Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-v8gNltBcJXX_RxiigGyGM9gmBU.roa
File: 1-v8gNltBcJXX_RxiigGyGM9gmBU.roa (raw, json)
Hash identifier: PfQPm0xxhrQMyLxjyAXlgZzh/We17qFyB+kunfKAfH8=
Subject key identifier: FA:FF:20:36:5B:41:70:95:D7:FD:1C:62:8A:01:B2:18:CF:60:98:15
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A062BE6940330C4B4E97B61716DFDC1625
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-v8gNltBcJXX_RxiigGyGM9gmBU.roa
Signing time: Wed 02 Sep 2026 15:30:40 +0000
ROA not before: Wed 02 Sep 2026 15:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211407
IP address blocks: 191.222.34.0/24 maxlen: 24
191.222.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 04:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:be:69:40:33:0c:4b:4e:97:b6:17:16:df:dc:16:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 2 15:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faff20365b417095d7fd1c628a01b218cf609815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:56:d7:a2:d2:c6:0b:d1:1d:41:87:0a:94:6a:
8b:65:e2:af:3a:e0:d8:bb:58:b4:b6:42:a2:45:02:
50:6e:72:0c:bc:fb:81:bd:4e:e4:69:0b:f3:d2:ff:
5b:cc:3f:a8:44:d0:c4:65:a3:8f:d6:80:a1:29:6a:
e8:85:9a:a2:57:e5:d1:80:78:6e:ec:9d:86:b0:34:
ff:01:50:d8:1f:c2:e2:5c:9e:44:37:4e:d0:73:14:
5d:12:93:37:1d:36:af:81:96:e3:d9:d3:e2:95:8b:
b7:11:d5:93:21:90:c9:d9:e0:2e:ea:ef:3c:9c:7b:
6b:b7:cf:98:dd:a6:68:bd:ef:a7:f1:c0:22:4a:b5:
92:d4:c2:23:ae:96:1e:ff:83:ce:28:ab:48:81:a5:
c2:08:3b:4a:09:30:54:84:64:cd:7d:59:47:f9:ec:
94:52:f3:ef:57:87:df:c5:b6:8a:94:f0:e8:2d:70:
e4:15:a6:19:3c:ab:fb:21:1c:f9:5f:36:86:8e:39:
8f:e8:0a:10:9a:2a:b2:ff:8f:4a:a1:2b:14:bf:20:
90:3b:4f:ce:75:4e:f5:0f:1a:fa:9c:d4:d9:28:23:
70:11:9a:fd:43:ec:2e:fa:52:96:a1:30:10:85:a9:
9e:01:86:75:fd:c8:ce:16:30:7a:e2:82:bb:8a:bb:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:20:36:5B:41:70:95:D7:FD:1C:62:8A:01:B2:18:CF:60:98:15
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-v8gNltBcJXX_RxiigGyGM9gmBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.34.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:4a:be:ef:24:ec:9a:d2:0a:55:7a:d1:71:27:b4:96:fd:04:
e9:1a:d7:f3:2a:2f:32:78:56:e5:7a:ff:2a:66:9a:60:24:4a:
62:ad:6f:f0:26:10:37:e3:86:39:6c:a6:3c:91:66:01:22:ae:
32:0e:1e:d3:a2:d4:b1:0f:2e:4c:7c:e8:0b:d5:16:3c:4a:b8:
cf:52:2b:e8:87:c2:c2:cf:57:cc:6f:ba:13:de:ce:32:ec:9e:
87:71:25:eb:1a:a4:f6:db:03:f7:ec:66:58:95:83:27:3b:73:
56:48:33:8d:d5:0a:1f:c7:4e:92:e5:79:b0:f0:d4:fb:5f:2e:
42:0f:ec:79:71:2b:d7:b4:80:eb:47:9d:d6:bc:52:5a:3d:02:
e6:1b:7a:49:eb:f4:18:3e:74:03:0b:8e:2c:9c:2a:65:91:2c:
bd:31:a0:b9:26:a5:22:c1:5a:a4:8c:bc:84:5d:4d:9b:c3:d0:
18:c6:95:37:6e:e8:5a:29:cb:a7:a2:ba:6e:df:79:ac:22:e1:
cf:50:b1:75:5e:24:5e:74:b2:7e:79:f9:e7:40:1e:80:43:84:
56:1f:09:64:e2:83:f3:57:11:6f:98:33:26:10:82:96:f8:48:
a0:1b:ff:3a:e3:59:ca:db:51:b2:cf:6a:95:96:26:9c:a5:94:
be:7a:8f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:23 2026 by rpki-client