Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uXnNhHgBptcJk3cCxIijXrHep3A.roa
File: uXnNhHgBptcJk3cCxIijXrHep3A.roa (raw, json)
Hash identifier: yvxMwA63izOXNOWF3JnXmblqcpwk6S/DHzZoZbMHXow=
Subject key identifier: B9:79:CD:84:78:01:A6:D7:09:93:77:02:C4:88:A3:5E:B1:DE:A7:70
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019ED80F194AD21935079978EC4B9807F672
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uXnNhHgBptcJk3cCxIijXrHep3A.roa
Signing time: Thu 18 Jun 2026 00:08:48 +0000
ROA not before: Thu 18 Jun 2026 00:08:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401905
IP address blocks: 77.111.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d8:0f:19:4a:d2:19:35:07:99:78:ec:4b:98:07:f6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 18 00:08:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b979cd847801a6d709937702c488a35eb1dea770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:d5:b8:eb:b1:8c:64:25:4d:d3:c9:21:40:
87:22:de:c8:b2:4b:a9:65:db:3d:4a:99:82:84:21:
e5:43:f8:a4:af:2b:17:fc:f7:18:a6:8c:80:44:b2:
36:99:15:25:8b:d8:4b:5f:d8:c9:2b:80:b6:b5:84:
35:81:ba:a3:95:ce:3c:f7:b9:da:ea:49:c7:38:f9:
ed:a9:40:1f:5b:45:9c:fe:10:ea:92:ba:8d:b7:33:
df:e9:ac:03:a9:62:d8:7e:1d:6e:2f:c3:46:61:df:
1f:f2:2b:a5:11:81:d6:0a:75:69:ab:41:2c:95:48:
f7:cf:52:b8:7a:bf:c6:39:3f:40:35:a5:7a:ad:d2:
f9:40:a3:e7:33:11:2a:10:46:b2:56:df:56:98:cf:
07:4d:f5:0e:48:91:38:77:4d:c2:ac:d4:b8:13:a3:
0c:fa:7c:57:41:7a:81:64:a5:1b:b5:9a:b1:e0:02:
4e:e1:5e:3e:65:01:3a:c5:54:65:d4:cc:1a:6a:f9:
db:72:cc:3b:99:d7:28:74:45:b3:64:de:54:28:dc:
c7:5e:01:5d:7a:6a:1b:c4:dc:3e:42:6d:fb:95:95:
d0:eb:6c:13:1b:4d:97:ec:d6:12:3f:48:24:77:bf:
51:96:ec:35:c2:46:21:30:29:9e:54:30:ee:db:47:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:79:CD:84:78:01:A6:D7:09:93:77:02:C4:88:A3:5E:B1:DE:A7:70
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uXnNhHgBptcJk3cCxIijXrHep3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.100.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:25:6b:76:b5:d8:63:a6:a9:67:5b:2c:ba:99:49:65:2e:b7:
4b:78:dd:c8:b5:0b:4e:11:14:fa:32:c2:d6:35:fc:c6:20:ef:
2e:b6:5a:33:a0:e4:3e:f6:11:17:77:12:86:cd:f9:bf:24:ba:
1f:88:7c:c0:f4:0d:d0:a2:75:21:6e:79:9c:80:3b:1e:0a:59:
10:fe:cd:a1:c4:23:3d:7a:20:e8:df:1a:6a:6f:62:dc:e0:34:
fc:b1:c0:e9:28:cf:3c:30:67:0f:cd:87:87:8f:04:29:e8:06:
08:10:cd:47:d3:ca:17:1b:45:97:34:6d:83:cc:b1:09:2a:47:
e9:4f:58:d7:0e:ca:12:c9:b8:70:0e:8f:15:66:09:3a:b2:2c:
72:e2:c3:aa:09:ff:81:dc:05:e5:d9:ef:71:58:1f:49:14:60:
cc:63:3b:1a:14:76:1b:fa:de:d6:e9:ba:75:ce:75:82:9d:8b:
db:88:12:5f:6c:6c:db:27:88:be:87:bd:b8:65:5f:ab:f7:7b:
27:17:a1:fe:ec:da:c8:3d:06:71:9f:44:41:1e:89:48:05:4c:
16:07:a5:07:ef:95:a7:91:0b:2f:b9:5d:58:01:2d:76:03:85:
8c:32:80:1a:97:2d:75:12:56:cf:51:68:c9:90:17:14:9c:69:
23:21:a1:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7YDxlK0hk1B5l47EuYB/ZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNjE4MDAwODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTc5Y2Q4NDc4MDFhNmQ3MDk5Mzc3MDJjNDg4YTM1ZWIxZGVhNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVrVuOuxjGQlTdPJIUCHIt7Iskup
Zds9SpmChCHlQ/ikrysX/PcYpoyARLI2mRUli9hLX9jJK4C2tYQ1gbqjlc4897na
6knHOPntqUAfW0Wc/hDqkrqNtzPf6awDqWLYfh1uL8NGYd8f8iulEYHWCnVpq0Es
lUj3z1K4er/GOT9ANaV6rdL5QKPnMxEqEEayVt9WmM8HTfUOSJE4d03CrNS4E6MM
+nxXQXqBZKUbtZqx4AJO4V4+ZQE6xVRl1Mwaavnbcsw7mdcodEWzZN5UKNzHXgFd
emobxNw+Qm37lZXQ62wTG02X7NYSP0gkd79Rluw1wkYhMCmeVDDu20diNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLl5zYR4AabXCZN3AsSIo16x3qdwMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvdVhuTmhIZ0JwdGNKazNjQ3hJaWpYckhlcDNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW9kMA0G
CSqGSIb3DQEBCwUAA4IBAQDKJWt2tdhjpqlnWyy6mUllLrdLeN3ItQtOERT6MsLW
NfzGIO8utlozoOQ+9hEXdxKGzfm/JLofiHzA9A3QonUhbnmcgDseClkQ/s2hxCM9
eiDo3xpqb2Lc4DT8scDpKM88MGcPzYeHjwQp6AYIEM1H08oXG0WXNG2DzLEJKkfp
T1jXDsoSybhwDo8VZgk6sixy4sOqCf+B3AXl2e9xWB9JFGDMYzsaFHYb+t7W6bp1
znWCnYvbiBJfbGzbJ4i+h724ZV+r93snF6H+7NrIPQZxn0RBHolIBUwWB6UH75Wn
kQsvuV1YAS12A4WMMoAaly11ElbPUWjJkBcUnGkjIaFg
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:26 2026 by rpki-client