Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FDWp0eOYrYF1ns00S141YS_h8vg.roa
File: FDWp0eOYrYF1ns00S141YS_h8vg.roa (raw, json)
Hash identifier: mUnSxZTkUejM8BDi57nAmvRyH+ZgiwlNvc2xuTmKMjE=
Subject key identifier: 14:35:A9:D1:E3:98:AD:81:75:9E:CD:34:4B:5E:35:61:2F:E1:F2:F8
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F616E4366D381BFAA9B608EB60133421F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FDWp0eOYrYF1ns00S141YS_h8vg.roa
Signing time: Tue 14 Jul 2026 16:20:43 +0000
ROA not before: Tue 14 Jul 2026 16:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136341
IP address blocks: 200.165.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:6e:43:66:d3:81:bf:aa:9b:60:8e:b6:01:33:42:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 14 16:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1435a9d1e398ad81759ecd344b5e35612fe1f2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:f8:84:aa:dc:9c:5f:46:2e:5d:89:3a:14:
30:f4:58:34:3b:c6:1c:38:be:41:67:04:da:de:93:
22:54:14:c0:66:80:59:ea:3f:fc:a2:f5:01:ed:c3:
71:04:66:40:c2:96:65:bf:df:30:41:1b:1b:eb:fc:
38:bf:d8:40:25:b2:fe:0b:83:c8:c2:18:54:6b:de:
0f:d4:34:ad:d6:78:75:33:7b:7d:33:6d:ce:ba:11:
10:04:86:00:7f:20:14:0f:a4:aa:e7:1b:3a:ab:64:
87:54:f2:8d:8f:44:36:e0:69:7c:40:e6:7e:9a:87:
fa:e8:ca:71:66:3c:01:87:1c:40:1d:8b:af:86:e1:
af:6d:0f:11:10:9e:a7:2a:4e:c5:4e:0c:38:d5:c8:
9f:b9:4d:ae:a7:58:d9:4f:86:94:1d:69:d3:6a:4a:
d3:f2:db:f4:88:20:02:c7:85:7d:3a:dc:be:3d:76:
d2:1e:48:96:9f:d9:74:f4:de:f2:e6:e9:a3:f1:b6:
03:aa:e0:fc:79:32:e6:66:93:40:ac:c8:f9:4d:69:
f3:59:55:87:25:0a:8c:7f:30:c5:34:9d:21:92:aa:
35:f3:7c:12:f6:98:6c:d6:f0:20:54:c3:97:5d:af:
b0:ff:02:41:e6:8e:64:63:d5:4c:82:59:fc:a0:24:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:35:A9:D1:E3:98:AD:81:75:9E:CD:34:4B:5E:35:61:2F:E1:F2:F8
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FDWp0eOYrYF1ns00S141YS_h8vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.165.28.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:b1:8d:84:b2:30:f7:aa:00:69:a4:8d:10:ac:b1:f8:f1:7e:
37:77:18:6b:94:03:b3:f5:1c:5a:2b:b1:9c:16:de:4a:6c:e8:
e8:19:2c:0b:31:f2:3c:32:e2:5a:38:08:a1:bd:8a:81:e8:a5:
fa:72:8f:a6:b3:7b:e3:de:f5:28:f5:9a:9b:68:a9:26:2f:71:
8c:6b:9b:c5:64:ef:7e:71:b8:ee:24:ce:0f:b9:f3:05:c2:96:
eb:ec:a3:28:50:08:2d:4d:7f:ec:66:77:cf:5e:84:9f:1d:4a:
f4:a0:5c:8e:aa:31:14:f7:70:5b:15:7e:56:39:9e:ac:b7:3a:
74:3d:42:52:4d:a9:78:0b:f1:88:24:ee:4f:6b:8c:88:c3:be:
1a:0e:22:dc:44:82:be:8c:30:d9:e8:8c:2d:57:b9:31:58:83:
2c:9c:7d:51:1a:7c:50:5e:c7:89:a1:cf:9a:8a:de:36:40:95:
84:98:21:7c:af:fa:46:b3:7e:d8:a8:be:f8:dc:91:e0:3e:39:
cd:1b:55:19:e5:e3:b9:35:11:16:a9:4e:c9:c2:4d:37:9f:30:
c8:2b:dd:42:e3:36:30:0c:74:31:a2:e5:ba:34:d9:7d:ad:1f:
eb:29:62:b9:a6:f5:4c:6a:02:a4:05:8b:b8:97:6d:30:8c:51:
08:b7:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:30:50 2026 by rpki-client