Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/R4wz-DPsEtBGMKdUECQ6vl-JSFI.roa
File: R4wz-DPsEtBGMKdUECQ6vl-JSFI.roa (raw, json)
Hash identifier: f4U2uVQCtYKWzm3PnGQn0gIj6kzrK+emrL1YzWFlOcU=
Subject key identifier: 47:8C:33:F8:33:EC:12:D0:46:30:A7:54:10:24:3A:BE:5F:89:48:52
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A13B15E63272DBB6C9CFF23EEB77DE576A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/R4wz-DPsEtBGMKdUECQ6vl-JSFI.roa
Signing time: Wed 14 Oct 2026 15:44:13 +0000
ROA not before: Wed 14 Oct 2026 15:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218601
IP address blocks: 191.217.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:15:e6:32:72:db:b6:c9:cf:f2:3e:eb:77:de:57:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 14 15:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=478c33f833ec12d04630a75410243abe5f894852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:37:fd:d7:f9:9e:08:f1:22:b3:e1:24:bf:
4b:de:f2:f8:bf:44:8a:33:c3:27:e6:57:66:39:1d:
b6:c8:e6:51:fe:e4:23:eb:2e:1d:6c:1b:8b:2f:ed:
09:b2:d3:f9:5d:2c:d5:be:08:42:24:4d:27:47:75:
83:5e:95:c9:27:87:cc:3d:e2:56:5b:fa:c1:03:0a:
dc:f1:2f:71:62:cc:67:e2:56:14:fb:35:bb:12:03:
e2:f4:e1:b6:4e:c0:e8:a4:22:a8:35:43:90:94:c5:
d0:9a:f9:4d:3d:05:c1:c1:80:12:1e:27:4c:0f:83:
86:2a:8f:dd:53:9a:c4:25:05:ef:3f:50:cb:9e:d4:
d6:bf:0d:c0:6d:a5:0b:ad:83:5b:bf:a9:2f:a4:d5:
b0:09:f9:72:cc:99:e0:d3:3f:f2:63:ee:99:c8:7e:
c0:ca:7d:6f:8d:69:2e:ec:69:45:b2:e7:86:0e:5a:
15:f0:fd:26:61:3e:d5:30:49:c2:96:d9:e3:7e:2d:
76:57:39:6d:07:86:96:69:25:81:79:77:a0:74:e9:
95:71:51:fd:1c:6f:65:5d:6f:af:a0:cd:56:ef:88:
40:1c:0d:b3:68:59:bf:1c:03:67:c3:86:54:8e:6d:
fd:06:0f:fa:c5:00:c8:24:11:2a:55:d7:c7:3c:f3:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8C:33:F8:33:EC:12:D0:46:30:A7:54:10:24:3A:BE:5F:89:48:52
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/R4wz-DPsEtBGMKdUECQ6vl-JSFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.164.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:33:22:9e:e2:ab:19:68:15:c7:ca:7d:26:c4:31:75:69:9a:
1f:e7:66:99:05:09:c0:f0:96:5c:a4:b1:ba:6a:e7:51:c6:02:
8f:01:a8:a3:f0:8f:b3:4a:91:ca:d3:8f:9d:eb:37:ea:2b:81:
3b:2e:d2:d2:e0:b0:e2:bc:ee:5f:7f:d6:a0:97:30:17:c7:42:
9c:e8:be:aa:2c:7d:5d:58:d1:c4:8f:4c:4d:9c:5e:91:2f:76:
61:6e:5b:ad:53:16:43:82:af:d9:b5:91:d3:6f:49:17:0d:54:
d7:8b:4e:aa:2d:27:03:98:09:aa:10:7a:94:2b:02:2f:e1:a0:
76:ee:8a:11:d6:c6:03:9e:68:5e:17:0c:b0:f4:63:3d:f9:30:
ea:6d:bf:93:fe:e9:4d:dd:62:86:4e:42:3f:19:76:5f:ff:50:
4c:1a:6d:00:c7:15:be:d2:b2:21:d4:b9:31:e2:fd:00:a2:c5:
03:0b:bd:23:4f:56:b8:e2:54:41:16:30:49:cf:74:62:b4:d5:
12:86:c5:29:8e:39:fd:14:c5:64:b4:cb:4f:45:e1:12:e0:03:
b8:e0:6c:ca:eb:2e:94:65:96:53:b4:b0:ee:20:a4:3b:d5:ee:
b7:3c:49:b8:72:b5:1a:fc:cd:0c:71:d4:5c:e5:56:b8:94:5b:
ed:ce:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:24 2026 by rpki-client