0a:4b:86:3f:c8:
25:be:39:f0:80:46:ec:d8:09:07:46:3d:50:01:3b:9b:54:58:
ed:e3:35:bb:c1:78:81:86:96:ea:34:7f:88:af:e4:2e:7e:bd:
38:5e:5f:64:fc:1d:37:40:68:e5:99:25:3b:1d:b6:f6:dc:05:
cd:88:db:fc:8d:ba:b9:5e:1a:8f:96:de:95:ff:f0:07:45:6b:
0f:28:75:7b:e4:c7:91:f3:69:19:0b:6d:7f:3e:d2:68:7b:e0:
f0:4f:b2:70:f1:3a:3c:bf:0d:bb:13:46:7e:88:dc:b8:0e:c6:
d8:86:fb:fb:29:c7:63:c3:81:55:5f:5b:53:73:46:00:50:a9:
fa:8a:3b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:46 2026 by rpki-client